Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mQ5i4c7k2l_gw7LMzlqxEP-3saw.roa
File: mQ5i4c7k2l_gw7LMzlqxEP-3saw.roa (raw, json)
Hash identifier: DZ60uBSTg/XplDqoVtc7bJrzJ7KjRujMEb7riOL2Z18=
Subject key identifier: 99:0E:62:E1:CE:E4:DA:5F:E0:C3:B2:CC:CE:5A:B1:10:FF:B7:B1:AC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A83F732BECC98250137FFC135389CDA70
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mQ5i4c7k2l_gw7LMzlqxEP-3saw.roa
Signing time: Mon 11 Sep 2023 11:18:50 +0000
ROA not before: Mon 11 Sep 2023 11:18:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 84.32.56.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:f7:32:be:cc:98:25:01:37:ff:c1:35:38:9c:da:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 11 11:18:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=990e62e1cee4da5fe0c3b2ccce5ab110ffb7b1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:05:f9:26:9e:4a:2f:96:23:1e:84:d3:3c:
45:84:06:67:fc:c6:9c:6a:f2:0b:af:af:dc:07:d8:
71:da:af:8a:e5:80:2e:35:74:0c:96:ec:c0:2c:83:
26:f1:a3:19:d6:92:e7:33:4d:80:69:1c:57:91:a6:
ae:be:bc:9b:9d:1c:b5:05:7d:ce:b4:49:02:97:63:
83:a0:f1:62:5d:d6:82:18:52:80:2e:e8:29:8a:ed:
40:e8:d1:f7:e3:63:16:ae:9e:e9:c7:29:c2:a0:32:
c4:a1:12:de:d4:03:ea:53:8c:c4:40:5e:5c:3a:cf:
d9:dc:b0:05:81:72:ef:6c:9a:57:32:9c:af:11:16:
0c:27:be:47:f6:36:70:19:33:83:72:3f:51:e6:fe:
90:c8:ac:ea:f5:e6:d8:7e:01:07:b8:e3:cb:68:bd:
1e:9e:f2:c9:63:e3:a0:49:8f:24:2b:43:41:a0:a5:
b8:6f:87:de:55:cf:7e:d1:6d:7c:3d:e5:bc:69:04:
e5:ed:c5:60:af:ac:6b:b0:0f:9f:ab:51:ea:c4:9f:
93:d1:87:9d:55:f8:70:00:be:cd:86:06:9e:62:58:
1e:db:d6:0c:f6:18:d4:4f:ac:48:fa:21:6a:cd:5d:
71:ea:be:d1:a5:27:36:f1:da:27:ff:51:87:89:8d:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0E:62:E1:CE:E4:DA:5F:E0:C3:B2:CC:CE:5A:B1:10:FF:B7:B1:AC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mQ5i4c7k2l_gw7LMzlqxEP-3saw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.42.0/24
84.32.56.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ad:ee:dc:47:11:96:32:9f:b4:d5:d7:95:09:43:fd:54:8a:
78:8e:b0:34:08:af:70:26:52:7c:85:db:09:87:5f:89:3c:be:
c7:61:89:8f:80:82:16:42:a9:76:7c:9b:94:97:b4:36:a6:a7:
19:af:44:4e:4a:f4:27:3a:dc:84:db:15:9a:15:21:e1:d7:5b:
50:38:51:73:88:76:09:c6:6e:f4:ce:f6:e5:38:2c:2f:68:6d:
e6:6c:09:c9:93:01:29:a4:44:2b:25:d2:a6:0d:b9:14:4f:f1:
37:42:44:8c:15:e0:27:57:16:e2:d3:f4:cb:6a:d6:a5:52:6a:
85:12:55:ca:22:6d:e1:24:eb:c4:1a:d5:24:3c:a8:83:eb:96:
a1:1a:34:b3:b4:cf:af:dd:75:89:a7:c5:21:c9:dd:c8:41:1d:
30:2f:b3:5f:d4:e4:9c:87:34:5d:31:97:0a:9c:18:4e:73:75:
f5:f2:e6:bf:81:59:02:58:ee:54:62:78:d9:bd:46:b4:ff:ae:
fd:ac:51:3f:ae:86:44:bf:49:f3:74:8b:1c:22:60:a1:d2:05:
11:46:ca:0a:1a:db:dc:d5:f3:d6:46:54:0d:b1:c7:60:8f:b3:
5a:7e:7f:6c:26:bd:65:70:2a:31:5e:7a:23:a8:10:fc:cb:dc:
7d:74:f8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 06:45:52 2023 by rpki-client on console-fra.rpki-client.org