Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eEmI9aQcXSF80CAUV0pUuQSoGpQ.roa
File: eEmI9aQcXSF80CAUV0pUuQSoGpQ.roa (raw, json)
Hash identifier: UDyiBMsE8A7O4FFqL1ys7Cvt8xtb/aSoK1RhhRNGaNw=
Subject key identifier: 78:49:88:F5:A4:1C:5D:21:7C:D0:20:14:57:4A:54:B9:04:A8:1A:94
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01892F0F1122B0335B7320A1C5AD5EF7F8B5
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eEmI9aQcXSF80CAUV0pUuQSoGpQ.roa
Signing time: Fri 07 Jul 2023 06:34:23 +0000
ROA not before: Fri 07 Jul 2023 06:34:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43043
IP address blocks: 84.32.107.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:0f:11:22:b0:33:5b:73:20:a1:c5:ad:5e:f7:f8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 7 06:34:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=784988f5a41c5d217cd02014574a54b904a81a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:92:29:5e:a5:2d:b3:5b:28:ea:bc:b2:cc:
b6:43:29:0d:c0:7f:72:32:52:a4:ed:78:a9:39:25:
50:68:57:e0:ea:ac:6f:b8:46:f3:a7:ee:58:4a:9f:
31:9e:95:5c:42:5f:f0:a5:8c:0a:30:e0:c0:91:c3:
ae:a8:1f:97:7e:b0:7a:53:1b:b2:e1:ff:5d:3e:34:
f3:03:c6:4a:06:ff:8f:e9:ff:f0:de:46:40:f3:89:
1f:72:4d:b7:0d:d2:c2:61:8d:05:8d:52:7a:3f:88:
b1:ba:0b:05:0d:b1:02:43:d5:00:31:55:35:60:c5:
be:6e:e0:64:cc:c5:70:1d:29:dc:0c:5b:ea:25:11:
52:bd:44:de:cc:50:2e:d8:a2:65:f3:5b:04:34:98:
64:4b:43:b1:90:38:c4:cc:5c:1e:2a:cd:23:2a:6d:
84:12:e5:3c:f3:65:15:c6:0e:05:7c:dc:7b:6e:f2:
7c:af:ff:5a:e5:ca:72:0e:e1:0f:33:64:07:6b:1b:
0f:7e:6c:d7:7b:5f:f9:75:a6:ce:f6:89:2f:f7:82:
fe:63:88:85:d9:66:35:d1:b3:56:a6:b6:2f:b0:02:
c1:34:3a:2c:cb:f9:a9:8a:dc:28:25:69:d2:44:23:
1e:9d:72:4b:e2:5c:11:02:da:c9:77:de:bf:08:f7:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:49:88:F5:A4:1C:5D:21:7C:D0:20:14:57:4A:54:B9:04:A8:1A:94
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eEmI9aQcXSF80CAUV0pUuQSoGpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.46.0/24
84.32.107.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f2:50:56:a4:d1:bc:ef:55:46:93:3d:5e:3c:19:85:e0:e1:
07:9a:20:6d:67:2a:d2:27:03:25:5c:df:52:ba:1a:7c:cd:a0:
99:7c:e6:1d:c5:60:e1:cb:c2:df:b6:67:4d:c1:fa:8f:f1:8a:
ec:c8:08:9d:f8:07:86:b2:77:37:9b:f9:29:12:ed:16:55:11:
ee:37:31:83:82:c0:5d:75:98:91:c9:03:88:63:88:2f:1b:0b:
e0:14:a7:ec:14:86:8e:58:ee:1a:1d:f2:4c:b0:8f:f5:6a:d6:
fd:63:4c:61:b5:33:98:c8:23:c2:e5:46:42:98:c3:34:9b:ec:
5c:57:35:f3:53:9e:2e:d3:2b:f6:46:66:f2:90:31:14:ed:cd:
47:65:e3:3f:66:62:2c:61:69:5e:b5:ff:1b:a8:5c:fd:b0:81:
53:9b:f0:d8:cd:dc:d0:7a:8e:09:61:ff:96:af:f4:f1:58:96:
3c:41:ce:ab:dd:c0:38:ca:58:8f:7b:19:ff:83:cd:61:98:54:
31:0c:96:1a:d5:22:ad:ff:84:3f:14:ff:0f:0b:95:43:47:d6:
55:dc:2f:1c:72:db:28:6d:bc:97:16:b2:06:92:46:9d:aa:f4:
ec:ad:c4:05:80:e4:a5:38:35:36:2e:d7:2c:22:5b:1d:be:7c:
ff:a6:01:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 13:24:12 2023 by rpki-client on console-ams.rpki-client.org