Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cJa-jexZAkh3deWaxigpe2HGC_k.roa
File: cJa-jexZAkh3deWaxigpe2HGC_k.roa (raw, json)
Hash identifier: 9E+cL5gHFEK3C1wcqJOscykc9Sv2WEAZ6uhurNGYvvU=
Subject key identifier: 70:96:BE:8D:EC:59:02:48:77:75:E5:9A:C6:28:29:7B:61:C6:0B:F9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01889A437620D38EFBC07F62B3A854E97B9D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cJa-jexZAkh3deWaxigpe2HGC_k.roa
Signing time: Thu 08 Jun 2023 09:08:12 +0000
ROA not before: Thu 08 Jun 2023 09:08:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 84.32.71.0/24 maxlen: 24
84.32.87.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jul 2023 19:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:43:76:20:d3:8e:fb:c0:7f:62:b3:a8:54:e9:7b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 8 09:08:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7096be8dec5902487775e59ac628297b61c60bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:df:fc:7b:eb:1f:67:2f:b2:dd:01:4c:39:f2:
b6:4e:3c:1c:54:0d:08:c1:c7:aa:c9:69:90:21:44:
b2:ef:b4:8f:95:d2:46:da:eb:74:e5:f3:f7:5f:f5:
3a:4a:51:99:b7:c6:c9:de:8c:86:a9:1a:08:1b:91:
2f:77:3c:83:ec:96:7e:fb:aa:77:79:dd:b1:dc:04:
ae:55:dc:db:8a:2d:f5:39:d5:9d:73:6e:98:af:00:
52:e0:e4:ab:7f:53:9b:cd:11:9b:c2:8e:76:69:f9:
db:49:67:53:2a:37:95:bb:46:91:66:07:6c:99:83:
9f:53:64:66:e2:52:59:c2:e7:0d:3b:b5:43:29:b6:
69:e5:e9:75:e9:47:81:06:83:fb:77:6b:01:a5:25:
74:e8:6c:57:9c:50:9b:7f:83:32:6c:4f:ee:5c:c5:
28:62:c6:08:cf:95:51:0c:fd:2e:43:bd:c1:5d:77:
dc:25:54:96:42:e2:f4:26:10:ef:17:a7:3f:91:e4:
e3:e2:d8:e7:bd:28:55:3d:e8:cd:14:6c:b3:79:ba:
eb:97:a7:df:c1:2d:26:29:24:0a:47:f5:7e:f3:4e:
91:94:21:3e:1a:69:f9:42:23:ec:3a:ad:be:81:0d:
87:2a:5d:57:d8:0d:d3:53:72:4b:fd:99:31:41:7f:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:96:BE:8D:EC:59:02:48:77:75:E5:9A:C6:28:29:7B:61:C6:0B:F9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cJa-jexZAkh3deWaxigpe2HGC_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.71.0/24
84.32.87.0/24
84.32.225.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a5:17:fc:0b:b9:18:e0:38:da:11:81:d9:37:fe:07:d7:25:
f5:b8:32:13:e6:7b:d5:90:40:11:3f:4e:aa:62:0b:39:db:fe:
4a:6b:a5:89:7c:55:7a:e2:63:c9:d2:b1:1e:8a:9a:15:9a:d5:
8a:ec:11:ce:96:15:43:71:e6:10:2a:a0:9f:60:0e:ef:b6:c2:
c4:3b:80:8a:ed:f6:68:5b:4f:25:8e:af:22:e3:d1:42:fa:8f:
8e:c7:44:25:ae:6f:89:42:1d:1f:9e:3d:48:1a:61:e1:1d:21:
fa:21:1a:e3:82:0d:a1:be:90:a9:fa:85:ee:2b:e9:ec:22:cb:
15:1e:1c:e0:c9:7a:16:69:bc:82:3b:c0:40:0f:99:04:ea:7d:
ef:1e:55:f2:d3:31:a0:a6:38:b4:9f:f2:47:11:f6:36:0d:6d:
e3:7a:50:fb:11:d7:f1:7e:62:e7:36:f8:0a:f0:e7:9a:fa:aa:
47:70:f6:fe:8e:50:7d:ba:99:d2:07:eb:99:a8:c6:77:12:e4:
27:71:32:18:08:6c:90:5a:10:82:ae:09:56:f7:ec:d7:83:4a:
3f:d6:15:84:ed:ad:78:c4:4a:e0:c9:51:f4:13:f6:4a:6a:c3:
ef:fe:bc:83:cc:75:96:ef:41:eb:af:4e:b7:e4:9a:c8:2d:da:
74:33:04:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org