Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/n7oQRjJp0Mn6oZDmxEGGN1ppatE.roa
File: n7oQRjJp0Mn6oZDmxEGGN1ppatE.roa (raw, json)
Hash identifier: MOZ3ivOuJgpQC9aHYp80DgXKPjS5MQkdzAUPJUxghrM=
Subject key identifier: 9F:BA:10:46:32:69:D0:C9:FA:A1:90:E6:C4:41:86:37:5A:69:6A:D1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFD7DD8AE6C36DB9B655828A84BA01
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/n7oQRjJp0Mn6oZDmxEGGN1ppatE.roa
Signing time: Sun 01 Jan 2023 18:54:55 +0000
ROA not before: Sun 01 Jan 2023 18:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 272786
IP address blocks: 84.32.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 14:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d7:dd:8a:e6:c3:6d:b9:b6:55:82:8a:84:ba:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fba10463269d0c9faa190e6c44186375a696ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:46:47:a0:bb:92:56:d8:1b:7c:9a:e2:8a:64:
79:eb:7e:c4:26:3b:a6:6d:e5:3e:de:40:4d:b6:0f:
5c:15:1d:4e:9d:b3:f8:ff:66:9a:55:5f:c5:e4:f9:
60:1e:74:49:78:60:66:80:26:b6:9d:82:29:dd:ee:
a8:fa:63:10:24:6f:4c:0a:87:6f:db:04:b1:80:07:
07:a0:7c:67:82:f4:d8:94:eb:06:86:56:46:fd:d5:
26:3a:e0:2b:37:13:56:e9:ab:b8:a6:03:32:3a:b9:
3a:d1:6d:4b:4a:30:33:17:99:4b:49:c4:8c:14:f9:
f9:24:30:95:98:70:0f:d6:38:69:2b:03:dd:f8:ad:
8c:c4:6d:eb:84:32:b8:fc:df:04:49:fe:fd:c4:73:
60:95:84:f2:e2:60:a5:ab:f4:c8:50:21:6c:df:63:
da:98:f8:65:ba:25:6e:56:76:6e:39:10:20:1a:3e:
7f:8f:36:f2:a3:83:c2:56:41:0b:dc:7d:85:a6:c6:
22:88:67:4a:e7:fb:ac:6b:4a:a5:6c:8e:bb:b6:3f:
2e:b7:d0:7d:ef:59:16:08:36:33:37:14:4e:a1:be:
cf:57:3c:c7:ba:57:de:6d:9d:7f:0f:82:4d:4c:4b:
be:fe:61:ab:d8:4a:5f:d0:f7:77:d9:da:a4:2e:9d:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BA:10:46:32:69:D0:C9:FA:A1:90:E6:C4:41:86:37:5A:69:6A:D1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/n7oQRjJp0Mn6oZDmxEGGN1ppatE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.32.0/24
Signature Algorithm: sha256WithRSAEncryption
53:00:3f:6c:fd:96:29:5c:c7:fd:89:09:88:90:18:7a:37:3c:
67:ac:c0:85:c4:00:eb:ea:e2:ab:d9:19:ed:ef:ed:ae:6f:b1:
4c:c5:ab:52:4a:f6:61:2e:a9:2f:af:06:a1:5a:91:f6:7a:d3:
cf:e7:4e:8f:82:47:90:d6:2a:6e:2b:a6:69:5f:d7:7f:37:6e:
17:21:14:bc:12:27:fe:19:f0:e1:44:e5:78:0f:4a:e3:bb:27:
ff:b5:ea:82:d4:d2:2c:ba:cf:56:0f:6a:53:06:e3:02:de:d6:
11:78:db:da:31:07:03:b6:ec:71:c8:07:92:bd:78:4b:19:18:
77:87:fb:98:8b:79:8b:14:cb:9c:63:23:d0:22:ff:72:77:09:
4e:82:19:b7:ad:5f:82:b9:30:83:8b:78:b5:9b:a9:ae:db:47:
12:c6:6a:9c:2c:d6:eb:a9:dd:f0:cd:e5:51:10:dc:06:58:d5:
c0:db:5a:08:00:5d:77:1e:53:51:dd:1c:e5:11:d4:71:fe:1a:
36:e9:a5:02:c8:67:40:8b:a7:db:3f:6b:b7:cf:4c:7b:3f:2d:
db:0f:8c:b9:7e:e9:cd:58:51:4f:81:ac:dd:d8:4e:4e:76:9e:
87:f7:d0:36:91:78:12:cb:34:71:5a:95:ee:b2:42:d8:a1:21:
0d:72:6c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org