Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iM933OBkqktxoQiLGCkT7K01Xtw.roa
File: iM933OBkqktxoQiLGCkT7K01Xtw.roa (raw, json)
Hash identifier: ZFVQRVsOXaT4I9BTDrbBwa4kaGiMaOC/q+V+cQ0IrR0=
Subject key identifier: 88:CF:77:DC:E0:64:AA:4B:71:A1:08:8B:18:29:13:EC:AD:35:5E:DC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018E702178F8EDDC00ABBC81F5E94C7D7E44
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iM933OBkqktxoQiLGCkT7K01Xtw.roa
Signing time: Sun 24 Mar 2024 11:03:45 +0000
ROA not before: Sun 24 Mar 2024 11:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212504
IP address blocks: 84.32.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 19:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:70:21:78:f8:ed:dc:00:ab:bc:81:f5:e9:4c:7d:7e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 24 11:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88cf77dce064aa4b71a1088b182913ecad355edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:62:1a:a9:5c:85:53:c8:8c:4c:56:d3:5a:
10:4e:b0:69:8c:db:8a:a2:cd:09:54:74:03:94:83:
d6:69:cf:25:2f:8c:b1:88:b0:3d:f4:7c:28:e2:05:
cc:12:40:81:cc:f1:68:cf:a6:9b:46:8c:46:40:ab:
f0:1b:76:89:dd:f3:4a:67:f1:3d:66:9f:af:c8:63:
4c:b6:81:8c:6d:4b:42:a9:13:cc:ba:27:b0:6c:f6:
e6:7b:4c:26:3c:85:45:1a:1f:f3:ad:db:7f:16:5b:
98:ec:a0:46:21:85:5b:78:34:bb:16:02:bb:04:4b:
26:c6:19:7a:ab:d6:ca:05:61:fa:6b:c5:72:bb:f2:
3b:4b:99:fb:4e:17:e4:a4:78:ee:9a:5e:d4:b3:b3:
66:1f:e9:43:0c:60:21:07:ed:07:2d:f6:37:5d:d5:
4d:36:1f:2e:42:d9:39:ac:38:4b:af:3f:92:74:d6:
58:1c:cd:14:19:e7:e6:6e:06:1e:53:94:c4:1f:50:
80:00:96:60:f4:8e:3a:28:ce:ef:28:f9:df:f5:d1:
18:4b:61:c7:a5:42:71:a0:da:f6:5b:f7:ab:e0:87:
e4:a0:fa:e9:21:a3:90:da:f4:34:7d:9e:4c:5f:f9:
81:80:45:76:fc:1e:cc:87:cb:ac:cf:72:26:bc:74:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CF:77:DC:E0:64:AA:4B:71:A1:08:8B:18:29:13:EC:AD:35:5E:DC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iM933OBkqktxoQiLGCkT7K01Xtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e8:8d:7f:b6:8f:06:d2:68:bc:ee:35:24:3b:14:d9:95:2b:
5b:42:ee:b6:9a:5d:68:d1:5a:8f:f3:f6:78:74:a9:a4:16:26:
97:a0:12:4e:42:eb:44:73:be:ca:89:ce:55:a1:88:f8:47:6e:
f3:03:79:b4:71:db:d5:53:3f:66:58:54:fe:43:1f:30:de:d8:
c1:4e:4a:34:dc:8b:d1:15:5c:de:52:4d:c4:dc:e7:96:3f:03:
ea:a7:dd:c8:05:66:3b:70:07:a6:2f:d7:b7:bf:dc:c6:36:4c:
0f:ca:ca:50:f2:7f:33:00:f6:9a:33:bc:23:c0:51:81:8e:56:
1f:68:12:e5:61:21:b7:06:2d:a6:23:c2:c2:45:8d:ad:4c:93:
65:e0:cc:49:56:b5:58:64:51:51:02:59:bf:87:cb:df:a1:a2:
05:1b:55:3d:ae:10:7f:23:86:dd:64:76:e9:2b:c1:2e:7b:dc:
b5:51:cd:4f:fd:16:e4:da:1a:af:3c:dc:a1:bd:c0:e5:e4:86:
59:bf:e8:44:85:b6:17:47:a5:46:81:e1:fd:6e:8c:04:de:d7:
f6:4d:e7:71:6a:d4:d7:6b:d8:1d:ff:9e:02:3c:a4:8a:28:cc:
ab:87:b5:9c:92:59:1b:dc:23:dd:3a:58:e8:02:c9:6b:fd:d3:
71:01:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:36:58 2024 by rpki-client on console-fra.rpki-client.org