Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gY8UE5iT3xaJ4uu3HZnCL_V4NeI.roa
File: gY8UE5iT3xaJ4uu3HZnCL_V4NeI.roa (raw, json)
Hash identifier: W4SfmijcaJzrFrTxD+aNaMst5TyGzAcIb2IsVp6MeP4=
Subject key identifier: 81:8F:14:13:98:93:DF:16:89:E2:EB:B7:1D:99:C2:2F:F5:78:35:E2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185F3EC9C8219BCD8DDDD8EB3C542FFBB4F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gY8UE5iT3xaJ4uu3HZnCL_V4NeI.roa
Signing time: Fri 27 Jan 2023 15:50:48 +0000
ROA not before: Fri 27 Jan 2023 15:50:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207709
IP address blocks: 84.32.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Aug 2023 19:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:ec:9c:82:19:bc:d8:dd:dd:8e:b3:c5:42:ff:bb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 27 15:50:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=818f14139893df1689e2ebb71d99c22ff57835e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:58:41:df:94:2e:29:0e:0b:ae:a9:d7:2a:af:
c5:17:42:8b:f9:96:f7:a5:82:1e:1b:ed:ff:35:f5:
a8:eb:ec:06:6d:70:d6:ad:c5:13:b0:70:31:86:7c:
e8:ad:66:69:07:62:07:6f:65:a9:e7:d7:88:47:b7:
69:0f:d3:c2:24:91:59:22:ee:b1:c2:a7:5a:1a:85:
39:5f:b3:1d:a9:0d:a6:35:b5:cb:f6:d7:c8:45:eb:
aa:db:32:73:39:15:38:75:2e:15:9d:ea:f0:b5:9d:
3c:f8:17:ec:a9:21:b3:ef:9f:d6:f1:4f:ae:30:9c:
42:f1:2d:e2:77:a3:25:5f:a6:e4:cd:63:09:04:c6:
ff:96:ae:69:52:e4:94:1e:25:61:5f:16:a8:55:61:
0a:95:45:da:97:7d:46:b7:97:cb:03:cd:d8:16:f9:
b5:6b:7a:a3:89:27:8f:ca:c1:29:0e:5f:57:4a:2d:
03:f4:ac:ca:ca:25:72:78:90:70:ba:36:c4:2d:97:
10:b7:7e:f1:76:c2:18:2e:b8:26:2e:f3:1c:cd:91:
48:8b:e5:c7:42:98:5b:81:2e:30:42:9a:14:f1:92:
5d:0f:2c:fd:8c:23:89:0f:1c:e5:32:97:c2:a4:78:
76:7d:c4:88:bf:92:04:6c:87:c2:5b:df:5c:df:31:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8F:14:13:98:93:DF:16:89:E2:EB:B7:1D:99:C2:2F:F5:78:35:E2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gY8UE5iT3xaJ4uu3HZnCL_V4NeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.230.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e0:54:6b:a5:91:fd:9e:7b:60:a2:64:d4:04:cb:01:51:2f:
46:a7:c1:b0:66:54:dd:4e:cc:f1:9b:a9:73:b0:b1:d8:f2:1b:
85:8b:0d:f9:89:29:94:13:68:56:77:23:8c:3b:9e:01:c5:dd:
d8:24:dc:b9:2a:fe:b0:da:ea:a4:97:94:8d:fb:d3:1a:04:19:
ba:74:78:07:98:b5:a4:14:49:6d:3a:24:2c:0c:b9:2b:97:ab:
e3:ca:6c:f5:51:46:a8:4f:85:c8:32:37:3c:3d:7f:5c:7c:be:
62:6a:52:20:a2:0e:e0:04:1e:0c:9d:ae:79:b7:e8:f8:39:79:
75:d1:c5:99:75:28:6f:55:7a:5c:38:70:a9:2d:7a:b6:c9:9d:
88:f6:c8:6e:7f:b2:61:a6:9b:ff:be:b7:9a:6b:fb:a3:92:c2:
18:ee:58:91:5b:9f:29:0c:64:ff:40:13:35:87:e9:4d:26:3a:
b0:9f:4d:a0:4b:d7:cb:12:54:74:74:a0:47:da:97:96:96:9a:
c0:c6:19:5e:3b:f5:43:0b:f5:ce:e5:0b:4c:2a:c8:8e:ad:08:
f1:9b:6a:0b:3f:02:50:8e:17:20:0b:76:c4:b7:02:6b:d1:53:
8a:db:46:22:ae:fe:45:6b:88:43:9b:e8:bf:e2:7d:d2:d5:23:
4b:ff:75:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org