Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dzZl-_hFuNEw7EUWaini5iOpyx8.roa
File: dzZl-_hFuNEw7EUWaini5iOpyx8.roa (raw, json)
Hash identifier: jihK4tIOg8LpyMQEuSkeQYgEMZY1qp1OlX61KOa7kBo=
Subject key identifier: 77:36:65:FB:F8:45:B8:D1:30:EC:45:16:6A:29:E2:E6:23:A9:CB:1F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187F008CF8BE1D14C1943BF8515B316FECB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dzZl-_hFuNEw7EUWaini5iOpyx8.roa
Signing time: Sat 06 May 2023 07:48:41 +0000
ROA not before: Sat 06 May 2023 07:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f0:08:cf:8b:e1:d1:4c:19:43:bf:85:15:b3:16:fe:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 6 07:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=773665fbf845b8d130ec45166a29e2e623a9cb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:95:b9:81:56:e0:a9:d9:15:94:41:81:2d:49:
ec:77:40:93:7d:af:bc:9b:25:2f:9f:09:1f:95:cd:
9c:0d:49:cf:b9:50:9e:32:76:2d:41:f6:e6:25:b1:
25:4a:ba:3a:b9:ce:7b:e7:00:c4:5b:22:9d:1c:4b:
43:81:a3:c6:7e:26:62:c8:bb:25:97:fd:4a:75:2c:
de:8f:0d:c9:ca:9f:87:64:37:3d:be:2e:8c:db:e3:
88:6d:fc:f6:10:bd:58:5c:82:8a:b8:3f:3e:09:2c:
37:b1:93:6f:96:48:e8:57:28:11:5d:3f:30:f1:3c:
0c:04:3c:00:54:34:53:1c:fe:f1:89:19:44:e0:a0:
fa:d6:b9:38:26:89:22:57:bd:79:dc:b7:b0:dc:ed:
0e:61:32:4c:98:c4:63:f5:10:7e:b1:6e:93:86:e4:
57:1b:a2:e6:2d:1b:b6:8e:c3:da:ba:ec:6b:65:e7:
2a:da:c3:2b:69:42:ea:74:c5:51:ba:35:74:aa:1b:
c5:9e:d6:75:ac:4c:0e:b8:36:df:1f:75:1e:85:05:
08:2e:98:bf:78:e7:90:72:16:ab:02:2a:ad:51:ed:
d9:40:b8:90:4f:e6:45:df:5d:ba:e2:cd:03:1e:1c:
ae:2c:5a:e7:b3:90:46:8e:a1:9b:61:6f:89:1b:63:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:36:65:FB:F8:45:B8:D1:30:EC:45:16:6A:29:E2:E6:23:A9:CB:1F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dzZl-_hFuNEw7EUWaini5iOpyx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.174.0/23
84.32.178.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:cd:47:fa:69:3c:04:83:f7:14:22:70:16:12:53:d6:d4:8f:
24:42:0c:ce:b7:f4:65:e9:bf:e4:e4:cc:13:60:97:5a:d9:86:
17:15:d1:64:2b:02:3c:f5:8e:54:68:a1:3c:16:fe:34:f3:48:
60:59:f6:01:7a:9d:f5:9e:91:d7:33:a3:e6:8f:69:39:6f:38:
a0:25:3a:60:e8:ea:c0:10:52:be:79:34:e7:c7:04:c0:6e:a9:
f8:cc:1a:e1:95:4c:1e:5a:10:24:7a:fe:78:51:b1:bf:e6:24:
49:93:59:db:c2:c2:eb:b0:11:3b:39:97:96:e8:32:62:33:55:
36:06:41:7f:0d:48:de:81:84:1d:b6:c3:d0:90:38:a3:f4:77:
16:df:bf:97:8d:77:b3:e2:a6:5c:a8:13:f9:61:ad:79:d0:e8:
f8:c4:2c:cb:58:8a:f9:2e:9d:2b:38:60:ca:5b:56:c5:bd:5b:
f7:90:54:da:c4:5d:d1:41:7e:ba:37:6b:63:2f:97:b6:1d:c9:
72:41:cf:c9:ca:87:73:69:a8:ae:69:2a:f8:8e:e1:6b:57:45:
b1:97:19:ad:9a:44:ff:27:b2:90:cd:58:52:d5:03:b0:16:6b:
48:83:f4:d9:e8:f0:9d:c7:d5:9a:77:a8:ae:91:6b:ab:49:f7:
c9:e3:47:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:31 2023 by rpki-client on console-ams.rpki-client.org