Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fpJi6wxXtF6QXjhzXAPDKKpWLxA.roa
File: fpJi6wxXtF6QXjhzXAPDKKpWLxA.roa (raw, json)
Hash identifier: kxvRsa8TDVvdf0mWRTK8GZM5iN6HI5VAuG6Ee1RU5zA=
Subject key identifier: 7E:92:62:EB:0C:57:B4:5E:90:5E:38:73:5C:03:C3:28:AA:56:2F:10
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B860379D14386B4DA2D905598EC905676
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fpJi6wxXtF6QXjhzXAPDKKpWLxA.roa
Signing time: Tue 31 Oct 2023 13:54:16 +0000
ROA not before: Tue 31 Oct 2023 13:54:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216084
IP address blocks: 84.32.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 10:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:03:79:d1:43:86:b4:da:2d:90:55:98:ec:90:56:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 31 13:54:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e9262eb0c57b45e905e38735c03c328aa562f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:73:ab:c7:05:f9:c7:b9:4f:58:ec:4d:59:44:
9e:37:ff:bf:7b:7b:c8:83:30:6a:6e:39:0d:bd:4a:
65:cb:8e:6a:82:52:47:ac:32:ec:94:e3:85:8d:7f:
86:c6:90:25:b2:54:00:79:85:43:56:e6:3a:3d:da:
31:ca:63:60:ea:12:d8:02:d8:49:77:29:82:8c:21:
55:4c:69:ee:6c:ed:fb:db:b9:84:2a:40:48:07:72:
56:f1:af:07:e2:57:c2:fe:bf:fa:6b:2e:79:67:60:
ec:54:5e:a5:af:d6:df:df:93:ff:4c:b0:61:82:22:
43:3d:df:52:71:15:ab:d3:9c:7f:fe:ce:b7:aa:b0:
1e:35:d2:25:64:2b:c7:67:4b:21:af:4a:4b:ea:ba:
ac:84:69:f4:a4:77:27:20:f6:be:5a:07:ee:99:9f:
47:56:3f:dd:16:d8:86:f4:ec:cb:b3:df:3d:4f:ab:
e9:b1:05:ec:12:f6:14:a3:cf:ab:d1:c3:d6:29:c8:
2c:f5:fe:5d:07:8c:08:fd:fc:91:6a:67:99:3c:d4:
ef:49:ff:f5:70:48:d9:6d:dd:d9:db:e4:c0:21:47:
f6:16:04:fe:87:b5:1e:56:6d:2f:48:b7:a6:15:9f:
7b:e9:2f:87:f1:2c:01:d0:d9:2b:75:68:c9:8b:49:
64:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:92:62:EB:0C:57:B4:5E:90:5E:38:73:5C:03:C3:28:AA:56:2F:10
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fpJi6wxXtF6QXjhzXAPDKKpWLxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.64.0/24
Signature Algorithm: sha256WithRSAEncryption
27:29:4a:05:d3:f7:8c:e6:10:35:38:b6:8f:2c:7d:2e:54:e0:
f3:d1:54:33:a0:85:3a:10:83:a6:0c:e0:6d:69:22:85:22:68:
57:f2:33:e5:6d:34:75:e8:e5:6c:8a:3e:83:cc:1f:ca:bb:08:
bc:d4:1c:a8:30:77:4b:5d:45:2d:d1:9f:fb:85:b1:a0:aa:4e:
87:42:29:aa:a8:cf:0f:a4:ec:25:c8:0b:b7:7a:cf:e6:27:6e:
7d:e9:2e:b8:10:5f:8b:f4:b1:32:0d:fc:2f:c8:5f:13:36:60:
ee:17:92:37:ac:f8:c6:fb:1a:ca:81:e4:e8:89:85:b7:18:f0:
df:c4:3a:da:0e:31:ab:86:3d:38:27:f5:fe:8a:71:e1:38:f4:
70:07:7d:75:d6:3c:81:67:07:a3:f1:dd:93:d0:87:c0:62:97:
02:55:ca:26:3c:5d:c2:8e:a7:00:3c:a8:35:c3:69:92:05:0c:
54:66:5e:2e:62:2d:40:37:6f:2a:6e:1b:66:8e:1a:63:2b:b3:
6c:16:82:dd:9c:2e:f8:46:2d:e8:3a:76:59:29:95:fc:67:f3:
57:fa:02:c2:5c:4e:90:d1:09:23:e0:bf:c2:e0:bb:51:6d:cd:
36:1e:76:da:03:0b:fd:95:82:e7:4b:c4:5e:a0:d9:c7:68:a1:
c7:8e:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org