Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/c75tco63ez32KlNHktczusjx3rE.roa
File: c75tco63ez32KlNHktczusjx3rE.roa (raw, json)
Hash identifier: zeLsN4r4qA5JkwbCMXwcNvicLBNBHHzSMzb4AWYI7mU=
Subject key identifier: 73:BE:6D:72:8E:B7:7B:3D:F6:2A:53:47:92:D7:33:BA:C8:F1:DE:B1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186822A53908CF1ED5CF76C550FEE50CDB9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/c75tco63ez32KlNHktczusjx3rE.roa
Signing time: Fri 24 Feb 2023 06:44:17 +0000
ROA not before: Fri 24 Feb 2023 06:44:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 88.216.104.0/24 maxlen: 24
84.32.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Apr 2023 07:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:2a:53:90:8c:f1:ed:5c:f7:6c:55:0f:ee:50:cd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 24 06:44:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73be6d728eb77b3df62a534792d733bac8f1deb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:7f:43:0d:60:4e:02:dd:ff:14:9a:3d:ff:
3a:e8:b4:f8:a1:f9:53:aa:7c:31:06:fa:0c:95:a7:
43:25:2d:55:b1:80:74:26:f6:37:d9:69:a8:f1:3e:
09:5a:29:84:b9:12:76:cd:f8:d3:75:51:2d:ca:e9:
60:62:c1:fa:62:76:42:fc:08:a0:e9:ef:f7:e5:3b:
64:15:28:d0:5a:42:8b:96:52:f3:ad:43:dd:1c:6b:
8a:66:63:c0:30:3c:48:dd:6d:e4:f1:f7:5d:b0:ef:
8c:ff:f3:aa:42:2c:89:4d:84:82:f6:04:ca:1d:65:
f2:b6:4a:ac:0d:c0:7f:25:ee:f1:09:22:aa:48:88:
b7:82:be:d4:20:4e:e9:90:b4:2c:74:30:c7:94:5c:
da:f4:a8:c6:0c:96:cc:c8:50:38:ef:7d:63:8e:86:
e7:4b:04:3b:0f:e1:e7:4a:ac:88:11:cf:a6:33:16:
b2:f7:26:f6:27:7e:dc:08:99:19:7e:d9:d9:b3:c9:
11:1b:01:95:29:14:02:88:a8:cc:71:9e:b1:ca:f3:
b7:f4:6b:12:ad:2f:6c:a7:21:90:cb:34:cc:8e:7a:
1c:38:66:af:e6:10:e4:7b:75:88:4c:9b:5d:37:b2:
b0:d0:62:f1:5a:cb:8c:26:4b:52:ef:2c:35:5e:a9:
d7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BE:6D:72:8E:B7:7B:3D:F6:2A:53:47:92:D7:33:BA:C8:F1:DE:B1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/c75tco63ez32KlNHktczusjx3rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.110.0/24
88.216.104.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ce:95:34:98:44:67:be:ec:a0:4f:24:05:9f:ab:40:2d:90:
c1:09:29:bf:b5:b3:93:a1:e3:3c:a9:ea:ff:60:fb:c6:ed:ce:
f8:2d:31:5f:6c:59:f7:cb:61:65:d8:c4:02:e5:f4:9b:b0:36:
e8:26:cf:ba:32:db:f9:ef:5f:99:de:6d:c1:f8:52:f8:bf:f0:
35:01:e9:9b:8a:9e:3b:ba:bb:9a:61:be:61:22:e1:a6:f7:d1:
e6:e7:5d:95:ff:91:6e:40:fd:98:0f:38:04:98:a4:c1:ac:cd:
34:b2:a7:9c:96:6d:2d:5a:14:f8:77:88:2d:34:d9:b2:4c:4e:
c6:7e:ba:0f:e1:72:21:2d:5c:e6:13:ef:3b:69:88:8d:d7:78:
fd:90:f3:4d:a6:e9:11:bd:f1:73:6c:12:15:6c:af:ba:a6:c3:
0b:ef:50:5f:2f:d2:dd:dd:f1:04:0e:8e:e5:42:ed:44:fb:52:
a1:a0:a4:36:15:ef:90:48:d8:7d:ed:9d:65:19:7e:78:dc:81:
fa:62:78:96:d1:c7:37:cb:3b:42:2a:8d:6b:3f:c8:55:d0:96:
51:e1:a0:d4:05:6c:b2:f0:1d:cd:9c:9e:4b:ff:21:37:40:3b:
ee:c4:ac:53:00:7c:16:19:f6:dc:92:9a:96:8f:47:ba:99:2c:
49:5d:c6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org