Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uKONFYvVkq4hPvtNGLPzHUHyJdI.roa
File: uKONFYvVkq4hPvtNGLPzHUHyJdI.roa (raw, json)
Hash identifier: uu0+Nn2s2QH0PVflCLeVBooqppQL1DL72xD1SOPPN50=
Subject key identifier: B8:A3:8D:15:8B:D5:92:AE:21:3E:FB:4D:18:B3:F3:1D:41:F2:25:D2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018591C409D015D916EE40B02527DCE0F655
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uKONFYvVkq4hPvtNGLPzHUHyJdI.roa
Signing time: Sun 08 Jan 2023 14:23:41 +0000
ROA not before: Sun 08 Jan 2023 14:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 84.32.174.0/24 maxlen: 24
84.32.173.0/24 maxlen: 24
84.32.223.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:91:c4:09:d0:15:d9:16:ee:40:b0:25:27:dc:e0:f6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 8 14:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8a38d158bd592ae213efb4d18b3f31d41f225d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:26:dc:89:b1:60:88:5f:cd:e1:05:dc:c4:
47:52:42:a2:cc:ac:72:9d:32:d7:46:96:45:ae:3d:
f5:b9:f4:75:32:3e:31:7b:06:65:e1:57:b1:55:53:
2c:76:37:c1:bc:00:c3:24:c1:16:10:28:2d:15:9d:
27:9f:0a:c0:3a:20:fe:83:5c:d3:97:36:13:10:ac:
b1:a9:fb:e9:82:85:63:63:a2:5e:96:56:4a:a0:b0:
4b:bf:19:a0:b5:53:22:98:82:6a:ef:5b:81:ad:c9:
83:1f:10:db:e2:78:85:c4:aa:3f:6c:f7:9b:45:f6:
fa:e5:73:e3:f6:fa:4d:22:61:5a:bd:ec:d1:d7:73:
fa:59:b3:e2:46:07:3f:c7:37:6a:6e:8c:ac:1e:2e:
70:92:aa:62:7c:68:4b:66:70:8f:2a:40:cd:e5:61:
84:05:3d:a5:4b:73:c4:2a:47:88:e6:7e:3b:38:fa:
d7:a7:4a:9e:58:a5:9b:65:ba:21:19:f0:6c:37:88:
44:fa:4c:05:56:31:06:fd:76:0c:a3:6b:b5:b7:13:
9c:4c:99:08:6b:6f:76:7c:8a:28:2a:5c:f4:65:73:
8e:4d:26:dd:b9:06:44:e5:b7:b4:72:05:d9:83:59:
5f:f9:92:2e:1a:f7:5a:97:d0:de:62:2e:c9:bb:1b:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A3:8D:15:8B:D5:92:AE:21:3E:FB:4D:18:B3:F3:1D:41:F2:25:D2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uKONFYvVkq4hPvtNGLPzHUHyJdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.173.0-84.32.174.255
84.32.223.0/24
84.32.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:11:50:ff:22:78:17:66:1b:55:a9:23:fa:f3:04:2f:b6:c4:
35:71:cb:0b:a5:e3:e0:8d:2e:b6:1b:52:c8:ab:d4:8a:e2:72:
b1:c4:a6:21:61:e4:51:cc:51:de:01:34:77:8b:ff:34:a7:94:
9f:df:c8:14:93:da:34:40:5e:85:8c:90:37:d0:39:de:ed:a2:
13:f9:8c:6d:19:b4:92:ab:0d:02:a3:fa:bd:5d:a2:4d:e8:a6:
08:96:43:ef:5a:d6:8c:23:2c:fd:5d:2d:d5:d8:f0:9e:0b:19:
79:0c:61:78:94:ea:ca:86:87:fb:bc:bc:cf:5a:3c:7f:a6:52:
a7:53:e4:6f:b5:18:b4:05:36:3d:9e:e2:56:7f:a2:46:cd:72:
fd:e4:8b:d9:2a:39:8b:8c:c7:70:b3:9b:18:02:55:07:51:5c:
07:b0:6e:a9:92:4e:f1:c1:2e:97:46:bf:7e:7b:6c:03:3c:2a:
24:71:0b:14:a9:61:fd:aa:9d:c6:12:41:a1:aa:7d:0d:e5:a6:
d2:15:aa:b6:8d:9d:21:97:f2:0a:af:ef:4d:d2:3a:d3:a4:db:
9f:39:31:47:0b:b0:95:07:3e:6e:49:46:43:2e:9f:e0:fb:4f:
ff:06:8c:93:05:4c:8b:dd:6a:b7:e1:da:f6:90:eb:2d:b1:40:
ff:af:fb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:34 2023 by rpki-client on console-ams.rpki-client.org