Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iFRPcRm1FxQAHfXjTEaADdKE6Dw.roa
File: iFRPcRm1FxQAHfXjTEaADdKE6Dw.roa (raw, json)
Hash identifier: 79SMe7xlqfjQ0QD5kQseLqDrigtSLnWwjU7OfXPWsH4=
Subject key identifier: 88:54:4F:71:19:B5:17:14:00:1D:F5:E3:4C:46:80:0D:D2:84:E8:3C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFCBE266378BE874A747D5611622C6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iFRPcRm1FxQAHfXjTEaADdKE6Dw.roa
Signing time: Sun 01 Jan 2023 18:54:52 +0000
ROA not before: Sun 01 Jan 2023 18:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 84.32.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:cb:e2:66:37:8b:e8:74:a7:47:d5:61:16:22:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88544f7119b51714001df5e34c46800dd284e83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:48:dd:c3:ad:bf:10:b1:5f:d3:41:8d:77:1a:
69:b5:96:c5:8f:da:c5:45:1c:9f:d7:35:d2:9d:d7:
ad:63:78:fc:5e:b8:0d:cf:0c:fe:42:6b:db:2b:3f:
8b:46:cb:0d:da:b9:de:2f:ef:84:67:f7:ae:29:48:
88:93:10:ad:26:99:8c:f6:4e:20:a8:81:b7:fc:1c:
3b:e1:48:65:3c:ad:35:13:22:5c:2b:94:0e:81:92:
af:a0:ad:6f:39:85:2f:23:3d:53:3f:29:58:dd:9f:
5b:4d:82:f2:6a:b8:37:b9:95:bd:13:ca:db:4b:c1:
9e:5c:6f:15:e7:b7:ac:c0:f8:10:ff:56:5f:76:25:
3f:36:3a:69:70:37:ab:db:1e:42:de:62:31:8f:3b:
96:08:fa:59:e5:00:7e:88:7d:7a:5c:3b:36:fd:d2:
8e:79:87:f3:d3:44:c6:33:42:01:f2:84:ae:a2:5f:
cc:0c:3c:56:d2:52:34:a3:80:fb:bd:6c:ef:3a:6a:
f2:52:6a:b6:0b:49:9c:69:65:a4:52:7f:64:85:db:
0f:9f:12:7a:15:14:d4:06:f9:21:1f:f4:d3:83:05:
37:65:21:1d:83:f4:32:67:e4:ce:76:5e:1c:55:02:
f1:9c:0e:3e:98:81:ca:b8:47:50:69:2c:d0:9c:8f:
ab:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:54:4F:71:19:B5:17:14:00:1D:F5:E3:4C:46:80:0D:D2:84:E8:3C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iFRPcRm1FxQAHfXjTEaADdKE6Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.229.0/24
Signature Algorithm: sha256WithRSAEncryption
23:23:bd:56:40:05:3d:ce:27:4c:c2:e0:cf:3d:6d:85:5f:a2:
13:1f:7d:ec:35:e2:80:b0:dc:6e:a5:41:38:45:62:79:50:ad:
39:d0:1a:e9:43:3c:ce:01:cb:23:94:b3:36:e9:39:55:b2:02:
34:c8:7c:79:9b:65:bc:b0:42:d8:cf:b9:fa:bc:20:ca:0c:04:
36:e7:1a:89:8c:e1:59:b8:fc:60:1d:b5:b8:09:87:0a:b3:aa:
be:a5:6f:84:34:87:f6:ee:2c:2c:1e:4a:79:11:55:4e:b0:27:
95:25:90:11:b3:28:85:c2:48:f8:4e:ff:79:11:16:74:0d:e0:
7a:03:ca:e4:b9:65:bd:b8:69:9a:8d:76:19:5d:27:bd:d9:1e:
0b:cd:67:30:1d:7f:fa:1d:b5:9e:ea:63:69:4b:fa:c0:99:09:
e0:5a:bb:72:47:92:70:24:9f:88:54:29:af:21:fb:4d:c2:6b:
ad:1d:f6:8b:5b:86:6f:46:fc:6e:70:5c:43:17:99:5d:db:71:
80:3f:0d:75:6d:c0:0e:04:d3:20:c5:be:95:b5:24:6b:ef:cf:
38:cb:ae:a4:62:cb:61:0d:5b:11:a1:b3:8d:32:3d:9c:8b:46:
7e:c0:5c:ac:f3:52:06:3e:35:72:93:53:9a:cf:a2:c6:b7:e5:
cf:2b:b7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org