Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lhnqOtxcUBdJ9E2Och2jSda_1rA.roa
File: lhnqOtxcUBdJ9E2Och2jSda_1rA.roa (raw, json)
Hash identifier: IakNHDOtxBXROyfMFvC80jnFZuZkuvHg2/2As1p4Kl4=
Subject key identifier: 96:19:EA:3A:DC:5C:50:17:49:F4:4D:8E:72:1D:A3:49:D6:BF:D6:B0
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01875A463298A2891787DCE42B875ABC7133
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lhnqOtxcUBdJ9E2Och2jSda_1rA.roa
Signing time: Fri 07 Apr 2023 05:52:42 +0000
ROA not before: Fri 07 Apr 2023 05:52:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43043
IP address blocks: 84.32.56.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.11.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Jun 2023 05:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:46:32:98:a2:89:17:87:dc:e4:2b:87:5a:bc:71:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 7 05:52:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9619ea3adc5c501749f44d8e721da349d6bfd6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:69:8d:c3:6a:6b:23:53:8c:51:ba:de:23:cf:
17:3e:e6:4f:61:82:2b:92:61:a8:90:7f:4d:f6:62:
d8:ea:61:cd:de:02:36:1e:7e:e4:3b:c8:6f:78:60:
57:91:32:49:39:0c:a1:7d:da:64:b7:21:7a:c8:ea:
0d:bc:f0:d3:ed:08:4d:05:a6:90:30:66:82:dc:72:
19:1a:24:de:07:f8:76:eb:04:fe:d1:72:c0:78:3d:
d6:a0:97:ef:56:98:86:34:40:97:66:96:9b:8c:3d:
8b:5b:18:72:54:ef:c0:f3:7c:ba:22:0e:dd:4c:42:
f3:8a:8b:41:2f:b2:f9:2d:2e:f3:78:7d:b4:ed:db:
b6:1c:03:e5:34:91:f4:aa:6d:50:79:0a:47:fa:58:
24:dd:c5:a3:17:50:af:d1:71:a2:7c:88:f1:55:f8:
8f:cd:bd:ff:ba:d4:57:72:c6:2c:2d:c9:fa:6b:d9:
fb:db:04:c8:3b:d3:b6:5d:e8:5a:d0:77:59:ab:dc:
d9:66:c1:d5:a1:d1:a9:36:ae:f6:6f:b2:fe:a9:f7:
2a:7d:a2:c6:b2:ad:16:db:b7:f0:9a:9f:67:08:f8:
eb:05:e1:a2:24:da:f9:aa:b7:cf:40:0a:e8:5d:d4:
04:d3:65:d2:77:81:db:6f:c0:fc:41:8f:72:39:08:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:19:EA:3A:DC:5C:50:17:49:F4:4D:8E:72:1D:A3:49:D6:BF:D6:B0
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lhnqOtxcUBdJ9E2Och2jSda_1rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.11.0/24
84.32.31.0/24
84.32.46.0/24
84.32.56.0/24
84.32.61.0/24
84.32.83.0/24
84.32.107.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f5:31:4f:e1:5c:f7:d3:44:84:fa:71:20:ce:e0:51:35:a5:
0e:40:7a:aa:e4:bb:f9:0e:8f:4a:4f:e5:47:5f:14:9a:76:96:
be:3b:3a:65:de:a8:d0:3d:89:ec:1d:47:b4:4a:24:b8:3f:27:
2e:f3:1b:a6:85:35:c2:97:34:93:54:f7:51:ef:ee:4d:bb:3a:
18:51:54:55:e1:ac:6d:24:75:29:56:fa:0c:76:ca:47:1c:f0:
2e:8d:e5:53:ce:9c:1c:f6:69:9d:2a:70:3b:d0:3e:93:8c:14:
06:86:5c:24:69:86:1f:ae:2b:6a:d9:8d:1b:8c:aa:b1:92:f8:
3e:d4:43:92:b3:c6:7c:a9:9c:14:26:d1:0c:1d:59:40:a8:83:
35:51:db:21:c0:ed:5d:08:f8:d2:49:f0:00:b3:07:8f:71:ae:
e3:1a:af:e1:2d:6d:56:c2:f8:f0:83:3c:6e:b4:d2:b0:22:98:
4b:49:80:d3:5c:27:f3:cc:67:a8:30:72:e0:d0:22:07:f1:f8:
8c:cb:49:74:4c:a7:e7:f3:c2:00:65:68:39:20:43:2e:ea:d0:
ee:0b:e1:76:30:d2:9f:f4:d1:4d:1c:ff:6e:83:42:d5:53:29:
2e:82:19:0b:4e:70:f8:84:65:a1:fd:91:35:0e:02:62:a9:14:
00:a1:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org