Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ebXVnbQWlUfXvO5kqkZO9lYdDnA.roa
File: ebXVnbQWlUfXvO5kqkZO9lYdDnA.roa (raw, json)
Hash identifier: CKZpLEYWya6v/h+9LwfM07UQYCAOK3PVJs5Bvrh9uJo=
Subject key identifier: 79:B5:D5:9D:B4:16:95:47:D7:BC:EE:64:AA:46:4E:F6:56:1D:0E:70
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01858E150A67F721A8A4F6FBFB89FAF5DC3E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ebXVnbQWlUfXvO5kqkZO9lYdDnA.roa
Signing time: Sat 07 Jan 2023 21:13:41 +0000
ROA not before: Sat 07 Jan 2023 21:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 84.32.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8e:15:0a:67:f7:21:a8:a4:f6:fb:fb:89:fa:f5:dc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 7 21:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79b5d59db4169547d7bcee64aa464ef6561d0e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:4e:97:35:8f:a3:5c:cd:9f:5a:a1:ca:52:
03:19:58:5a:60:ee:c1:37:3c:89:5e:f0:58:68:f4:
98:70:39:11:c4:77:6f:3a:79:5e:63:dc:b9:aa:40:
b4:ec:f5:0f:74:b6:ad:c9:c7:cc:e9:0a:99:8c:3f:
75:93:98:fd:c1:9a:05:12:43:1e:7b:0d:82:bb:22:
82:29:fa:d3:f5:b8:3a:95:32:e9:75:86:cd:1e:20:
7b:2f:41:18:04:58:7f:ed:2f:a2:f5:d5:17:8f:4a:
48:b6:81:7f:2c:ae:eb:fc:05:40:da:8a:01:ac:5a:
9c:e6:db:51:a3:0b:41:e7:b8:5d:d7:c9:3a:24:08:
55:9d:1c:06:61:84:14:ed:36:34:32:fc:99:34:7d:
c2:18:54:9e:45:a2:4e:28:10:f6:1d:07:f2:16:ee:
a7:62:0d:56:d9:f1:ad:e6:d5:65:cf:73:68:ac:77:
07:41:59:28:2a:cc:87:c0:a2:19:bf:2a:4f:2d:9d:
b8:e0:ca:db:f9:b1:08:e8:a6:c4:8d:47:b2:d7:32:
9b:a3:27:40:60:61:9c:be:95:b5:97:27:1c:d4:66:
de:4c:37:35:6f:e0:07:8b:48:07:f1:08:66:1d:51:
d7:2c:70:c8:90:49:45:d2:f3:90:7a:8f:08:c5:b2:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B5:D5:9D:B4:16:95:47:D7:BC:EE:64:AA:46:4E:F6:56:1D:0E:70
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ebXVnbQWlUfXvO5kqkZO9lYdDnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:39:8c:ad:af:ac:e6:1f:71:21:45:68:21:c7:3d:17:2a:26:
7a:56:60:28:76:33:48:6d:25:4f:37:ae:7b:8c:97:a5:55:db:
5d:10:4d:a2:6f:de:32:0b:b4:3b:5b:eb:ed:51:6e:16:a1:4f:
a9:eb:1c:d5:c4:03:4f:91:b5:a8:c0:eb:89:27:2c:b1:15:af:
4e:07:4b:9a:f1:d0:3b:16:e0:81:69:3f:7b:48:52:7f:b6:35:
fe:72:ef:8f:04:14:db:ce:10:7f:6c:61:0d:0e:7e:71:c8:fc:
60:c7:c1:a6:b7:b8:bb:1c:5b:9a:3a:a5:d0:70:30:e2:ab:44:
21:2f:dc:b1:48:22:50:f7:ff:48:a1:c1:43:e9:d0:e0:76:31:
84:8d:37:e6:2e:33:0b:01:9e:d9:5e:bc:81:52:74:25:3f:cb:
aa:91:fe:83:28:67:77:99:13:60:58:4b:19:e3:73:88:e5:ee:
b6:05:f6:75:ff:83:dd:78:b4:de:12:31:c4:6d:9d:53:b1:33:
7f:68:fd:a9:e3:48:e3:98:37:c9:f6:24:c4:13:28:7d:cf:7b:
14:92:96:ed:5d:f6:00:55:31:b1:45:51:c3:42:ac:8b:16:f1:
76:ce:52:8b:e4:d5:19:2e:56:cc:29:c0:1d:04:de:d2:3e:dc:
97:fe:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org