Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ctT3UxxdSxTEC8n5S9p2r4SaLZs.roa
File: ctT3UxxdSxTEC8n5S9p2r4SaLZs.roa (raw, json)
Hash identifier: fzkJyKT1NBDBQB59FzGByle2f9Mgw+UJy2a9Lvnuq/E=
Subject key identifier: 72:D4:F7:53:1C:5D:4B:14:C4:0B:C9:F9:4B:DA:76:AF:84:9A:2D:9B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AEEB6EC7CD12A0440AF534E8686BFA0AE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ctT3UxxdSxTEC8n5S9p2r4SaLZs.roa
Signing time: Mon 02 Oct 2023 04:48:00 +0000
ROA not before: Mon 02 Oct 2023 04:48:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 84.32.177.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ee:b6:ec:7c:d1:2a:04:40:af:53:4e:86:86:bf:a0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 2 04:48:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72d4f7531c5d4b14c40bc9f94bda76af849a2d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:20:70:43:e5:d9:b2:91:09:40:76:69:48:
08:36:b7:d1:9c:4d:6a:38:82:08:4e:ce:4d:fe:14:
cd:b4:d6:1b:64:6d:af:84:c1:bf:b1:95:12:63:ae:
55:4d:bf:d0:a6:1c:3a:90:f9:1f:4d:b1:d1:d0:2b:
81:1c:fa:db:fe:1a:98:8c:4f:45:76:bc:88:0d:d0:
35:df:bc:0d:d1:2f:ff:56:e8:eb:0d:c8:4d:c4:7d:
ef:dd:05:a9:2f:92:5b:c1:cb:8a:c3:f4:70:9c:b2:
b3:96:12:70:53:be:0d:6b:53:4c:31:98:2a:66:f9:
00:a2:76:92:2b:eb:de:ce:52:10:e0:b0:1f:1f:0a:
f5:d1:d4:3f:61:c7:fa:48:ad:8e:db:32:16:40:e1:
29:60:19:18:7a:b0:c2:fb:65:cb:80:85:b3:0c:80:
8e:f7:13:c6:dd:34:cf:11:9e:52:f0:6a:3e:f9:11:
46:6f:9f:41:90:34:10:a9:a2:e6:bc:26:39:56:ed:
cc:c1:0d:db:12:69:c7:64:c4:da:e6:9a:c2:70:44:
c1:a0:50:08:ca:e7:8a:01:20:76:ff:68:00:83:d6:
47:21:51:f8:ab:e2:46:cf:c7:83:f0:58:64:f3:2e:
99:d2:53:72:2f:04:41:68:31:3e:79:79:f6:5f:a5:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D4:F7:53:1C:5D:4B:14:C4:0B:C9:F9:4B:DA:76:AF:84:9A:2D:9B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ctT3UxxdSxTEC8n5S9p2r4SaLZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.9.0/24
84.32.177.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:68:32:19:e0:1d:dd:99:05:a0:9b:2e:0a:a1:d9:70:a0:eb:
45:41:ab:8f:d0:22:d9:de:a0:15:a2:a3:fd:24:35:06:e8:b9:
cb:5e:93:27:44:78:ea:97:d2:11:99:7f:27:9b:cf:fd:60:b3:
38:26:6d:43:ce:27:d1:d5:f7:62:37:90:8d:0c:27:2a:0f:20:
9f:66:26:02:61:1a:c2:3f:b0:00:e8:33:1a:87:d5:94:fd:18:
23:01:81:f5:4a:91:ef:ca:69:87:b3:f3:27:30:99:66:03:b6:
c6:1a:9c:ef:36:c6:e0:ae:30:9d:2b:05:48:3f:e0:f3:f2:d5:
0e:25:8d:26:34:83:7e:ad:98:7f:6b:48:42:a0:71:27:43:01:
1c:c1:cc:5c:e4:01:e6:59:13:d8:11:60:dd:02:78:2e:cf:a4:
c4:24:76:07:51:fb:fc:6f:7d:b9:18:83:03:88:fa:b1:88:05:
3a:31:a0:91:94:c5:08:42:ea:7b:5b:f1:f5:48:49:31:02:c8:
6c:59:45:93:a9:47:ad:2b:57:15:32:b8:2d:e0:9a:88:1c:e5:
55:af:e8:65:5c:cb:5b:1c:8b:9b:00:ff:2e:b3:15:19:9a:d0:
3c:28:ef:70:ed:11:d4:31:dd:23:24:a8:bf:e9:12:ef:58:22:
bd:b8:2c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 08:20:53 2023 by rpki-client on console-fra.rpki-client.org