Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lra9iYVWS6SYa0qxrN0fgB6x6SE.roa
File: lra9iYVWS6SYa0qxrN0fgB6x6SE.roa (raw, json)
Hash identifier: xdFaSU7etU8yruSULo7dDpn3fSKT1czB+Cc3p6fUThI=
Subject key identifier: 96:B6:BD:89:85:56:4B:A4:98:6B:4A:B1:AC:DD:1F:80:1E:B1:E9:21
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187DD90BDF20CE9EAD253CB01608FA12635
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lra9iYVWS6SYa0qxrN0fgB6x6SE.roa
Signing time: Tue 02 May 2023 17:44:23 +0000
ROA not before: Tue 02 May 2023 17:44:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 84.32.244.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 May 2023 05:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:90:bd:f2:0c:e9:ea:d2:53:cb:01:60:8f:a1:26:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 2 17:44:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96b6bd8985564ba4986b4ab1acdd1f801eb1e921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dd:76:d5:48:5e:29:f3:37:10:28:bb:77:63:
d1:16:a4:3c:f5:79:c6:a3:91:d7:be:5f:a8:df:89:
a1:8f:2c:0c:e9:63:d9:c3:c0:5c:2f:53:82:de:dc:
b8:30:c6:e3:64:45:d3:56:e3:18:04:8e:09:08:7e:
14:93:cd:e7:3e:1f:c9:47:2c:5b:f6:97:ec:aa:dd:
66:49:35:de:38:c2:bb:07:01:54:e8:3f:6f:62:3b:
3a:ad:fc:c5:55:32:57:84:be:5d:95:f8:84:df:1c:
51:cd:55:86:26:8e:f3:2d:72:d7:48:97:55:c0:82:
11:d1:01:31:21:62:01:9f:e9:07:c7:f3:17:05:e9:
2e:0a:4c:9b:9c:ac:0d:88:1e:5a:16:08:39:00:6c:
dc:30:72:28:cb:ab:93:52:67:9a:98:1d:84:d0:90:
5e:df:f8:c3:67:a2:3a:11:8b:83:82:3e:fd:5b:f8:
06:60:8f:c1:79:0c:c1:1c:4b:ac:3d:a8:47:78:2a:
43:f6:3a:87:c9:e2:fb:e9:61:a2:aa:3a:10:16:26:
d0:e2:7f:71:1a:02:36:6d:1e:a9:70:96:6e:49:71:
53:62:64:81:f5:da:57:5e:cb:32:8d:85:d6:01:ae:
83:bf:e2:ce:eb:76:a9:13:e2:f2:7d:ba:18:3b:af:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B6:BD:89:85:56:4B:A4:98:6B:4A:B1:AC:DD:1F:80:1E:B1:E9:21
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lra9iYVWS6SYa0qxrN0fgB6x6SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.244.0/23
84.32.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:26:f7:fa:31:62:16:e8:8c:4d:d1:07:50:0d:7f:48:7e:4c:
ae:a6:12:a7:0e:fc:a0:ec:16:86:ca:6d:a6:97:e0:22:73:0c:
4d:3e:e6:ad:15:21:57:9f:5a:0d:bd:69:71:3c:e0:22:d6:55:
ae:d2:b0:17:de:3e:f8:34:5d:41:43:b9:4d:5c:24:0c:73:25:
e9:a6:fb:d2:33:fc:3f:90:eb:92:d2:67:7a:be:d0:65:52:85:
3c:0d:c0:f4:dc:d7:60:4b:22:5a:6c:67:f9:ac:23:f6:9c:12:
8d:cf:a5:9d:8c:06:df:59:26:f5:e1:84:b1:4e:6b:d9:3c:53:
a5:1e:7d:a0:0e:b7:04:15:9f:55:4f:32:10:5f:88:78:7e:ac:
de:ed:1c:17:88:36:2a:23:1b:9f:66:a5:d4:06:01:07:07:ec:
94:dc:e4:ef:56:3e:e3:4b:21:20:c3:6d:d3:e4:22:4d:1c:da:
03:a0:f0:8c:00:41:15:81:62:39:dd:b5:08:3e:69:18:8e:a5:
dd:25:85:b6:24:8b:8c:fb:3b:be:e7:25:e8:91:de:ce:8e:a4:
2e:0e:ca:7d:b5:b2:88:77:fb:2e:af:c4:a8:1c:e6:73:1a:9b:
34:64:61:13:95:5c:a8:6e:b8:fb:94:28:a2:43:a0:0f:f1:7f:
a8:d9:15:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org