Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vPkOSgIzCKmHEWRcyf_2Z-5yVUM.roa
File: vPkOSgIzCKmHEWRcyf_2Z-5yVUM.roa (raw, json)
Hash identifier: Y+t2+9aRNpMmeP/cs+rcSBUsEFe8FpILJzWqyoXvz5g=
Subject key identifier: BC:F9:0E:4A:02:33:08:A9:87:11:64:5C:C9:FF:F6:67:EE:72:55:43
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188328CE5248B4F8D77647550566E527650
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vPkOSgIzCKmHEWRcyf_2Z-5yVUM.roa
Signing time: Fri 19 May 2023 05:47:54 +0000
ROA not before: Fri 19 May 2023 05:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142561
IP address blocks: 84.32.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:8c:e5:24:8b:4f:8d:77:64:75:50:56:6e:52:76:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 19 05:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcf90e4a023308a98711645cc9fff667ee725543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:71:57:16:e7:5b:a0:f6:04:5a:41:dd:f2:72:
1a:d0:15:e4:cc:3d:02:47:94:79:27:85:62:92:f3:
2e:60:a6:3c:11:07:f0:00:90:32:93:0c:0c:b6:a8:
cb:ba:9d:0c:43:e8:44:c2:1e:cf:7c:2f:cb:91:65:
56:a1:42:f6:04:69:36:9f:4c:8c:d3:30:62:7b:6a:
05:e9:0e:7e:9a:d0:e2:c9:94:96:37:07:96:89:1b:
9b:c6:5b:f7:5c:3f:36:15:d7:ab:c3:c9:dd:bb:65:
35:b6:b1:31:a2:59:d9:3e:bd:73:8a:05:c6:32:88:
e7:ee:ca:ab:7f:39:d6:cb:0d:aa:e8:71:39:48:56:
23:12:34:32:56:b6:be:d2:a1:12:9c:04:bf:2c:6a:
12:b7:b7:b5:89:0c:43:f4:c2:50:26:59:73:ea:bf:
f1:93:99:eb:82:cd:19:b6:a3:bf:b1:4a:79:50:b9:
ec:4c:39:68:a5:84:4a:d7:37:b2:73:7a:fa:41:fc:
83:ec:e8:63:8f:3c:38:57:1f:42:f8:22:4a:ba:97:
63:66:ac:2e:95:03:cd:8d:e1:2d:6c:0a:e0:45:bf:
84:04:fb:7f:51:e5:81:84:30:95:eb:cd:5b:53:62:
20:3d:17:4c:5c:81:6a:a2:f9:8a:13:d9:8f:a2:c0:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F9:0E:4A:02:33:08:A9:87:11:64:5C:C9:FF:F6:67:EE:72:55:43
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vPkOSgIzCKmHEWRcyf_2Z-5yVUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.223.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ee:9a:ae:dd:72:a1:7c:75:9a:d7:02:60:d6:4f:86:e7:cd:
b9:e7:7a:ce:79:37:26:26:4c:15:b4:5b:ec:bc:5e:6f:ca:d4:
ea:9c:ae:50:8b:44:1c:f5:eb:71:7a:3b:12:30:63:21:a4:ea:
6b:85:e2:25:c9:c2:41:27:83:13:f5:bd:22:e6:4b:c8:23:66:
27:b5:3d:a3:d3:fc:d1:85:b3:83:5c:a4:1a:fb:0a:1b:bf:6b:
64:ba:59:a7:f2:9e:a8:a2:17:24:86:12:dd:b2:bc:8c:c9:e0:
17:f5:f6:34:9c:45:2c:f8:9f:62:0d:76:47:0e:23:86:51:f1:
ad:a4:d8:fd:eb:19:b8:29:27:96:cd:55:74:bc:3b:a0:c5:fd:
9d:9a:60:40:93:10:58:f4:72:a6:47:bb:3e:6b:c7:1f:fa:cf:
04:58:1b:4b:91:f3:98:10:69:88:00:10:e2:07:7d:f4:10:eb:
4d:90:d2:1e:6d:06:f7:15:18:66:3f:b3:d8:ee:97:19:cb:c3:
82:c7:ce:ab:45:a6:83:17:fe:70:51:6b:4f:b1:65:52:16:8f:
6d:16:f3:8e:af:d6:ab:55:14:2f:b5:fe:6b:29:68:95:7f:34:
0c:5a:59:b9:00:35:dc:02:99:7b:fd:79:a0:11:4f:84:cc:fc:
21:ee:3f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org