Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f0SaSyiem8SV9STHxq-mOMoAl2Y.roa
File: f0SaSyiem8SV9STHxq-mOMoAl2Y.roa (raw, json)
Hash identifier: V9ZWIp3lCfe+2q8P7moke6wVH6GctZvK8a2XwerV6YQ=
Subject key identifier: 7F:44:9A:4B:28:9E:9B:C4:95:F5:24:C7:C6:AF:A6:38:CA:00:97:66
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AFE649206A07BB081C89FAACEA2BB7E75
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f0SaSyiem8SV9STHxq-mOMoAl2Y.roa
Signing time: Thu 05 Oct 2023 05:51:58 +0000
ROA not before: Thu 05 Oct 2023 05:51:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42055
IP address blocks: 84.32.233.0/24 maxlen: 24
84.32.237.0/24 maxlen: 24
84.32.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 14:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:64:92:06:a0:7b:b0:81:c8:9f:aa:ce:a2:bb:7e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 5 05:51:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f449a4b289e9bc495f524c7c6afa638ca009766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d7:13:fb:fd:f8:ae:b2:01:66:b6:c6:88:cf:
c8:24:63:5d:de:1b:dd:0c:bc:a6:e7:aa:f0:e4:e7:
b9:0d:f8:ff:a4:1c:ec:f1:a8:12:e3:06:3c:2e:b1:
46:60:e3:2d:92:88:30:32:df:f8:b3:a8:3a:57:1d:
22:8f:35:53:5f:50:8f:85:a6:50:cc:03:15:e3:ee:
77:93:dd:4e:7b:77:c9:5d:5a:d9:db:f0:7b:a1:72:
25:59:2a:0c:1f:8a:fe:2f:85:83:d2:12:aa:48:b2:
0b:66:df:a5:23:ac:45:2f:49:9b:0f:a5:55:78:da:
56:d1:f8:4a:51:fe:fb:28:f3:97:a5:14:df:e7:d3:
18:fa:0b:ff:0d:c2:e5:1d:9b:f9:95:c9:80:1e:fa:
f7:d4:b8:ef:7b:9b:aa:68:27:10:93:df:67:10:2e:
5d:c8:a6:1d:37:dc:e2:27:bc:0c:0c:d8:4f:33:73:
86:aa:88:9e:e6:32:b7:31:8b:7c:e6:fb:19:67:f4:
99:79:25:b2:e0:e6:0c:a3:8f:00:4d:69:b0:96:97:
ff:62:43:3f:f6:1f:54:91:a9:2c:50:d6:88:47:ae:
07:ba:79:2a:16:9b:06:f0:8f:eb:86:82:92:3f:5e:
2c:9b:a9:d1:5a:e4:3d:c3:f7:80:da:d8:cd:b7:c6:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:44:9A:4B:28:9E:9B:C4:95:F5:24:C7:C6:AF:A6:38:CA:00:97:66
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f0SaSyiem8SV9STHxq-mOMoAl2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.233.0/24
84.32.237.0/24
84.32.252.0/24
Signature Algorithm: sha256WithRSAEncryption
84:91:66:e9:0f:c5:69:60:d8:88:e0:b4:cb:67:50:87:e5:8b:
2a:4e:d3:1a:5c:38:a5:7d:bb:5d:3a:74:dc:9a:0c:4e:cb:16:
7b:d4:3e:8f:70:89:bf:0a:fb:0a:32:b1:ab:3a:6a:ba:dc:25:
07:49:bc:dd:6f:60:6a:bc:eb:1b:03:2b:22:7b:93:4a:c8:a9:
90:99:1a:c0:9c:c4:94:22:57:ec:46:61:0e:05:da:ed:41:a0:
5d:56:c5:84:81:6f:c7:6e:75:04:cd:81:88:02:99:63:88:f8:
3e:ce:0c:1f:98:77:02:68:5d:c4:9a:de:ae:eb:b9:ac:9c:41:
49:3f:fc:0b:d2:42:7f:80:ad:5b:d1:cd:50:39:ba:e9:34:79:
94:59:ca:78:d0:ea:15:b7:35:ef:6c:39:7b:ee:e1:32:82:8d:
b6:dd:09:51:64:ec:59:e6:35:13:10:05:64:43:01:17:ac:f7:
a6:ef:16:12:2d:6c:4a:76:df:50:6a:1d:f8:52:57:f2:56:c9:
a5:14:91:90:4c:92:b7:37:4c:51:75:94:c6:61:12:34:f5:ee:
78:a5:8b:75:f2:fd:d9:da:5d:e0:67:af:cb:8c:1f:02:b9:8f:
fd:1a:39:81:69:8a:15:e2:e1:01:28:e2:f9:c4:85:02:cc:2c:
22:da:cd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org