Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/e5Ti-tEMdjJkToRppb2yu_I1Rvw.roa
File: e5Ti-tEMdjJkToRppb2yu_I1Rvw.roa (raw, json)
Hash identifier: OyZ3MedaWLOB4YqwyPlNXqPFU7GahMqsF/M+ioBimeU=
Subject key identifier: 7B:94:E2:FA:D1:0C:76:32:64:4E:84:69:A5:BD:B2:BB:F2:35:46:FC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188C3840EA0E1C31CD723962C1BE5F4CB9F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/e5Ti-tEMdjJkToRppb2yu_I1Rvw.roa
Signing time: Fri 16 Jun 2023 09:23:11 +0000
ROA not before: Fri 16 Jun 2023 09:23:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 84.32.77.0/24 maxlen: 24
84.32.136.0/22 maxlen: 24
88.216.248.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:84:0e:a0:e1:c3:1c:d7:23:96:2c:1b:e5:f4:cb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 16 09:23:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b94e2fad10c7632644e8469a5bdb2bbf23546fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b0:04:78:99:b2:30:33:aa:58:e9:52:48:ec:
d5:8d:ae:90:98:56:56:39:ce:5a:74:dc:24:7d:36:
3e:64:ec:8b:1a:da:69:14:55:e5:c9:b5:10:e5:3c:
d4:c0:fb:39:c8:42:e5:8d:f7:fb:88:0d:66:7e:53:
90:7e:fe:c4:02:9a:ae:67:38:85:ca:39:20:70:c0:
37:d0:4d:1d:74:ec:4c:d0:32:30:20:f4:b1:6a:7a:
8d:26:c7:c5:e7:76:61:c0:1c:65:db:02:5f:86:42:
db:e5:49:60:0a:75:60:b8:cb:20:5b:83:4d:52:cc:
9d:14:44:16:86:8d:49:e4:25:4f:b5:aa:cd:45:cf:
f2:be:ef:40:d4:17:91:da:1b:7b:38:0e:d7:f1:6e:
07:0f:5f:73:5f:5c:10:87:0b:4d:34:9f:6b:28:84:
02:b5:54:b0:e6:4f:5a:84:bf:0f:ba:fe:d5:23:ed:
b5:b5:ba:9c:a7:d6:a1:79:5a:b3:56:8f:6a:28:0f:
23:4c:ff:af:09:8b:91:dc:c5:fe:95:25:04:b3:15:
1c:a0:78:64:39:55:4b:9e:13:7f:30:95:1d:31:5a:
3b:37:f1:83:7d:15:0d:b7:6b:9a:be:83:66:42:f2:
11:9a:1f:92:43:47:8a:7e:2c:29:ff:26:5f:c0:d9:
b4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:94:E2:FA:D1:0C:76:32:64:4E:84:69:A5:BD:B2:BB:F2:35:46:FC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/e5Ti-tEMdjJkToRppb2yu_I1Rvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.77.0/24
84.32.136.0/22
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
91:a1:12:63:a7:f5:43:46:fb:30:3b:05:3e:d3:d1:06:2d:2d:
ec:06:d3:cd:eb:77:1c:e9:70:02:9e:be:7b:6b:72:90:3b:d1:
5f:9b:0f:7d:de:d3:72:63:0d:ae:dc:25:43:ad:b2:20:b9:a7:
47:43:fe:5a:1f:63:39:bb:eb:51:48:42:35:ca:17:40:5b:67:
8b:b8:63:6f:cd:87:81:c0:46:ec:d6:9b:d2:b3:68:38:46:56:
a7:cf:6d:82:6c:73:5a:3f:f2:ca:38:f0:3f:0b:68:85:c7:2f:
7a:77:4d:51:f9:ac:1b:6a:3d:db:a7:d9:bd:d6:b5:69:f2:0d:
aa:aa:8d:b5:44:17:84:7f:88:de:58:4a:cf:c1:c7:eb:e7:4d:
e5:94:52:ca:a0:54:b1:cf:46:83:9a:f4:a7:30:5f:ef:fe:79:
3e:f2:20:58:e8:be:e0:72:4b:a1:c2:6f:ce:ce:2f:5f:27:1b:
26:bb:14:c3:62:f3:90:65:b8:05:1c:5d:90:b7:c1:ea:31:df:
5d:c9:36:9f:cc:c4:62:57:9f:47:ca:c3:c1:d4:9e:00:1a:fb:
dc:a5:69:6f:c4:aa:75:e1:ac:4f:0e:f7:36:ba:f5:59:76:99:
6b:b9:cc:a6:f2:d2:bf:0f:1e:f3:c7:7d:81:a9:3a:2b:9f:66:
e7:25:9b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:31 2023 by rpki-client on console-ams.rpki-client.org