Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/daa-p2lgbwmJzbKZB5X4XVkOidM.roa
File: daa-p2lgbwmJzbKZB5X4XVkOidM.roa (raw, json)
Hash identifier: O+XLjEIMK3c112jgKVPv7SdqxQTtnkOMtdy3ayAATR0=
Subject key identifier: 75:A6:BE:A7:69:60:6F:09:89:CD:B2:99:07:95:F8:5D:59:0E:89:D3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189F5437EAE14A9C49FE5CEC4DBEB589A1D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/daa-p2lgbwmJzbKZB5X4XVkOidM.roa
Signing time: Mon 14 Aug 2023 18:16:28 +0000
ROA not before: Mon 14 Aug 2023 18:16:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 84.32.236.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Sep 2023 05:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f5:43:7e:ae:14:a9:c4:9f:e5:ce:c4:db:eb:58:9a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 14 18:16:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75a6bea769606f0989cdb2990795f85d590e89d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:46:d4:cc:f7:d1:b2:b7:d1:a0:c0:f7:b5:
a0:2f:c8:95:cb:0a:cf:dc:23:ac:9d:e0:cf:60:95:
a5:91:09:51:e8:e1:66:94:f1:b5:d6:8b:10:ed:54:
4d:24:37:9c:90:12:f2:0d:52:3c:a2:07:bf:de:dd:
93:84:8d:b1:6d:0c:f2:8b:2e:c1:f3:4c:4a:aa:83:
6e:0f:82:28:98:35:6b:6b:35:b4:b1:61:e3:eb:c8:
0e:79:98:4b:57:ef:43:94:12:2e:33:f9:62:03:ab:
32:6b:66:69:4e:38:22:a3:40:b0:9c:24:f4:c8:8e:
75:49:e9:f7:ec:52:0c:f6:d9:ba:fc:ca:8c:2b:69:
a7:b2:f6:92:2d:0e:8a:3f:b0:e2:fd:f7:8e:42:61:
7c:cb:d5:2e:9b:32:35:0d:49:23:d8:9e:09:a7:a3:
9d:89:db:6b:6d:63:84:3e:96:61:07:62:9f:1a:eb:
e9:f5:62:a0:96:9a:51:cb:d3:6e:0d:cc:ca:87:63:
0d:2b:1b:97:fe:91:60:e9:c7:83:29:2a:94:cc:4a:
29:34:4f:22:16:ab:06:ae:51:5b:2f:9e:2e:c8:9a:
59:4b:74:7a:f4:18:11:43:49:cf:24:65:9a:46:21:
fc:53:8a:5d:70:90:2d:0e:23:53:c2:77:3c:2a:15:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A6:BE:A7:69:60:6F:09:89:CD:B2:99:07:95:F8:5D:59:0E:89:D3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/daa-p2lgbwmJzbKZB5X4XVkOidM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.236.0/23
Signature Algorithm: sha256WithRSAEncryption
98:8c:5c:d9:cf:a4:6c:19:f3:33:34:99:f0:4f:2d:5e:f8:85:
0e:08:2a:33:20:82:d0:14:d7:f1:48:d6:76:ec:3b:36:8c:b7:
63:12:7e:8e:bb:92:c1:e4:1c:ab:a5:7d:4d:2c:13:f3:28:06:
80:50:26:68:9d:e1:7d:45:ed:c8:e4:1f:a1:46:11:2f:d4:f5:
09:ad:84:bc:74:e9:a5:09:60:61:42:da:96:74:80:91:ff:18:
19:80:a6:7f:a9:36:8e:09:aa:d6:39:f5:8c:54:a6:b8:85:4e:
4e:60:60:8a:cb:8d:5e:ec:53:59:8d:91:e0:75:9e:d0:79:6c:
c9:0f:22:ac:c3:f5:ff:a1:00:4f:bb:bd:a4:c2:1f:c5:b7:29:
e3:fd:3f:ad:af:c5:da:65:33:06:ed:ce:27:2f:07:8e:67:dc:
38:21:c1:f5:46:f5:8e:fe:85:45:40:3a:d3:5a:68:1c:7c:0d:
6b:7a:96:2e:eb:e1:d3:d7:21:2e:85:fd:2e:23:28:14:d1:80:
ca:47:9d:39:b6:ef:c7:7f:08:ae:2a:16:b4:f7:d4:8b:8e:c1:
bd:5d:16:c4:30:bb:fe:92:0a:ff:a5:4a:f5:fe:4d:48:a3:64:
34:d2:59:f3:6a:30:19:6e:70:7e:b1:4f:21:22:01:59:38:fa:
6b:6d:23:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org