Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cQuN-MXsPIAMYntuPah4Dq0W2Y8.roa
File: cQuN-MXsPIAMYntuPah4Dq0W2Y8.roa (raw, json)
Hash identifier: 7AYRjJ4MAJT+wGY9bo48sONgYdFOv1jZ7QDjr9Zv57k=
Subject key identifier: 71:0B:8D:F8:C5:EC:3C:80:0C:62:7B:6E:3D:A8:78:0E:AD:16:D9:8F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189BB7909F6C0731902049FCD7F69EE9556
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cQuN-MXsPIAMYntuPah4Dq0W2Y8.roa
Signing time: Thu 03 Aug 2023 12:56:59 +0000
ROA not before: Thu 03 Aug 2023 12:56:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43043
IP address blocks: 84.32.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Sep 2023 05:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:79:09:f6:c0:73:19:02:04:9f:cd:7f:69:ee:95:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 3 12:56:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=710b8df8c5ec3c800c627b6e3da8780ead16d98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:52:73:0b:ab:76:39:f7:1a:de:e1:d5:26:9c:
8d:79:06:a1:02:d3:73:41:a9:0e:9b:d5:aa:7f:e3:
0e:71:33:14:a5:51:40:99:50:74:41:29:02:8d:28:
33:4e:aa:02:f3:c7:89:d3:70:1d:84:0e:4d:6c:8f:
e5:27:6d:7f:72:d4:d7:e7:51:85:32:d8:ef:73:eb:
81:c8:99:3a:ec:d9:b8:df:fc:7e:cb:92:b8:ff:eb:
af:b4:65:60:06:de:76:8b:eb:8a:ef:b9:58:67:53:
c1:dc:9f:db:2c:b7:51:c1:75:d6:4e:c9:4c:46:93:
b4:3d:5e:c3:e6:62:4b:29:6a:8b:bf:b4:fc:72:6a:
b8:4d:e3:3e:a7:b5:a1:cd:87:df:ec:db:e6:94:cd:
bd:f1:2e:9b:0b:2b:27:9c:3b:44:0e:68:51:b7:b6:
05:f1:41:ae:02:c4:90:9e:49:ea:46:72:a0:34:73:
7b:c0:44:80:4f:13:35:ee:ee:77:77:cf:90:67:1c:
9b:9f:ec:d2:a2:cb:5f:34:99:b6:d0:46:47:f9:b9:
30:ae:17:c8:51:23:c4:17:06:9a:58:2e:de:f6:c0:
19:96:d4:71:9c:00:e4:27:dd:84:d6:fb:08:b2:2b:
78:92:f9:48:e6:ed:6c:02:f0:2e:53:9c:68:03:36:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0B:8D:F8:C5:EC:3C:80:0C:62:7B:6E:3D:A8:78:0E:AD:16:D9:8F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cQuN-MXsPIAMYntuPah4Dq0W2Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.107.0/24
Signature Algorithm: sha256WithRSAEncryption
62:3a:95:d8:01:c1:0d:51:6e:98:4e:9b:65:77:28:81:0e:04:
1e:76:bb:5a:68:b3:ab:56:41:33:ee:c8:a4:f3:f4:b9:b4:4e:
84:0c:dd:6d:bc:84:5e:39:7a:75:d5:e4:89:33:6e:80:8c:b9:
07:1c:bb:d8:3a:d0:79:c3:eb:f9:1d:3d:8b:6e:05:fb:44:d2:
ae:7a:a7:66:e4:7c:cf:46:a0:e8:d6:cf:ef:f3:00:8b:cb:04:
b1:13:ed:67:f4:af:89:ed:71:54:88:d8:9e:4b:65:08:2f:1d:
60:d3:ec:ac:63:d4:bb:7e:91:d1:7c:b8:ae:92:d0:8f:fc:74:
cd:53:52:d1:dd:0b:5c:71:9c:79:e5:c9:d9:e9:48:66:df:29:
98:0e:7f:6d:ee:a7:43:56:a1:69:85:7a:c6:1a:74:c0:38:b9:
c3:6b:6a:00:50:e2:af:9d:4b:9e:a8:6d:af:38:0f:d3:ff:81:
07:29:62:50:a5:dc:0a:32:9f:5b:50:64:5a:0e:98:e7:21:64:
c1:67:5e:71:7b:08:c0:41:7f:a1:dc:cb:89:88:cb:1a:b4:62:
d4:24:c9:64:b9:c3:ca:39:b7:17:14:65:dd:ac:be:92:15:ef:
b9:e4:01:fc:d2:b2:46:bf:44:ab:cd:77:15:25:02:1d:1c:e3:
9e:cf:76:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org