Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uSSuev3eoI9DUczho1e1tSC_7qo.roa
File: uSSuev3eoI9DUczho1e1tSC_7qo.roa (raw, json)
Hash identifier: QSmVqlDW6Lk0pxoV6KLTpNDtgZyLDxZSa5/9l09AbU8=
Subject key identifier: B9:24:AE:7A:FD:DE:A0:8F:43:51:CC:E1:A3:57:B5:B5:20:BF:EE:AA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFC8B00A18F430B5DEBA90093456A7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uSSuev3eoI9DUczho1e1tSC_7qo.roa
Signing time: Sun 01 Jan 2023 18:54:51 +0000
ROA not before: Sun 01 Jan 2023 18:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 84.32.217.0/24 maxlen: 24
84.32.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:c8:b0:0a:18:f4:30:b5:de:ba:90:09:34:56:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b924ae7afddea08f4351cce1a357b5b520bfeeaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:b3:8c:fc:09:3a:f5:d5:a4:29:6f:cb:a3:
24:5b:b5:a4:9a:e6:c1:e6:39:05:33:94:61:43:92:
77:d5:ca:02:39:16:7b:e4:a6:62:82:3b:10:c6:d5:
a8:09:18:21:6d:bc:9b:dc:8c:21:e9:ef:0a:1b:53:
63:92:d2:06:ec:2d:d9:78:be:13:07:b6:be:65:97:
39:00:9a:5b:74:69:8b:fb:b8:ac:e8:ce:d7:27:d7:
bf:12:43:55:5b:2f:41:ca:4c:4f:59:ba:14:63:2d:
48:d4:95:01:30:c6:2a:18:dc:0a:10:ac:4a:6e:ce:
b8:79:c3:96:00:77:a9:f8:ee:32:9e:ed:9e:e4:fd:
fe:16:21:33:9d:fe:54:06:62:54:00:e8:de:bf:00:
da:ef:68:52:76:86:e4:94:a3:7b:79:ac:ee:7c:9c:
9e:29:b1:71:2c:38:71:94:e9:89:ad:df:3b:62:66:
1d:a8:f1:ec:7a:eb:14:91:53:bc:96:23:f0:37:68:
66:80:52:e0:2b:a4:ac:7e:f8:ff:1e:29:45:c5:ee:
01:83:a7:c5:b6:1b:d2:35:02:f3:ef:db:ff:73:ea:
3b:9d:fd:46:fe:dd:d0:81:32:c4:86:e0:9e:f3:76:
f4:4f:64:3e:c9:47:b7:63:26:31:62:93:cd:ef:a3:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:24:AE:7A:FD:DE:A0:8F:43:51:CC:E1:A3:57:B5:B5:20:BF:EE:AA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uSSuev3eoI9DUczho1e1tSC_7qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.106.0/24
84.32.217.0/24
Signature Algorithm: sha256WithRSAEncryption
91:cf:f6:17:9e:2d:e6:e1:c7:10:ba:c1:55:67:94:8f:c7:08:
6d:9b:d1:86:d4:f0:c3:8e:39:ce:9c:aa:34:a5:11:89:f6:d7:
df:f3:5b:53:f3:c2:c1:fa:73:50:0a:3d:32:ce:57:a5:53:c5:
75:4f:0c:9b:d6:9f:96:04:76:94:20:52:5a:52:63:ce:3f:3a:
ec:59:a5:7f:90:d7:3f:eb:a2:09:19:75:f2:ca:1b:a6:31:7d:
93:ae:ef:42:94:90:c9:6a:2e:d8:ed:04:f4:36:38:79:c9:f4:
ef:f0:3b:b4:a8:c9:7e:0d:26:6f:90:ae:be:41:94:41:a8:11:
ea:cd:3e:6e:c9:0b:92:11:b9:cf:5f:81:5e:2d:36:5a:35:f8:
b4:7e:40:86:7a:7f:9d:ba:8d:b3:71:59:60:47:dc:92:f2:bd:
08:63:d0:4f:18:d6:8e:9f:cc:41:de:33:86:7f:42:42:5f:2a:
59:b8:8d:1a:b6:b1:81:86:15:66:9b:54:36:27:68:4b:62:79:
01:cd:4b:05:d0:08:b7:42:7a:5b:f2:48:f3:e3:68:56:91:fe:
ab:1e:c5:5c:9d:43:5c:90:70:c7:da:7f:ca:ff:ab:e7:09:6e:
7f:6a:f8:b5:4f:a0:8d:62:f2:a9:6c:de:65:e6:47:33:78:2c:
2a:f0:72:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:34 2023 by rpki-client on console-ams.rpki-client.org