Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mWOkbnm_2ZWrC6Wi_R1UY1O_MDc.roa
File: mWOkbnm_2ZWrC6Wi_R1UY1O_MDc.roa (raw, json)
Hash identifier: gM2vx25BSAYgUrGUuQjupiLyANmHXm5PvsMLTGmIBWs=
Subject key identifier: 99:63:A4:6E:79:BF:D9:95:AB:0B:A5:A2:FD:1D:54:63:53:BF:30:37
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187BA2DE308CF5A33CE1085557AC5D264BC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mWOkbnm_2ZWrC6Wi_R1UY1O_MDc.roa
Signing time: Tue 25 Apr 2023 20:49:42 +0000
ROA not before: Tue 25 Apr 2023 20:49:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 84.32.15.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 May 2023 12:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:2d:e3:08:cf:5a:33:ce:10:85:55:7a:c5:d2:64:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 25 20:49:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9963a46e79bfd995ab0ba5a2fd1d546353bf3037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:9f:1a:f1:02:70:2d:19:3c:5d:f1:ec:d2:
e2:5e:56:58:96:fc:64:a2:a6:b5:2d:76:31:52:5e:
bd:d6:1e:ce:4d:b2:01:8c:d4:cc:5a:93:00:47:de:
75:65:b7:d0:f0:7b:4a:a5:02:2d:e9:cb:76:4b:0b:
06:48:ca:f1:d3:f8:4b:8d:8b:7e:5c:da:e3:19:0c:
7e:69:f7:b8:71:9f:d5:51:7f:eb:72:19:e1:fd:55:
7d:87:93:e9:60:06:0c:bd:63:2f:96:90:43:63:cd:
e9:6e:7c:b1:52:ae:b7:53:70:01:14:79:0c:a7:f3:
86:22:f9:80:59:84:a2:17:3a:95:2d:fc:54:91:a1:
23:6d:8a:1c:96:03:f6:c0:03:46:55:49:63:08:61:
86:1d:2a:5f:01:84:a9:5d:04:86:f9:ba:a6:13:34:
b4:0f:91:c0:1c:c4:18:32:1b:4b:15:7e:12:f8:8e:
83:cb:b0:b0:de:5c:9e:e4:2b:ad:65:14:5d:2f:9c:
c1:50:ec:1e:67:1e:67:80:b3:e0:86:f9:68:e3:ea:
90:df:e0:1d:37:a5:81:b6:4c:52:33:2a:1f:04:19:
44:6b:18:56:2b:e7:55:be:7c:71:31:da:5a:62:f3:
e6:20:d1:5a:6d:a6:0a:4a:f6:f1:37:ef:16:71:f1:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:63:A4:6E:79:BF:D9:95:AB:0B:A5:A2:FD:1D:54:63:53:BF:30:37
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mWOkbnm_2ZWrC6Wi_R1UY1O_MDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.250.0/24
Signature Algorithm: sha256WithRSAEncryption
66:00:75:a0:ad:d9:eb:2c:f0:39:f6:c7:c9:1e:53:13:1e:9b:
22:5d:50:60:15:b0:aa:96:ae:ba:86:d4:cf:b0:60:05:db:60:
ba:87:e9:98:29:e2:5a:aa:55:f6:1c:49:1b:14:13:6f:94:04:
4c:7b:69:f3:88:bc:92:f0:ee:d7:04:73:61:8d:05:25:33:57:
70:e2:3b:83:f1:19:88:31:ba:e3:49:cb:cf:ff:87:c3:0d:32:
a5:7e:d5:04:06:a4:d7:3e:f1:8f:20:f7:3f:3e:53:15:61:74:
fe:88:08:56:cf:ce:76:6a:25:22:b3:5c:84:9d:8d:0d:cb:89:
32:a4:4d:ea:3b:a8:af:9c:6d:22:c8:53:d3:ef:78:d9:af:cc:
86:c4:3a:80:15:d1:b2:94:7e:56:ee:5f:77:2d:09:4e:42:45:
2d:ad:24:50:12:4c:92:02:5a:af:0d:98:e3:25:e7:64:90:5a:
f8:94:7e:4b:10:62:10:d8:6c:2e:49:c4:f9:5a:04:86:47:81:
c4:b0:e5:f6:82:56:3d:2e:89:7b:11:fe:7f:9a:18:e6:70:5d:
c5:bd:f7:51:9d:f5:0d:b2:d3:c8:6b:42:84:9e:36:99:4d:31:
fa:fa:1b:a8:c5:d3:78:25:0b:77:b3:04:d2:22:d8:ef:b5:62:
40:ea:e4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:31 2024 by rpki-client on console-ams.rpki-client.org