Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/janNdQ6JfbRGuXexQsrznBkti-U.roa
File: janNdQ6JfbRGuXexQsrznBkti-U.roa (raw, json)
Hash identifier: 82TrApa9NdMwfxTKso6d22OAb20xuQyVOxgEhUnc+Sw=
Subject key identifier: 8D:A9:CD:75:0E:89:7D:B4:46:B9:77:B1:42:CA:F3:9C:19:2D:8B:E5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187F9EBB1115FC8CF8053C61BBC2C01075E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/janNdQ6JfbRGuXexQsrznBkti-U.roa
Signing time: Mon 08 May 2023 05:53:05 +0000
ROA not before: Mon 08 May 2023 05:53:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 84.32.108.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Jun 2023 07:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f9:eb:b1:11:5f:c8:cf:80:53:c6:1b:bc:2c:01:07:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 8 05:53:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8da9cd750e897db446b977b142caf39c192d8be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:8a:43:90:e0:c8:ce:85:13:ff:0d:32:3e:
87:db:fc:dd:f8:50:c7:1c:de:8f:2e:23:18:fe:76:
0d:ac:d8:10:c7:0b:6c:9e:eb:98:f0:93:39:b4:97:
b0:dd:fe:37:68:77:e8:31:a8:0c:6a:18:2e:e5:43:
2d:a2:80:43:15:bb:5a:aa:3f:79:14:e8:1e:1a:6a:
8b:36:ce:e3:1e:4f:82:6d:42:94:4a:fb:af:7b:97:
8b:da:06:cc:33:06:f5:a0:a4:bc:ce:89:26:c9:83:
73:04:d7:57:2a:8d:93:87:65:db:7c:3a:82:d2:91:
77:f6:8f:08:4b:ae:3c:ce:42:4b:1f:b7:c2:91:1a:
f9:2a:6e:68:08:d0:3f:28:38:57:d7:05:fd:4b:dc:
0d:36:1c:15:e8:d6:2d:45:cb:b5:2e:25:ca:fd:59:
cf:f3:e2:5d:f0:31:3e:8e:b3:fe:5b:4b:7b:67:d6:
f0:7e:09:d8:2a:88:14:79:89:b5:e2:8e:ce:ec:ac:
67:22:64:08:6a:05:c0:3c:59:22:2a:c3:80:d1:d9:
d8:c9:ec:1b:f3:7d:57:12:20:b2:a5:4a:51:93:d7:
ae:0b:14:4a:69:8c:5b:69:08:78:b0:ed:d7:d0:62:
2f:72:fa:d5:52:00:e0:66:ab:cf:1e:25:52:c3:4b:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A9:CD:75:0E:89:7D:B4:46:B9:77:B1:42:CA:F3:9C:19:2D:8B:E5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/janNdQ6JfbRGuXexQsrznBkti-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.108.0/23
84.32.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:dd:c2:50:2d:28:03:32:78:6c:06:d8:43:cc:77:b4:ee:1e:
b3:f8:ab:23:c9:8a:0b:b7:f3:2a:94:ef:04:9d:e1:45:e6:5f:
49:bc:a0:7b:e8:e5:e9:fb:ce:3a:10:d5:76:a0:8e:ad:49:c6:
5c:06:a1:84:a8:dc:cc:62:14:3f:ca:d7:bc:89:d5:a1:89:95:
58:24:23:80:ca:b0:ae:2a:e0:2f:28:14:9b:4b:d7:d7:02:a0:
26:a2:c1:2c:ad:e6:91:38:11:b2:01:32:6f:e9:37:8b:16:5b:
a1:65:d4:78:81:30:11:c0:fe:e6:3c:ca:00:bf:80:d8:50:e3:
87:7d:2d:48:df:4f:2e:ac:cc:87:7f:b4:ee:16:1f:cc:03:50:
0b:0d:ce:3e:83:73:38:14:67:46:9e:53:c0:7b:b9:28:6d:99:
de:1e:c7:96:d9:60:06:8f:cd:96:20:99:60:53:7a:de:97:14:
56:fc:7e:5e:bc:a0:6e:c9:b6:da:82:bb:ca:df:59:52:ef:cc:
ce:51:0c:66:b4:de:d0:2e:77:ba:b4:47:9f:18:ce:e8:ea:7d:
e9:be:34:26:96:a6:a0:97:1c:75:1d:75:67:0e:cc:5d:f2:2a:
e8:8c:26:e1:6a:bc:fc:a3:3a:16:c3:61:7f:92:dc:a0:6b:f3:
b0:39:c3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org