Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eQKKTye5BVlH1NZ4NXt6KNpTikA.roa
File: eQKKTye5BVlH1NZ4NXt6KNpTikA.roa (raw, json)
Hash identifier: 33GnWO/6sUQjyxwFBLaK/g2dZHQnDHxwarA+HQSAoD8=
Subject key identifier: 79:02:8A:4F:27:B9:05:59:47:D4:D6:78:35:7B:7A:28:DA:53:8A:40
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01871F2405527A947747C634B909A2B34620
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eQKKTye5BVlH1NZ4NXt6KNpTikA.roa
Signing time: Sun 26 Mar 2023 18:17:46 +0000
ROA not before: Sun 26 Mar 2023 18:17:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 84.32.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1f:24:05:52:7a:94:77:47:c6:34:b9:09:a2:b3:46:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 26 18:17:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79028a4f27b9055947d4d678357b7a28da538a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:02:ac:7d:6d:24:6c:d5:7a:2a:85:3c:af:
53:af:30:bc:fc:4b:fd:70:03:49:75:bf:ac:3e:1c:
a7:07:b0:c8:9a:3e:c0:10:ee:96:bb:8f:ed:7d:da:
60:8a:bc:ef:e1:2b:bc:e8:04:8f:b2:e1:f1:b5:b9:
cd:ee:4f:d4:10:23:f3:9a:82:3d:97:7f:76:bb:f4:
52:af:21:f0:ce:8e:ec:45:25:53:25:8d:f6:84:d3:
66:b0:2c:b4:6a:1b:07:17:c2:78:33:34:1e:28:bf:
46:7a:08:ec:18:3f:9f:95:ab:a8:e9:29:83:3d:7e:
9b:78:c2:41:d1:e4:37:fb:cc:3e:e0:14:a0:0f:b2:
15:85:5b:e3:49:5c:06:f3:fc:fc:e2:35:35:90:2b:
85:9f:ce:90:0d:0c:f8:f5:04:a7:e9:71:26:ad:01:
16:26:8c:6e:c2:8d:39:c3:1f:9c:ca:9e:94:2d:54:
36:74:9c:e3:53:1f:07:71:f3:d8:8a:d4:f7:91:fb:
8f:93:52:39:ca:ef:4f:5f:96:72:8b:72:6a:6d:d4:
73:7b:be:3a:b8:c6:e3:0f:cc:51:1c:40:06:00:41:
4b:c3:40:ea:7b:2a:d1:f5:c4:d7:15:aa:3c:ec:97:
44:72:f0:a7:25:7a:17:72:bb:d1:72:35:cf:cf:e3:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:02:8A:4F:27:B9:05:59:47:D4:D6:78:35:7B:7A:28:DA:53:8A:40
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eQKKTye5BVlH1NZ4NXt6KNpTikA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.217.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d2:16:c0:e6:41:56:6c:26:8d:d8:49:31:4c:a4:0d:17:f8:
b9:02:0c:de:93:cc:93:8a:4d:4e:e5:6e:0b:cc:18:79:d1:d9:
6d:49:71:1f:63:0f:5b:1f:df:98:cd:56:9c:9c:01:f1:ff:60:
fe:0f:82:4c:99:19:b7:6f:42:7e:cd:25:9e:42:21:c4:47:c0:
8f:5f:3b:1f:50:27:e8:10:fc:84:0d:bd:a2:dd:8d:e1:d1:a4:
85:bb:4e:48:37:79:22:c8:96:c6:11:e8:a6:89:08:c7:21:0c:
86:22:cc:fd:b5:0d:ff:26:8f:e4:10:bb:15:78:ea:e5:79:7d:
94:ed:e6:3e:18:0f:78:cd:de:1c:1b:8a:15:45:17:73:75:cf:
62:75:a6:fb:6f:7d:33:82:75:98:77:91:46:a0:4f:a7:f7:82:
65:1a:4c:68:ff:7f:c9:54:56:86:39:ec:1c:7b:6d:1f:c4:c9:
31:95:1e:ad:5c:b1:29:8a:14:ce:82:23:3d:d7:9e:af:24:03:
f0:bf:95:c0:d7:52:34:0d:42:21:77:93:74:8e:b2:16:c9:3c:
41:d0:4a:f9:e4:26:48:7b:53:4a:01:2c:d8:86:aa:a4:43:9a:
54:84:20:0c:ba:c3:0c:cf:3c:0e:e4:34:98:59:b9:4d:bd:62:
1b:22:c7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org