Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fQwyq4gnNlt4Ds-i1yCBYJzJMMo.roa
File: fQwyq4gnNlt4Ds-i1yCBYJzJMMo.roa (raw, json)
Hash identifier: 0eqvcl+3at7SDl4su2ZL9wNqy12jiZzoN0XabBRxyQM=
Subject key identifier: 7D:0C:32:AB:88:27:36:5B:78:0E:CF:A2:D7:20:81:60:9C:C9:30:CA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01860455F81E1559ED2C56FE92C5CDB47F42
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fQwyq4gnNlt4Ds-i1yCBYJzJMMo.roa
Signing time: Mon 30 Jan 2023 20:19:48 +0000
ROA not before: Mon 30 Jan 2023 20:19:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 84.32.85.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Feb 2023 12:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:55:f8:1e:15:59:ed:2c:56:fe:92:c5:cd:b4:7f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 30 20:19:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d0c32ab8827365b780ecfa2d72081609cc930ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:50:e2:4d:0c:ac:50:ab:3f:1c:51:4e:2b:
06:af:da:e6:e0:cc:44:b2:2c:5f:84:04:43:1f:17:
d3:36:7d:18:ce:2a:0e:a5:c6:4c:28:f9:29:ae:dc:
1c:95:ec:ff:d9:71:e2:fc:af:e8:a2:5d:8f:d4:a4:
70:e6:3f:ea:04:dd:bb:c2:f5:f5:e7:10:da:30:d6:
08:06:c4:d6:29:a4:02:97:40:b6:5e:0c:b8:82:df:
06:c3:61:de:19:7a:72:a4:01:ab:2b:57:68:ad:8e:
14:74:c8:69:6b:3f:02:71:4b:cb:4a:df:d6:ad:6b:
b8:ff:9c:7c:34:c9:b3:21:d6:14:21:1a:7b:06:a1:
ef:45:1b:9e:0c:96:4b:e3:53:cc:49:d6:09:2b:ce:
57:54:98:b0:ec:05:a9:9c:28:a5:7c:a3:97:c7:9b:
16:3b:46:1a:da:4d:d6:71:eb:f2:7e:aa:3a:40:e2:
47:39:67:5e:38:29:72:ec:77:c1:61:b4:7e:b0:73:
75:37:29:f1:e4:e7:10:3e:d3:3d:10:6b:05:f7:bd:
0d:c4:f0:6a:ba:58:8a:9e:5e:86:6a:95:8b:b9:cc:
e6:21:0b:a7:76:e1:a1:7a:db:46:79:e6:b4:27:f3:
61:29:55:4b:c7:2f:bb:a8:f9:c6:81:eb:42:3e:46:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0C:32:AB:88:27:36:5B:78:0E:CF:A2:D7:20:81:60:9C:C9:30:CA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fQwyq4gnNlt4Ds-i1yCBYJzJMMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.43.0/24
84.32.85.0/24
84.32.93.0/24
84.32.221.0/24
88.216.47.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0d:2a:a1:57:96:58:20:1b:da:50:a5:f0:0b:6a:d9:ea:32:
4b:59:47:e4:f3:02:b2:46:03:e9:74:0e:6d:b7:3c:ca:a2:f6:
d2:5d:92:ce:bc:ad:55:fa:dd:57:91:14:b3:23:1d:c0:e7:2a:
20:b5:38:da:65:dd:11:94:12:58:16:b6:92:9d:2e:de:80:db:
c5:c9:a2:23:af:cc:51:46:a6:02:98:40:78:d7:02:08:43:6a:
74:c3:69:ff:e2:f1:81:82:a6:87:3c:d1:2c:ae:66:88:7a:a6:
0a:1f:a9:5a:90:ac:07:a5:18:c4:de:07:fa:7c:b6:2d:83:4e:
75:56:70:9e:38:7e:5a:d9:9e:ec:dc:81:59:48:88:ea:b5:0d:
61:16:6d:28:49:49:d3:7b:9d:01:ef:0d:5d:bb:3c:8a:98:a0:
97:28:36:fd:3d:30:02:c3:bc:6b:cf:29:f3:48:41:0d:b0:85:
61:d2:eb:99:2f:32:59:5f:c4:5b:80:0f:a3:ec:0a:7d:a7:12:
9f:b4:a4:ce:d0:d8:0a:fe:1f:66:47:64:77:a5:68:21:d6:01:
1e:bc:a6:a1:15:74:01:eb:ec:40:12:b4:c0:db:c2:37:2c:85:
89:1e:54:18:ba:84:eb:65:eb:f8:8f:75:98:cb:9b:a8:eb:de:
62:d8:d4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org