Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jab4Wdg3gAYEjoUkUg-uH4seGuc.roa
File: jab4Wdg3gAYEjoUkUg-uH4seGuc.roa (raw, json)
Hash identifier: uRwMDtd7t5eL+JGm2jAAtx05Q0o/i5uD9kUSOmkXHek=
Subject key identifier: 8D:A6:F8:59:D8:37:80:06:04:8E:85:24:52:0F:AE:1F:8B:1E:1A:E7
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185CE01C1C23227443F40ED5199764BE7DA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jab4Wdg3gAYEjoUkUg-uH4seGuc.roa
Signing time: Fri 20 Jan 2023 07:08:19 +0000
ROA not before: Fri 20 Jan 2023 07:08:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 84.32.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:01:c1:c2:32:27:44:3f:40:ed:51:99:76:4b:e7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 20 07:08:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8da6f859d8378006048e8524520fae1f8b1e1ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:63:99:64:f7:9a:8e:7a:77:7c:f8:81:bf:
d2:cf:4a:81:56:4a:01:96:da:0a:7a:05:5b:0d:de:
10:ce:b1:b7:7c:59:21:a7:71:33:cb:ba:e3:89:67:
8a:f6:d4:2c:96:3b:71:52:31:9f:8c:09:d3:41:aa:
85:8d:16:07:ab:4b:23:01:e3:d3:06:2c:75:04:19:
60:cc:2f:42:8a:a6:84:dd:7f:92:5a:20:4c:8b:91:
f6:6e:af:f6:1b:6e:8b:5e:8c:65:5e:1a:a8:ec:13:
16:21:39:0d:99:6b:52:ce:69:96:ca:ca:b5:3e:07:
22:08:59:2a:91:ea:78:79:a4:e7:62:fb:46:87:58:
de:02:6d:32:b0:dc:b3:74:5a:13:0b:d6:73:5e:3f:
01:ac:e9:10:0a:f0:eb:11:16:16:2b:c9:93:e8:29:
89:8b:65:d9:bb:02:83:90:cc:2b:08:54:8d:01:47:
14:88:93:5d:9c:ce:22:ec:8a:8d:3b:06:30:6c:ba:
78:44:ab:0c:bd:85:57:a7:2e:c0:cc:bc:bb:98:08:
60:2e:6e:74:aa:e7:cd:db:30:f5:77:7d:ff:87:7b:
9f:f5:21:7f:40:0b:ed:40:0d:76:67:95:b2:9c:15:
6a:88:ee:ca:94:10:26:9e:e4:22:cd:2c:0d:e3:b5:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A6:F8:59:D8:37:80:06:04:8E:85:24:52:0F:AE:1F:8B:1E:1A:E7
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jab4Wdg3gAYEjoUkUg-uH4seGuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.62.0/24
Signature Algorithm: sha256WithRSAEncryption
41:bf:9a:7f:38:06:58:fe:e8:1e:71:9c:2b:cb:95:6b:c2:b7:
c7:6c:a2:29:e3:d8:23:6d:c2:5b:6d:b5:4d:1a:10:d3:f4:d9:
d4:59:60:41:4d:3f:01:55:f5:48:29:80:8d:33:24:27:dc:5c:
d3:d6:21:fe:f3:9b:44:a0:c3:c5:ce:64:f0:d8:23:e7:d0:07:
8f:a3:14:23:5d:2c:f7:52:c5:d7:b3:2f:14:af:50:24:02:e8:
ad:e4:a8:98:74:1d:f6:90:0a:c6:9e:8d:04:b6:7d:e6:11:41:
8b:b8:92:cd:45:81:c4:dc:8e:44:54:2e:6e:5d:56:a1:39:c7:
44:22:99:48:08:4f:01:4c:8a:9a:6b:f2:90:0d:83:f8:5b:7d:
08:dd:2a:fb:a7:36:11:27:e1:44:d4:a0:1e:a2:e2:73:24:a1:
d2:7e:fb:4a:0a:48:9b:df:94:ad:5c:9a:9e:fa:68:9a:77:eb:
8b:e1:86:d5:e4:77:6c:ea:02:8b:17:71:8a:10:8f:50:25:39:
dd:13:a8:5c:ed:fe:5a:7c:5a:c0:4a:a6:dd:d2:05:a6:4f:10:
23:3a:ca:66:09:b3:8f:88:42:4a:cd:bd:84:94:5c:3a:17:21:
fd:4a:c2:0f:a7:2d:2e:b8:95:7b:e0:52:b2:60:4b:ac:05:a4:
7a:9f:19:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org