Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iVGYiIQX9tOhHOkHueBEQDGlITM.roa
File: iVGYiIQX9tOhHOkHueBEQDGlITM.roa (raw, json)
Hash identifier: ucdIhi1rZ0t8lriYJmyDdPFK5kfODVGh+63dVIuBwu8=
Subject key identifier: 89:51:98:88:84:17:F6:D3:A1:1C:E9:07:B9:E0:44:40:31:A5:21:33
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC5014738C95F7C1BC1714097078FAEE9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iVGYiIQX9tOhHOkHueBEQDGlITM.roa
Signing time: Mon 01 Jan 2024 12:30:44 +0000
ROA not before: Mon 01 Jan 2024 12:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62179
IP address blocks: 84.32.192.0/21 maxlen: 24
84.32.200.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:47:38:c9:5f:7c:1b:c1:71:40:97:07:8f:ae:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=895198888417f6d3a11ce907b9e0444031a52133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:db:85:36:e3:79:10:b3:01:83:01:02:1a:
14:30:62:a5:1e:ed:9e:eb:61:8f:95:07:0c:f3:34:
5e:86:47:59:89:cf:b7:76:fc:32:0b:c7:c0:7f:75:
1b:bd:dd:21:99:3e:e9:da:88:62:71:da:ca:97:9a:
a7:9f:78:c8:1b:5b:74:ea:99:f6:60:59:07:23:95:
f3:4a:5a:5d:e7:4c:fe:1e:c8:39:09:3f:b2:8d:ab:
63:d2:f5:a5:23:bd:0d:ba:90:10:68:22:b6:41:9e:
29:62:99:fe:b1:3d:00:78:ec:55:b1:f7:a0:4d:ae:
6c:d9:03:b5:d1:20:43:d9:7c:70:00:df:13:fa:fa:
2f:40:74:8c:dd:38:57:64:04:3e:e3:78:e9:fb:61:
7a:da:63:93:0b:52:50:7e:0c:8f:c5:e5:d1:ea:00:
d0:3d:c0:cc:ff:c0:b5:c7:e4:c4:75:01:e5:79:56:
ce:f3:3b:04:f6:e4:3f:88:31:c1:56:fc:72:8d:1c:
a9:96:6c:29:6b:1b:92:7d:a1:ae:b3:6e:c3:37:15:
e0:28:2f:ba:a5:ac:1d:32:46:82:37:b9:9d:81:c6:
08:dc:2e:31:ae:7f:42:35:09:75:f4:66:66:ed:6c:
5c:5a:db:f1:d6:b2:19:19:ff:4b:5e:2d:1c:fa:56:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:51:98:88:84:17:F6:D3:A1:1C:E9:07:B9:E0:44:40:31:A5:21:33
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iVGYiIQX9tOhHOkHueBEQDGlITM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.192.0/20
Signature Algorithm: sha256WithRSAEncryption
97:69:6a:e0:c1:f5:c7:83:ac:9c:a3:66:97:ce:c3:fd:ca:34:
92:ad:f5:d6:9a:d7:26:74:fd:75:2a:17:57:9e:63:20:4a:f1:
0e:5b:de:8a:90:a8:5e:1a:57:b6:54:96:96:51:77:ff:39:57:
4f:59:82:d1:db:82:5d:07:85:45:e2:29:ed:87:c7:c7:05:9e:
28:f6:c2:50:03:22:d9:80:48:20:00:a0:d9:7e:d5:50:91:d9:
2f:0e:ad:25:37:b9:ae:b3:74:ab:1d:d5:1f:d9:3e:5b:74:a4:
f8:b3:3c:dc:cd:03:d3:1c:f6:d3:11:13:a6:c6:24:42:42:f0:
e5:4d:c6:bb:e0:b8:7e:65:fa:2f:4c:a0:56:74:16:5b:aa:b5:
21:0c:e4:14:c2:33:64:27:79:0d:6f:9f:41:7d:42:b7:6e:a3:
37:d2:ad:b1:a0:b2:8d:1f:99:92:54:46:26:b5:83:c6:32:14:
d4:a0:10:f3:8d:a3:f9:63:7d:9c:29:2b:57:2b:6c:07:ba:66:
de:d5:fd:1c:3c:86:5b:ad:d5:0b:6c:50:e6:85:22:21:b6:28:
26:11:89:93:af:43:f9:a4:48:16:50:11:c0:ac:12:f5:6c:48:
e1:b4:be:04:b3:c5:fe:c6:5f:ee:4e:10:07:1d:d4:b7:ce:60:
0f:b7:e4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:06 2025 by rpki-client