Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ixapns7UUFxbK03dFKh5ehw9NXw.roa
File: ixapns7UUFxbK03dFKh5ehw9NXw.roa (raw, json)
Hash identifier: cnbASIq6tGinZ+BqAyOl4nD4BT4Hc7TDUT0jbXIgII0=
Subject key identifier: 8B:16:A9:9E:CE:D4:50:5C:5B:2B:4D:DD:14:A8:79:7A:1C:3D:35:7C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC5013C646FA64810D30A87B18C4CE584
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ixapns7UUFxbK03dFKh5ehw9NXw.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 84.32.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3c:64:6f:a6:48:10:d3:0a:87:b1:8c:4c:e5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b16a99eced4505c5b2b4ddd14a8797a1c3d357c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:53:c1:07:78:88:e9:8b:02:e3:4b:dd:a0:47:
3f:d0:3c:db:fb:32:dd:fc:a1:7b:77:8e:c6:3f:71:
62:11:fe:f9:0b:c8:73:6f:f8:4c:10:97:8b:7d:fa:
88:22:d0:3f:b5:36:1d:c7:cc:d0:86:b3:6d:bb:fd:
88:d7:a9:9e:41:c7:81:c6:c8:00:15:4e:77:70:e7:
ac:63:3e:00:29:a1:cd:7f:ea:13:3e:51:6a:fb:fd:
90:c8:97:64:ba:08:4f:5a:5f:ef:ef:1c:e5:0c:41:
cd:95:2d:b1:1a:fb:15:42:82:e0:20:dc:bb:60:f7:
7a:0b:2f:1a:4b:92:d5:2b:f2:53:f8:44:7e:6b:fc:
0d:f8:58:4f:49:2c:36:91:49:d4:4c:c4:fd:99:b1:
eb:51:ae:0d:e7:ea:8c:5b:bc:9f:b6:11:3a:15:be:
24:75:27:3d:0d:de:71:38:5b:c8:d9:cb:ff:2b:a9:
d2:5b:02:96:13:5d:a4:1d:6e:7b:85:30:76:5c:6d:
d7:0b:e4:62:54:34:fd:38:c1:3c:c8:55:69:73:05:
51:55:5e:87:7a:ea:6f:17:7c:86:26:c0:c1:d5:02:
2b:1a:d1:ff:c4:0f:9a:d7:e4:52:72:a3:e7:65:1a:
08:3a:14:83:a2:eb:47:4a:1d:bd:50:e4:e1:fc:2f:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:16:A9:9E:CE:D4:50:5C:5B:2B:4D:DD:14:A8:79:7A:1C:3D:35:7C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ixapns7UUFxbK03dFKh5ehw9NXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:11:d3:f8:eb:01:5e:42:e8:c2:31:ac:e3:d6:6e:3a:c7:86:
f6:26:af:0c:49:54:b6:5b:75:da:13:d2:ac:4e:a4:f5:58:af:
c1:8d:7d:9c:59:fa:c3:69:c1:b1:b5:67:c0:49:f5:22:38:5b:
34:e0:7a:42:3e:99:2e:cd:6c:ce:3f:91:80:06:78:26:12:54:
77:87:5d:66:45:ba:52:85:12:17:0d:f7:67:e0:bc:ed:13:59:
f3:e5:4c:ea:87:2a:b4:d2:b2:8e:0b:cf:b0:75:9a:27:b0:ce:
18:8a:36:cb:29:a2:b0:aa:c9:6d:ea:83:50:85:1f:aa:97:78:
99:d4:12:6e:11:7f:f9:11:57:38:0e:42:0c:8f:52:ec:84:5a:
ca:9b:e1:a7:e1:48:a4:52:87:74:f9:85:0b:7e:c2:8b:05:f0:
5e:1c:02:77:78:b6:0a:73:77:96:1d:cf:f0:4f:83:45:d1:8b:
22:d6:75:1d:d0:e1:d5:d8:e5:71:bf:9e:ba:07:29:ae:a8:59:
cf:e0:0c:9f:bc:96:fc:9f:a1:79:00:3b:5d:9c:51:8c:b1:b6:
0d:3c:2c:90:e2:12:ca:d4:a8:a8:13:4b:de:f9:be:7e:d5:7a:
34:3b:2f:37:19:db:ad:bd:49:ed:91:12:da:f6:72:50:94:33:
fc:61:f5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:40 2024 by rpki-client on console-fra.rpki-client.org