Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pJ8FeIOfJvWhVUW3J4pTazUg1PM.roa
File: pJ8FeIOfJvWhVUW3J4pTazUg1PM.roa (raw, json)
Hash identifier: OMw+sTmUsqtJ01G4I00pwSGWUYQ7SrWwW3X43Dh+fxE=
Subject key identifier: A4:9F:05:78:83:9F:26:F5:A1:55:45:B7:27:8A:53:6B:35:20:D4:F3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC5013ADB9BBDF3E6F85A1A07711EB4FC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pJ8FeIOfJvWhVUW3J4pTazUg1PM.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12912
IP address blocks: 84.32.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 06:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3a:db:9b:bd:f3:e6:f8:5a:1a:07:71:1e:b4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a49f0578839f26f5a15545b7278a536b3520d4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:4a:cf:38:80:a5:1f:5f:ae:4f:cc:af:b3:
c3:e9:12:8d:9a:7d:b6:82:6e:7e:50:ac:84:4c:81:
0a:34:9d:e6:8f:76:40:fb:fd:ab:68:6b:4f:c1:a9:
d0:39:af:11:b7:da:38:12:12:fa:ec:bf:a9:74:03:
e7:d1:80:87:c6:7a:36:5b:aa:76:3b:89:fc:ff:a4:
63:9c:6a:a8:16:6c:ae:a7:3d:73:58:63:c7:75:35:
d8:89:2c:a3:26:16:14:9e:37:d9:63:8e:1f:df:24:
85:52:d0:7f:68:ff:1e:00:63:2f:f9:5f:73:40:7c:
48:8b:df:c9:bb:19:11:ac:67:92:18:45:73:ac:3b:
bf:f4:9a:e4:b7:50:40:6b:a8:01:4d:6b:3f:79:b3:
26:f1:74:66:c8:f0:1a:f3:60:f0:2c:20:09:bf:77:
f7:f8:96:19:ec:00:89:0d:cb:70:e2:9c:d7:c2:e0:
df:a4:21:5d:8d:d8:78:24:b9:91:49:3e:d9:7b:c0:
f0:4c:3e:35:a5:a0:10:00:0a:05:26:91:0b:01:7a:
66:ef:3b:f8:11:0f:fd:e6:0d:ab:c0:2d:03:25:45:
11:e1:94:4e:b0:3f:9b:51:e0:31:ab:80:88:43:85:
0e:20:c9:f9:f8:a1:9a:ba:ce:23:dc:d4:fd:3c:d5:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9F:05:78:83:9F:26:F5:A1:55:45:B7:27:8A:53:6B:35:20:D4:F3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pJ8FeIOfJvWhVUW3J4pTazUg1PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.57.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b9:6e:5e:d4:f1:8b:47:37:8c:49:49:a3:46:63:97:92:35:
6b:eb:be:56:9a:7c:f1:45:13:aa:54:53:d9:a2:85:3f:ba:6c:
3a:68:41:7a:59:66:a2:62:5f:48:60:24:36:b4:01:f3:77:d1:
2e:77:ab:9b:f5:bb:7f:0d:64:89:37:5d:2b:94:65:42:89:df:
ed:67:33:53:15:ea:82:9b:8f:e6:ea:3a:90:ab:de:42:dc:91:
82:63:4f:27:ae:bb:12:db:8a:dd:ff:72:e5:62:cb:56:2a:8e:
ea:8b:10:9a:0e:63:a7:5b:4f:33:33:df:83:01:3f:8c:22:34:
6e:79:f6:47:73:84:cb:09:a5:b0:7a:86:5e:ed:11:3f:72:61:
42:be:c5:99:57:51:11:73:05:14:e5:28:8e:26:48:a3:f9:00:
26:91:0b:d1:56:ef:ce:f0:ff:07:b4:ac:33:62:b7:12:95:72:
db:26:09:7c:e5:4f:20:02:a7:3a:fe:c5:92:a7:b5:46:ea:77:
d2:ee:02:b6:34:bf:8c:42:04:e3:4b:10:5f:1d:e3:00:63:24:
1e:80:8f:d1:dc:24:94:46:b6:05:81:f3:a9:33:f1:6a:ec:d9:
b2:be:0f:2e:65:58:e2:dc:1d:6f:0a:7c:ba:61:54:b3:a1:21:
48:de:dd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:31 2024 by rpki-client on console-ams.rpki-client.org