Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fj7pJdB9NVwO1M9gErHxHYO_60E.roa
File: fj7pJdB9NVwO1M9gErHxHYO_60E.roa (raw, json)
Hash identifier: sROu8gLJQS2hFFW9DQPhvjAee07ryhmfaAEYRtSL0gE=
Subject key identifier: 7E:3E:E9:25:D0:7D:35:5C:0E:D4:CF:60:12:B1:F1:1D:83:BF:EB:41
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018582EC9A47C7F4902EF2A54657E86FDF09
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fj7pJdB9NVwO1M9gErHxHYO_60E.roa
Signing time: Thu 05 Jan 2023 17:13:42 +0000
ROA not before: Thu 05 Jan 2023 17:13:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 84.32.136.0/22 maxlen: 24
88.216.248.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:ec:9a:47:c7:f4:90:2e:f2:a5:46:57:e8:6f:df:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 5 17:13:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e3ee925d07d355c0ed4cf6012b1f11d83bfeb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:83:1f:3c:7d:ac:fb:79:56:ba:c4:6f:2a:
a2:a1:59:c3:eb:04:0b:f2:a9:36:e2:5b:fd:db:a3:
d4:fc:81:7f:d2:23:96:95:88:92:c5:d7:37:80:a1:
ab:ed:b4:4d:7d:68:9f:27:bc:68:3c:80:e1:0e:c8:
5d:ba:f0:b3:85:78:0b:35:96:7f:72:f5:7b:a5:aa:
71:fd:a1:2c:6f:a1:10:1f:6d:85:94:b5:c5:7c:e5:
65:0a:58:1c:57:93:06:f7:be:ad:ba:56:27:de:0e:
d1:85:32:2b:31:77:82:ce:44:00:12:62:4a:c1:82:
27:a1:91:04:4a:e5:8e:8d:03:14:3f:d6:b8:95:7f:
9d:6d:f9:c5:7e:6a:3d:b0:ac:c1:a7:57:73:b5:58:
47:6c:00:c7:c2:25:d5:e7:8f:fe:18:c1:42:16:d0:
43:d4:80:0e:ce:0c:43:ab:ca:3c:f2:ee:58:35:d6:
d2:03:1e:97:40:1c:33:e0:9f:8a:89:8b:e7:44:19:
a3:e4:bc:a2:38:09:c4:0c:3e:4e:b6:3d:eb:2a:31:
f6:95:5f:36:75:4e:8f:87:92:3e:01:87:14:ef:ed:
7b:0e:b8:07:b7:41:97:ed:f1:c2:ad:06:52:1f:c6:
3a:c5:1d:b3:27:1a:6d:9e:82:6d:8d:39:21:ee:18:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3E:E9:25:D0:7D:35:5C:0E:D4:CF:60:12:B1:F1:1D:83:BF:EB:41
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fj7pJdB9NVwO1M9gErHxHYO_60E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.136.0/22
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
25:a5:1c:bc:58:56:65:84:e4:d8:2a:f6:67:66:d3:d0:e0:f5:
75:8e:72:42:89:9a:2f:37:15:d3:a2:f0:12:8a:80:28:fe:0c:
46:8e:ee:2f:81:b0:4f:68:fb:1f:8f:a4:fc:6d:17:a6:80:c4:
82:ed:fc:4c:42:25:36:85:43:8f:9c:87:a4:2b:b1:2b:de:90:
82:cd:06:6d:cc:7f:93:8e:9a:a2:09:06:cb:6c:38:4f:c8:03:
4c:b6:7c:f1:c0:de:a0:0e:f6:de:fb:be:e9:15:bc:55:07:a0:
e1:2d:1a:b0:9f:4e:b9:76:2b:15:e1:85:73:88:07:63:10:3f:
36:9c:cc:02:df:c0:37:d4:6c:fc:d3:93:97:9c:e1:e8:e0:7d:
84:0b:ed:44:f0:0f:0d:9c:9f:43:f9:bc:f4:0f:2d:ba:ba:c3:
eb:d1:e0:db:fc:b4:73:e6:c5:4b:a8:ae:17:05:67:de:27:5e:
77:ca:56:8d:81:20:e8:91:9e:1f:45:03:9e:7a:ae:07:73:a8:
5c:e1:d5:70:5b:b8:61:5b:03:ab:1d:9d:3d:f3:e7:64:42:d1:
8b:b9:50:c5:7b:78:13:0f:89:12:e3:f1:4e:69:29:21:04:98:
77:96:ab:3b:59:20:47:42:15:1d:2d:72:e6:7d:e2:1a:52:b3:
c9:3f:bb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:32 2023 by rpki-client on console-ams.rpki-client.org