Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kPupJy61j3uxME1MKtCnM8CRt4I.roa
File: kPupJy61j3uxME1MKtCnM8CRt4I.roa (raw, json)
Hash identifier: p1G4R31iqXTdXmZuVpsZMAXpC2ixnRo/vT2aU87a0OI=
Subject key identifier: 90:FB:A9:27:2E:B5:8F:7B:B1:30:4D:4C:2A:D0:A7:33:C0:91:B7:82
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01867CF1A9940425E0ED52A43955D1C91480
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kPupJy61j3uxME1MKtCnM8CRt4I.roa
Signing time: Thu 23 Feb 2023 06:24:17 +0000
ROA not before: Thu 23 Feb 2023 06:24:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 84.32.218.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Feb 2023 12:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:f1:a9:94:04:25:e0:ed:52:a4:39:55:d1:c9:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 23 06:24:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90fba9272eb58f7bb1304d4c2ad0a733c091b782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:52:05:86:c5:58:e9:19:5d:d6:bf:cf:51:
4a:96:14:1e:06:48:e8:cb:cc:08:bb:c3:bf:c5:26:
6e:b9:16:76:4b:d0:a3:e8:c8:97:6b:43:71:c3:8f:
40:d9:ac:38:0b:35:d9:ee:1c:02:7e:97:aa:25:96:
78:5c:1d:f1:ca:fe:7a:60:09:7d:0e:c4:76:95:27:
42:ce:9d:4a:1d:0a:10:00:2a:ea:32:ca:5a:67:3f:
59:f4:3e:73:85:cd:c4:92:7e:84:d7:3e:9c:88:ed:
54:db:07:d9:81:88:eb:5e:3f:e3:41:21:66:3f:d3:
7f:3a:41:6f:6b:c3:6c:62:66:01:0a:d4:b4:17:e3:
12:b5:6f:7a:fd:d0:36:21:e1:1a:3e:d4:5b:67:e9:
ef:3c:7b:7c:99:3d:89:2b:9a:86:ab:4a:d8:0d:b4:
11:54:71:40:f7:b4:27:00:fb:05:56:d1:fa:b7:dd:
83:4a:0a:3f:7e:fe:a7:bf:28:14:ed:5a:81:d9:f5:
68:c6:d7:2b:07:5e:bf:36:7d:83:04:e5:f4:12:8c:
b1:b8:f1:77:46:6d:ce:74:09:01:71:70:ea:92:8c:
04:d2:f5:4d:4d:a5:e9:ea:1d:4d:9d:61:08:61:33:
4e:a2:82:a0:8f:93:e7:2c:0d:23:f1:88:7f:fe:43:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FB:A9:27:2E:B5:8F:7B:B1:30:4D:4C:2A:D0:A7:33:C0:91:B7:82
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kPupJy61j3uxME1MKtCnM8CRt4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.218.0/24
84.32.229.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9e:83:a8:45:24:e3:0a:38:d5:21:2e:37:c0:34:02:0d:b5:
46:b0:26:8e:4e:48:5b:bb:83:80:de:12:4d:d6:33:4a:a8:ae:
ef:ae:40:92:db:82:17:ac:02:9c:db:d2:9c:3d:9d:39:20:04:
e2:2e:e0:5c:a1:bc:29:ef:1b:6a:54:38:a5:80:56:a5:3b:f3:
64:a3:53:38:03:6e:c9:65:21:3b:9c:a2:c7:f0:97:64:fc:a4:
e4:14:41:98:b1:c1:a3:9f:97:67:a5:e0:34:f6:93:d6:3c:ae:
9e:0c:38:2a:d5:e8:d4:00:f1:4f:93:d0:08:f2:a0:d0:d6:68:
36:2e:e1:d5:50:a9:fb:38:94:75:44:3d:78:59:11:55:be:80:
57:d9:35:b4:b6:83:e1:9c:c1:66:dc:45:0d:a4:fb:fb:77:d5:
34:83:0f:d5:99:0f:0e:8e:17:2a:0d:81:76:ec:a0:03:d0:1d:
6b:95:bb:68:64:20:e6:b8:06:39:c4:db:a1:5e:b3:a6:ea:d8:
60:0d:ad:1d:40:11:42:70:f1:81:d1:eb:5b:eb:40:a3:75:ce:
33:10:4a:af:7e:2d:1c:a5:bd:ac:e0:14:6e:0e:82:f4:f7:18:
2a:f2:6f:22:a2:95:67:c2:ff:5c:b3:bc:c1:8f:ed:2e:72:bf:
88:df:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org