Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/l0p8iEUqKoKmIY045Fs_1EtsCoA.roa
File: l0p8iEUqKoKmIY045Fs_1EtsCoA.roa (raw, json)
Hash identifier: McGUO7Q9K55FSwoggSAvd/ofF4WtPujC2UwUWVkFBU0=
Subject key identifier: 97:4A:7C:88:45:2A:2A:82:A6:21:8D:38:E4:5B:3F:D4:4B:6C:0A:80
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A899BE6F7FE3F017FE1BE2BD1BF45157E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/l0p8iEUqKoKmIY045Fs_1EtsCoA.roa
Signing time: Tue 12 Sep 2023 13:36:50 +0000
ROA not before: Tue 12 Sep 2023 13:36:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399073
IP address blocks: 84.32.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:9b:e6:f7:fe:3f:01:7f:e1:be:2b:d1:bf:45:15:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 12 13:36:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=974a7c88452a2a82a6218d38e45b3fd44b6c0a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:0d:25:b1:b6:85:a2:27:79:2b:0e:25:2b:
f5:af:72:bb:3d:f0:6f:dc:3f:06:7c:c0:ae:88:e4:
93:ed:77:c8:e4:20:cf:07:c6:02:0b:41:5d:78:b4:
7a:1a:07:51:7f:3c:83:63:fb:d2:61:3f:51:2f:35:
fe:5d:64:99:e1:f9:aa:e0:40:a1:88:b0:79:76:5a:
96:1b:82:f6:b7:83:ae:1c:64:38:e0:64:02:31:76:
0a:4f:b8:07:c3:6c:7a:de:be:ff:07:9f:a2:e0:46:
31:44:58:19:33:ab:34:d7:58:2c:07:bc:ba:5b:ae:
15:43:56:d8:99:98:83:8b:04:f4:ef:ba:01:2d:94:
2c:6f:23:81:15:2d:54:27:51:1b:34:91:71:23:32:
98:6e:fd:24:d7:6f:85:33:ff:8f:8b:67:c6:d8:a4:
0d:95:db:35:a8:b9:c5:7d:4d:64:ae:f4:f8:a9:8d:
0d:9e:25:d8:e4:4d:ca:37:0b:94:16:3d:a0:1d:d4:
9b:a3:cd:03:81:4a:81:40:f8:78:79:6e:34:6d:8b:
8f:74:5a:22:cd:f5:39:a6:5e:86:d3:52:92:06:09:
69:4a:67:1b:7f:51:39:2b:f8:7a:ba:0a:aa:da:05:
57:b3:96:e6:8a:c3:33:90:65:4a:3a:6d:30:f5:b1:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4A:7C:88:45:2A:2A:82:A6:21:8D:38:E4:5B:3F:D4:4B:6C:0A:80
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/l0p8iEUqKoKmIY045Fs_1EtsCoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.225.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e4:61:bd:1d:b3:25:fa:f8:95:f3:ee:83:8d:9a:f4:af:56:
5a:44:b8:02:fd:94:77:24:c3:16:7e:e4:42:3e:bf:3c:c7:58:
67:52:dc:4d:e7:69:9f:ac:40:b4:29:f5:25:58:36:b3:bc:67:
99:03:b0:d6:ff:0b:7d:09:69:7e:c3:69:e5:e0:42:2b:58:ca:
b3:45:46:54:82:4d:a2:2a:28:b1:75:7d:0e:69:94:2e:05:08:
06:66:21:14:27:f9:99:b2:d4:a4:3d:02:f5:e5:ca:b2:92:23:
25:53:9d:a4:db:d4:1a:9f:e2:e3:8d:3f:66:a4:dd:f1:47:09:
73:f6:50:99:b6:7e:df:fc:f2:26:a1:52:75:b0:31:59:75:2f:
7a:41:ee:7e:38:f3:20:5c:e9:de:1d:d1:13:46:d6:a5:4e:95:
9c:31:d1:66:60:2c:be:0b:1f:ed:d5:24:09:5a:6c:33:5f:8b:
3f:3b:11:fd:77:54:1d:84:b2:6b:1d:39:70:0d:06:61:ea:7e:
ca:cd:b1:ee:e8:94:7f:e5:f6:d8:c5:40:a5:87:04:a8:78:0e:
c1:a0:83:c8:34:8c:fb:b6:23:75:ab:4c:fe:7f:4d:8d:67:b2:
15:78:aa:ef:a4:26:b6:12:5a:6e:1a:8b:96:53:04:d5:ac:d8:
3b:25:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 14:45:41 2023 by rpki-client on console-fra.rpki-client.org