Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/i6UUzM6DqDs1f8uFbouGdHKvAno.roa
File: i6UUzM6DqDs1f8uFbouGdHKvAno.roa (raw, json)
Hash identifier: p9VSzt9SjjIsR8dCBhjCQ2tvUsXAzdv5oWrwtMbvfD8=
Subject key identifier: 8B:A5:14:CC:CE:83:A8:3B:35:7F:CB:85:6E:8B:86:74:72:AF:02:7A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC501463758FDCCEE8C7122170233582B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/i6UUzM6DqDs1f8uFbouGdHKvAno.roa
Signing time: Mon 01 Jan 2024 12:30:44 +0000
ROA not before: Mon 01 Jan 2024 12:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 84.32.179.0/24 maxlen: 24
84.32.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:46:37:58:fd:cc:ee:8c:71:22:17:02:33:58:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ba514ccce83a83b357fcb856e8b867472af027a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:cc:f6:ea:aa:90:03:66:1e:7a:17:a2:3f:
ea:0d:17:b0:4a:a8:aa:33:48:dc:fe:9c:c5:29:6d:
00:86:33:c7:26:77:a3:98:7a:1c:7f:86:1c:32:2a:
56:84:d8:08:67:dc:51:41:43:68:17:3d:63:1b:63:
cd:d4:84:7d:c3:dd:6e:27:33:87:a0:b9:4a:2e:d5:
d7:24:50:29:a1:a3:c0:7c:c1:4b:a7:c4:f9:2b:ba:
ea:1c:35:e7:d0:20:48:37:94:07:f3:37:ea:36:3f:
b2:70:45:7d:b3:79:15:c8:2b:d5:58:90:43:ce:ed:
3c:36:3b:29:65:5d:fe:3b:8d:a6:ac:01:ea:92:70:
ec:a3:a5:18:48:ce:2e:0b:4e:0d:54:e4:93:b7:ef:
93:5a:09:67:c6:fa:98:3f:39:c0:a5:13:8d:2e:b5:
ac:e1:5c:c5:d1:39:26:d5:1b:53:4b:f3:b9:62:3e:
c4:19:46:53:fc:7b:a3:10:bb:9b:ed:d7:a5:5d:b3:
bf:4f:aa:33:63:13:f4:0a:62:06:f8:23:bc:39:d7:
89:5f:06:a6:77:95:8f:8b:98:c8:54:75:28:0f:d4:
2d:c2:58:60:9f:23:81:97:92:6e:8d:60:c5:f9:b9:
8a:a9:eb:f8:90:a7:98:75:a6:0c:0b:0a:6c:47:ba:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A5:14:CC:CE:83:A8:3B:35:7F:CB:85:6E:8B:86:74:72:AF:02:7A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/i6UUzM6DqDs1f8uFbouGdHKvAno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.178.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:9c:26:5a:58:29:ae:36:06:04:84:ae:cb:85:57:e0:9d:a5:
b0:22:26:30:ee:da:f8:2d:5a:28:45:e2:06:92:14:0e:cc:00:
b1:6c:13:05:37:82:b4:e1:72:ef:0b:fb:38:53:3e:f8:ba:cf:
8d:1d:81:dc:fb:3b:2f:52:86:38:4b:1d:eb:37:93:55:4f:9e:
18:69:c7:4c:43:fa:05:12:81:98:8c:8b:3d:27:68:e1:64:06:
df:bc:32:30:2e:09:ee:a1:52:bc:ce:e1:46:6e:88:d0:45:25:
bb:bd:93:67:a1:3d:90:22:f1:70:ab:77:93:a3:16:6b:f9:e8:
50:c1:09:da:69:d2:be:3a:03:2c:58:3d:49:fd:e1:04:34:38:
53:b3:b4:23:da:be:f0:36:fe:67:00:c8:0b:07:10:87:63:87:
3a:9e:3f:c8:e4:be:96:3a:e8:fc:4c:32:d0:04:b8:52:08:a0:
9d:65:e8:d6:b4:b2:1a:ac:7e:05:b3:d5:37:fe:6a:9e:b5:e3:
35:e8:68:fd:b4:3a:10:7b:46:33:d9:2b:aa:a1:1f:9e:df:2a:
d4:8c:69:37:83:73:0a:51:92:83:7a:21:3c:a9:19:a9:e8:5e:
08:e2:99:aa:de:32:c2:ed:54:bb:52:22:01:9e:ec:46:34:34:
77:01:5e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org