Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jt3cATdBbwMLCPt6hSmMGU_SpuM.roa
File: jt3cATdBbwMLCPt6hSmMGU_SpuM.roa (raw, json)
Hash identifier: t5LFNTqwxSXUzrd/V89+/Juo31zLEQbGHa42NP2l6JE=
Subject key identifier: 8E:DD:DC:01:37:41:6F:03:0B:08:FB:7A:85:29:8C:19:4F:D2:A6:E3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019253D2FBFF1DFCF4AB50D3F88DD1BED1B7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jt3cATdBbwMLCPt6hSmMGU_SpuM.roa
Signing time: Thu 03 Oct 2024 19:19:48 +0000
ROA not before: Thu 03 Oct 2024 19:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.223.0/24 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 14:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:d2:fb:ff:1d:fc:f4:ab:50:d3:f8:8d:d1:be:d1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 3 19:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8edddc0137416f030b08fb7a85298c194fd2a6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:21:6d:5e:a0:91:40:af:6e:3b:a8:12:4b:
18:17:e8:31:99:2d:8f:10:b6:e1:9b:cd:3b:db:c6:
26:1d:01:cf:20:a9:5f:19:34:90:d0:78:1e:42:cf:
0b:4e:93:6a:bd:80:2e:47:e9:8c:c0:d2:e8:ac:e5:
e6:2c:18:22:a3:e6:a1:d2:01:70:b0:82:99:e7:b2:
b1:58:e2:09:82:4b:b1:2d:65:1e:43:ec:da:36:3d:
40:31:35:0c:1d:6d:89:68:bd:8d:11:b3:7f:83:13:
0b:9c:31:ac:ce:74:bf:49:56:8b:9c:ca:c6:4c:7c:
63:2d:62:db:65:ee:0f:53:60:ae:eb:06:e2:0c:a3:
5a:7e:0f:8a:5d:ba:3f:bf:5e:42:80:c1:d0:81:2b:
d3:a8:1a:81:85:28:ab:13:c9:44:3c:04:52:90:79:
03:66:f3:b8:e9:55:7c:dd:8c:d5:c0:f2:70:7b:49:
07:89:24:33:8f:38:95:86:ab:b2:b1:88:71:89:2b:
eb:dd:4b:13:7a:65:b3:50:58:fa:fb:2e:8e:33:0d:
b2:b5:88:1a:9a:7c:0a:53:9e:90:8e:05:cd:e5:14:
cd:c8:ca:d7:3c:f2:4d:f6:86:1b:b5:e3:11:00:e9:
4f:2d:5c:03:f4:ab:f3:9b:b8:8d:f4:b9:08:1f:ab:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DD:DC:01:37:41:6F:03:0B:08:FB:7A:85:29:8C:19:4F:D2:A6:E3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jt3cATdBbwMLCPt6hSmMGU_SpuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.70.0/24
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.223.0/24
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0/23
88.216.134.0/23
88.216.197.0/24
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
21:5d:16:42:d4:cd:70:69:94:b3:ea:49:83:da:43:b3:41:37:
63:39:a8:1e:12:0d:c0:70:9a:ff:8a:5e:e1:e6:10:36:f1:74:
c6:b6:b3:2d:4f:01:be:c9:06:20:b3:90:bb:26:95:32:2a:b3:
4e:00:37:ab:67:b5:89:da:3d:48:fe:70:5c:92:09:08:e2:1d:
fe:93:35:5b:87:04:ea:49:a0:d3:89:9d:f3:9f:0f:2b:f0:fd:
5d:ef:a4:76:e3:79:8c:f1:e2:3b:e3:fd:3b:89:4c:52:03:c4:
c0:24:63:3e:7d:14:37:e9:a6:b5:53:06:0a:0d:10:a9:b4:cd:
25:37:8a:3e:45:f6:9c:24:5f:70:a6:7a:d5:51:dd:e6:97:e1:
59:78:a8:06:3e:dc:a9:3d:6a:b6:1c:8e:7a:ed:80:0b:bf:aa:
ea:b6:57:13:95:84:94:32:6b:c3:4a:c8:bf:1c:e3:4d:b6:72:
cb:9c:e0:f7:d8:f3:6b:06:6a:79:bd:28:b0:34:7d:1e:df:5e:
3f:01:18:cc:25:12:1b:7c:dc:cd:25:ab:62:83:e3:78:49:e7:
90:49:a3:2d:77:99:64:97:24:a8:78:8a:82:83:bd:b2:62:8b:
67:e9:9c:4e:28:96:f5:3b:c9:eb:70:a6:59:c2:1f:67:49:ab:
a8:91:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 17:29:55 2024 by rpki-client on console-ams.rpki-client.org