Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/i311DHaICh1oMu7ZPhumC67CchE.roa
File: i311DHaICh1oMu7ZPhumC67CchE.roa (raw, json)
Hash identifier: hB+RJzf1vrh1OrzbJwtVEXOJoIP0dOub6C3WuupfBFE=
Subject key identifier: 8B:7D:75:0C:76:88:0A:1D:68:32:EE:D9:3E:1B:A6:0B:AE:C2:72:11
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01894B4F415DF7373C76A538B93B76388F37
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/i311DHaICh1oMu7ZPhumC67CchE.roa
Signing time: Wed 12 Jul 2023 18:13:52 +0000
ROA not before: Wed 12 Jul 2023 18:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 84.32.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jul 2023 13:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:4f:41:5d:f7:37:3c:76:a5:38:b9:3b:76:38:8f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 12 18:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b7d750c76880a1d6832eed93e1ba60baec27211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2e:d8:d4:50:e5:a2:ff:b1:7f:32:1e:ce:52:
61:48:0b:d1:87:dd:8a:72:a1:56:4b:6e:08:6d:3f:
7b:80:50:06:dd:6d:56:17:2d:55:32:72:07:e6:aa:
08:b8:ce:1d:34:17:35:83:95:b7:f6:f8:f3:ee:05:
1d:e3:e3:08:8e:46:67:e6:ad:67:45:1d:fc:d2:1c:
3c:09:2e:d7:9c:d4:ba:6e:95:9c:41:0d:45:8b:40:
85:8b:d1:cf:e4:9e:f4:27:ea:d9:de:5a:c1:f6:a5:
41:59:a5:2e:88:60:e3:ac:53:d7:2a:44:5b:84:57:
e7:c3:35:47:69:8c:7d:5b:3a:8e:86:1f:59:ca:5b:
ef:29:ff:0d:e5:85:39:d7:7b:ad:3c:7c:0a:79:39:
0e:c6:73:84:7d:40:89:a6:e1:2f:94:59:16:51:5d:
82:af:55:f0:ad:cc:b5:ef:45:a3:64:90:c6:a6:cf:
ee:2c:ad:42:a6:58:bb:ad:87:af:53:a3:15:11:ff:
7b:35:49:c3:d1:e5:fe:ca:41:b9:75:37:96:5a:23:
06:0c:70:23:95:55:bb:40:b6:fb:57:18:c0:ba:d0:
6a:53:b6:69:69:50:89:f3:95:db:7e:90:ea:d0:72:
8e:cb:77:d1:68:9a:d8:83:21:2d:bb:00:2e:98:07:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7D:75:0C:76:88:0A:1D:68:32:EE:D9:3E:1B:A6:0B:AE:C2:72:11
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/i311DHaICh1oMu7ZPhumC67CchE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.179.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e5:4b:fa:c8:70:33:63:1f:fa:12:b6:64:82:68:36:c2:78:
7b:7d:4c:69:1b:2f:12:2a:78:1a:64:6a:2b:f2:5d:e2:5d:f5:
7e:ca:3a:15:dd:3f:a1:cc:97:2b:b1:06:99:50:fd:73:49:c5:
f2:fa:74:dd:cf:2a:97:88:3d:23:bc:d7:c3:05:f1:b4:8a:f1:
ba:f3:99:38:92:05:f1:32:9a:e7:62:9e:09:f7:a8:28:40:55:
d8:1c:dd:5b:d2:94:8a:0e:a4:95:2a:e9:55:71:f9:b9:a8:ac:
b2:bd:6b:b5:7f:5e:5c:60:4c:d1:11:1a:0b:a8:88:f5:50:a3:
6a:6e:4f:42:1a:10:d8:0b:38:5d:90:97:23:c1:3e:05:5a:ed:
c1:5a:2c:90:e3:43:85:f5:05:2f:4f:db:49:93:05:a1:32:b6:
b6:bf:63:75:9c:ad:5c:ee:5d:81:55:d2:0a:4b:85:f6:71:48:
ec:fb:13:03:c8:16:bc:cc:0a:d4:ad:8f:8f:9c:61:c6:73:24:
f2:4c:a1:71:1c:b9:5b:47:36:33:2a:85:95:34:c6:51:b5:5c:
39:b7:09:ba:b9:7c:31:37:9c:75:a5:3a:9e:1d:5f:41:3c:5c:
cd:ed:22:a1:91:c7:52:31:c6:7d:3e:92:93:a1:fd:25:9d:35:
8b:9f:fd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org