Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/laVYxPIrRhi5_Dg75vNRj8VnIZs.roa
File: laVYxPIrRhi5_Dg75vNRj8VnIZs.roa (raw, json)
Hash identifier: fd1WTSZ6CSU09ZVZm1FHNz3YaAYiOu5laqw4+XLg6Ug=
Subject key identifier: 95:A5:58:C4:F2:2B:46:18:B9:FC:38:3B:E6:F3:51:8F:C5:67:21:9B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01868547075589747B7A05480293027BA6AC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/laVYxPIrRhi5_Dg75vNRj8VnIZs.roa
Signing time: Fri 24 Feb 2023 21:14:29 +0000
ROA not before: Fri 24 Feb 2023 21:14:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 84.32.4.0/24 maxlen: 24
84.32.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:85:47:07:55:89:74:7b:7a:05:48:02:93:02:7b:a6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 24 21:14:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95a558c4f22b4618b9fc383be6f3518fc567219b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:89:32:cc:52:66:b0:5c:57:c5:a2:de:30:
e3:cb:f7:7e:34:2b:7b:ff:f4:7e:32:48:4f:6c:4d:
ec:fb:4f:40:56:35:8d:f5:0d:6c:11:1f:6f:4f:a6:
55:60:56:27:13:dc:ec:a2:f5:a4:e5:e8:47:e8:ee:
53:55:d2:b1:4f:cf:61:fd:d9:80:01:e2:b5:ba:3e:
fc:25:d8:fc:2d:85:da:ed:28:86:71:36:7b:ea:a8:
03:f3:cd:a7:e9:b9:ee:9e:7b:c4:5d:81:11:3c:bb:
1b:ef:85:d3:42:8d:c3:24:24:b7:8e:9e:6c:14:2a:
9d:43:b9:04:61:ac:b7:96:6e:72:fb:81:4e:b8:2e:
9d:46:16:1b:be:00:05:32:d3:a0:52:d8:3e:be:07:
51:22:03:1a:d5:86:f5:6c:f9:f1:3d:3a:22:b0:78:
25:95:43:f8:f3:86:38:68:3d:cc:e6:e5:e7:49:e4:
89:08:34:c2:21:e5:de:73:83:65:74:05:da:36:c4:
61:d2:ab:35:10:d6:c8:2e:2f:a4:6c:8a:e4:fb:ac:
46:c5:36:8a:0b:26:3f:0b:89:e5:fd:47:ae:78:a9:
89:5c:b0:01:dc:3f:dd:c4:b7:d6:84:73:28:ff:49:
bf:17:40:2b:44:5d:b5:97:96:ea:d6:5f:57:90:14:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A5:58:C4:F2:2B:46:18:B9:FC:38:3B:E6:F3:51:8F:C5:67:21:9B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/laVYxPIrRhi5_Dg75vNRj8VnIZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.4.0/24
84.32.15.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:50:c3:4f:9c:8d:f1:50:4f:3d:7c:d3:8d:14:70:5a:df:de:
0b:1b:76:ff:92:55:07:3b:62:51:60:41:be:26:ea:fc:8f:bd:
54:ad:f4:cf:85:fa:1f:3d:f2:30:b3:fd:64:26:25:48:70:da:
c7:ed:6b:de:df:dc:9e:1b:c1:fd:56:83:49:38:17:26:4a:03:
86:5e:04:29:8f:b4:e5:cb:c4:b2:c6:b4:b2:2e:5f:51:42:96:
e5:a8:b7:c6:a2:0d:87:60:2a:db:ca:52:df:3f:50:50:82:02:
92:a1:dd:1e:12:57:9b:af:d3:d0:2e:25:1b:ce:73:cb:56:10:
00:d7:85:78:74:39:05:c9:66:03:24:90:7b:5f:a5:28:38:80:
2a:8b:4c:21:63:b1:e7:79:04:df:64:fc:c9:a5:98:db:b1:77:
12:95:98:0b:7f:d2:f7:81:2e:5b:91:94:30:07:91:c7:f4:f0:
2e:cb:4c:38:ef:13:31:ca:e3:fe:fd:c1:db:85:ff:e8:83:16:
ed:2b:34:73:12:fb:c4:b8:41:c6:82:ec:8e:00:6c:9c:39:28:
9b:08:d9:90:47:21:9e:f7:84:06:d4:f6:61:ea:5e:de:d4:87:
46:a0:dc:8c:d1:cf:ea:d1:5a:57:95:09:57:ac:2c:6b:b0:96:
2b:2d:7b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:50 2023 by rpki-client on console-fra.rpki-client.org