Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/k1TsH6SdXIWr9wRgJvUaP3R2G_M.roa
File: k1TsH6SdXIWr9wRgJvUaP3R2G_M.roa (raw, json)
Hash identifier: 6kaUk0VUc0nh1107R03s2OHTFkQlMBfac78AlUf/e4o=
Subject key identifier: 93:54:EC:1F:A4:9D:5C:85:AB:F7:04:60:26:F5:1A:3F:74:76:1B:F3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018736662CE3ACF19A4AFEF004D401ABE954
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/k1TsH6SdXIWr9wRgJvUaP3R2G_M.roa
Signing time: Fri 31 Mar 2023 06:41:18 +0000
ROA not before: Fri 31 Mar 2023 06:41:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.184.0/22 maxlen: 24
84.32.188.0/22 maxlen: 22
88.216.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:66:2c:e3:ac:f1:9a:4a:fe:f0:04:d4:01:ab:e9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 31 06:41:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9354ec1fa49d5c85abf7046026f51a3f74761bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:33:1b:93:10:94:c8:b5:49:0d:de:db:4b:
89:a0:4a:ed:93:f2:b5:ff:d9:6a:97:f1:d3:76:d9:
b4:a7:2e:82:b1:e9:40:e0:5c:6c:00:e7:7f:f5:7c:
14:7e:b2:7f:ab:dd:8c:44:58:32:67:43:11:c8:3f:
62:de:d8:cd:e0:a4:25:1f:60:e7:fb:42:19:c9:b4:
73:df:f2:26:01:cd:25:ac:81:9b:e8:e6:ff:fc:53:
b7:ac:c5:b8:ad:02:da:99:e2:a1:bf:5a:5b:3d:16:
d9:38:e2:7e:88:28:8a:f1:e9:9f:7f:dd:ed:19:23:
39:e1:6d:e6:ae:25:0e:69:d4:94:99:fc:6d:0c:12:
7c:8f:78:a6:6b:04:a9:c5:ba:1e:40:ec:71:c4:03:
8c:d4:13:53:97:4b:54:5e:3e:ce:09:0b:a5:67:8b:
3a:df:25:c5:1f:47:8b:d5:82:98:d9:24:3e:f1:ac:
50:08:78:f0:c9:df:94:67:c5:a2:ad:c5:6b:bb:0d:
ec:a8:28:b6:2e:1f:25:37:64:13:66:c0:c3:ab:87:
b1:9d:5c:b3:19:54:31:07:d4:e3:36:71:03:d5:36:
c8:b6:fc:a0:07:af:0e:4a:c1:40:16:fe:2e:1a:9e:
41:8d:87:de:77:da:15:eb:40:e9:05:2d:5e:71:3e:
f5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:EC:1F:A4:9D:5C:85:AB:F7:04:60:26:F5:1A:3F:74:76:1B:F3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/k1TsH6SdXIWr9wRgJvUaP3R2G_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.184.0/21
88.216.93.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d0:47:4d:ff:10:c4:64:1a:49:5e:a3:51:d0:1f:a4:4f:25:
6d:25:fc:51:38:53:4e:04:73:27:b0:dc:5b:c1:12:b2:8d:3f:
f1:4f:cd:98:f7:16:74:05:4d:4f:5c:e0:e7:7d:e9:0a:b9:40:
d2:42:50:eb:d0:a7:5d:cd:bd:ec:ab:b6:6d:db:7b:b7:07:66:
df:7d:33:e8:14:c8:b3:46:4a:1a:95:2a:88:16:ea:f2:12:91:
ed:a9:93:7c:c7:98:c3:25:75:51:cf:69:1a:b8:33:56:83:6a:
c0:77:8e:c4:60:91:76:cf:6b:9f:8a:f0:2c:5c:a4:ec:12:6b:
ac:b8:ee:f5:25:4d:04:7a:7c:a3:1b:74:a1:90:a0:62:ea:41:
15:e3:9e:5c:3f:1d:12:80:29:eb:d5:1d:34:41:d4:ca:2e:c0:
d2:31:9c:9c:2d:c5:20:24:98:dd:28:97:95:2b:2d:7f:07:75:
1d:51:bb:5c:35:48:e6:59:b3:11:5d:bc:26:3d:96:dc:52:c4:
91:f8:98:80:de:be:56:b3:0e:6b:83:73:e9:27:18:c8:47:64:
8d:6e:63:ee:85:44:4f:f0:d1:6b:ed:67:c9:0b:b8:43:1d:18:
b7:c4:ab:d2:fc:9c:69:90:7f:62:32:8c:e3:66:4c:e5:e9:8e:
21:b5:75:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:50 2023 by rpki-client on console-fra.rpki-client.org