Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/e1-1fLcCAS-07U3EV_yTHCYD7Rc.roa
File: e1-1fLcCAS-07U3EV_yTHCYD7Rc.roa (raw, json)
Hash identifier: nFJsoG6qLXtzF5J0I2Z9umbGZ6zNwgXlS1yuDLZHCiQ=
Subject key identifier: 7B:5F:B5:7C:B7:02:01:2F:B4:ED:4D:C4:57:FC:93:1C:26:03:ED:17
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B36B7DF2D440EE2EE2D17FFC0F151A93C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/e1-1fLcCAS-07U3EV_yTHCYD7Rc.roa
Signing time: Mon 16 Oct 2023 04:21:41 +0000
ROA not before: Mon 16 Oct 2023 04:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205733
IP address blocks: 84.32.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 14:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:36:b7:df:2d:44:0e:e2:ee:2d:17:ff:c0:f1:51:a9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 16 04:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b5fb57cb702012fb4ed4dc457fc931c2603ed17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:0b:f1:c8:4d:08:4d:cf:8b:f1:3d:51:c2:
f0:10:87:84:bd:3e:d1:42:0a:71:b3:36:97:16:4e:
55:1f:18:85:e0:37:62:24:92:3f:76:1d:08:45:91:
d0:90:e7:2d:a4:fa:aa:7f:30:24:0c:b5:92:83:64:
bb:39:37:45:87:4c:80:ce:25:f1:eb:ee:e4:75:3c:
e0:c4:14:bd:15:dc:68:35:72:1d:86:07:0d:25:39:
6d:b4:f7:5f:0b:8b:26:58:68:99:42:23:4c:f2:08:
77:b3:8f:1e:2f:82:36:8f:3b:bb:67:f3:f5:08:30:
2c:e0:4e:22:5e:31:fc:5d:5a:09:04:c1:38:27:5b:
49:e6:12:d0:f9:f3:4c:69:4b:d8:b5:7c:d3:22:79:
19:9a:cb:a9:a7:01:5f:94:5f:69:71:e3:da:67:e5:
9e:2c:bf:7f:91:4f:01:6e:68:d1:1a:8a:62:dd:8e:
3c:05:8b:83:22:e8:6f:60:fc:f7:24:c0:de:7c:0a:
4e:78:f2:97:0a:9e:49:ac:c3:ba:4f:e4:2f:7e:06:
8a:43:2f:85:c4:f1:c2:6c:57:78:86:11:f0:e7:ba:
20:db:9a:f9:7b:26:8b:48:64:c2:90:53:36:b2:86:
34:d2:e4:17:63:51:62:16:f5:1b:7a:d3:0f:97:35:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5F:B5:7C:B7:02:01:2F:B4:ED:4D:C4:57:FC:93:1C:26:03:ED:17
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/e1-1fLcCAS-07U3EV_yTHCYD7Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.26.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ea:eb:e5:8a:a8:be:20:04:05:08:c8:8b:de:1f:3e:b1:21:
d4:d2:ec:d2:48:b4:92:11:33:27:00:af:78:af:0a:cc:22:6e:
12:54:66:5d:f4:c7:6b:44:28:c0:a2:82:8a:cc:00:bf:4b:5b:
fc:86:1a:df:77:39:08:e7:c1:16:55:8b:3b:88:f5:e7:5b:46:
aa:33:48:86:5e:3f:5d:86:30:b4:3b:e8:8c:86:0d:e6:9c:e3:
35:d6:fd:c1:ad:f7:a3:be:a0:64:c4:1b:48:1d:ab:83:51:54:
53:a5:5f:12:f2:f9:f0:c9:b5:37:f8:3b:47:ae:ca:47:62:71:
48:4b:93:61:d5:0f:27:d9:9d:09:20:ed:3c:60:e3:25:40:9d:
90:d6:04:1a:56:ea:c5:82:1d:ca:e6:b7:2f:27:f5:c5:68:58:
ca:c6:4d:af:6a:a4:43:b8:0b:b2:7f:e1:be:23:82:22:e6:b1:
aa:cf:ca:b1:6c:4e:3e:6a:28:7c:86:e2:b7:14:9f:1a:8e:fb:
62:c0:a0:7c:fa:a0:dc:e2:8f:5b:2f:49:3d:75:fe:7c:79:67:
47:5c:f6:cd:c9:8b:41:e7:f3:c8:2c:cf:d9:de:8e:f7:c7:ec:
6b:5e:5a:1a:31:76:11:95:3f:af:61:c7:2f:03:af:cc:4d:bd:
c6:56:f5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org