Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eVxU7_2fYZmfFlHEIKeGx82CO_4.roa
File: eVxU7_2fYZmfFlHEIKeGx82CO_4.roa (raw, json)
Hash identifier: m+21T2twbQK+dCksjkcHz1uSuu05q+o2S1GAH6+siFU=
Subject key identifier: 79:5C:54:EF:FD:9F:61:99:9F:16:51:C4:20:A7:86:C7:CD:82:3B:FE
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AF6C5F8CDD45649CDBCA3D3881998A2FC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eVxU7_2fYZmfFlHEIKeGx82CO_4.roa
Signing time: Tue 03 Oct 2023 18:21:23 +0000
ROA not before: Tue 03 Oct 2023 18:21:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216444
IP address blocks: 84.32.22.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:c5:f8:cd:d4:56:49:cd:bc:a3:d3:88:19:98:a2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 3 18:21:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=795c54effd9f61999f1651c420a786c7cd823bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:a1:60:76:28:ba:42:ef:c1:ee:9c:a3:be:
d6:9c:88:3d:08:62:7f:5c:97:41:fa:85:20:86:5c:
4d:ae:1b:d0:74:93:6b:50:d4:fe:2e:90:7c:25:be:
eb:b0:10:c8:7c:a5:55:c0:38:1a:10:5c:7a:ba:9d:
0b:1d:fe:5c:fd:72:56:0d:78:5d:3b:e6:a8:31:b1:
4b:be:4b:77:eb:5b:e7:a5:3a:5b:c9:1d:60:8a:fe:
a4:d7:ea:13:b5:35:1f:f9:0f:21:0e:9c:33:dd:b5:
5c:69:25:fe:32:91:21:36:d1:34:65:84:f5:9e:99:
ea:93:fe:7d:5f:21:0e:89:cb:86:3a:68:2a:ad:89:
49:bc:92:80:30:00:3d:6c:05:d0:69:f1:a9:12:11:
35:84:8d:4f:da:14:19:31:03:e2:b5:b4:8e:ac:bf:
e9:84:fc:65:c2:0c:5a:12:06:5c:a4:b0:84:17:ce:
da:7c:80:60:63:10:05:d1:b3:a7:a8:5d:9c:cf:39:
c2:50:d7:a1:7d:0e:0f:7c:60:03:af:ca:05:92:8c:
4c:23:e2:30:93:ba:34:bc:de:11:35:1f:44:d8:a0:
e6:9d:93:58:f6:4d:23:5c:55:c7:1f:55:24:46:f3:
66:7f:0f:ae:df:c3:16:41:b0:9b:a9:de:1a:e8:6a:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5C:54:EF:FD:9F:61:99:9F:16:51:C4:20:A7:86:C7:CD:82:3B:FE
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eVxU7_2fYZmfFlHEIKeGx82CO_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.22.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:6e:f5:2c:09:9a:fc:96:a7:29:aa:03:83:f7:ab:89:d4:9e:
7f:46:1c:a1:9f:96:8c:d6:60:d8:d0:0c:08:82:e2:aa:d2:37:
1a:e6:5b:28:e2:30:e4:70:70:0b:55:df:30:d5:c1:2e:78:65:
de:a5:95:39:43:09:b5:d9:8b:26:7d:73:d8:a7:bc:1b:8c:fc:
df:21:26:95:0c:86:b8:be:ee:64:b4:4e:0c:94:2e:01:c3:af:
d3:67:2d:03:55:a2:05:57:87:71:2b:13:79:93:6b:0e:65:2b:
bc:3e:14:35:00:78:43:89:64:16:c8:55:e6:01:88:34:d1:8b:
35:b4:cd:b9:d0:ce:74:23:36:07:f5:a0:17:e8:7e:97:c8:8e:
ef:95:17:70:40:8e:b5:9a:19:de:9a:f6:92:eb:94:8a:87:79:
2f:28:cd:88:cd:7b:0c:a2:93:78:b8:48:27:5b:ec:5b:c5:b4:
57:e8:e0:01:3f:0a:8a:fa:d0:fa:f9:f2:e3:00:38:d6:d7:79:
3f:d0:a9:fa:c1:9b:9b:81:43:44:97:5c:35:ff:c7:19:f7:b6:
48:c7:c2:d2:a9:e7:8f:40:c4:3b:dc:e5:7c:53:c0:c1:d3:d4:
88:d6:39:de:5f:1a:5c:85:0c:bd:f8:3b:1a:ef:c7:fb:42:de:
2f:30:fc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:41 2024 by rpki-client on console-ams.rpki-client.org