Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wRIcmGA1XKWOj1lE0eHfRtQCh1M.roa
File: wRIcmGA1XKWOj1lE0eHfRtQCh1M.roa (raw, json)
Hash identifier: G0njRccILAa9x9Vz96SHAHWaky0HdD3OJ4j8TMrR+r8=
Subject key identifier: C1:12:1C:98:60:35:5C:A5:8E:8F:59:44:D1:E1:DF:46:D4:02:87:53
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFCB33BE5824384BFEAB96A88833D4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wRIcmGA1XKWOj1lE0eHfRtQCh1M.roa
Signing time: Sun 01 Jan 2023 18:54:52 +0000
ROA not before: Sun 01 Jan 2023 18:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204770
IP address blocks: 84.32.128.0/22 maxlen: 32
Validation: Failed, certificate revoked on Tue 31 Jan 2023 10:43:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:cb:33:be:58:24:38:4b:fe:ab:96:a8:88:33:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1121c9860355ca58e8f5944d1e1df46d4028753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:a6:b0:b2:f4:56:25:31:b9:94:ee:2c:89:
74:12:bd:c4:14:19:43:68:27:4a:34:7b:50:a3:5e:
09:35:31:e6:8e:63:4d:b2:d8:c0:d9:db:61:56:62:
22:dc:d4:e6:63:63:21:a7:aa:eb:0b:e9:1d:c0:f4:
44:ff:cb:e1:f9:ca:ba:b3:b9:b8:7f:a2:15:26:71:
8c:9b:9a:b4:d8:ed:ac:4d:09:6c:b5:31:1d:03:27:
35:b0:d6:5b:e1:17:b9:6a:fd:ea:66:80:0d:4a:d8:
8e:fd:b9:71:c5:78:25:5d:1c:42:e9:b2:e1:3d:6c:
16:99:ef:d3:ca:6d:7c:4e:23:ba:81:ec:4a:1a:fb:
47:34:b0:b3:83:88:e5:b0:94:88:82:d7:0e:ad:e5:
5b:62:03:12:ab:67:04:92:94:22:55:8b:19:ba:c7:
66:d5:ee:6b:1f:ea:5c:b4:ef:f8:bc:6f:a2:96:e1:
67:2d:aa:a8:10:c9:47:14:dc:20:97:b1:a0:0d:eb:
2d:61:ee:24:28:dd:44:8f:f3:d7:b3:15:cc:40:48:
0a:38:1a:a2:cc:74:70:c5:86:4e:ad:1a:4c:c8:1f:
d0:ac:b3:7a:f0:d8:52:27:08:c2:f0:aa:13:9a:75:
b7:27:6b:cf:d2:75:86:4e:47:1b:36:82:d7:51:ad:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:12:1C:98:60:35:5C:A5:8E:8F:59:44:D1:E1:DF:46:D4:02:87:53
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wRIcmGA1XKWOj1lE0eHfRtQCh1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.128.0/22
Signature Algorithm: sha256WithRSAEncryption
31:47:de:e6:51:79:ce:aa:4b:82:27:0d:43:a5:6a:36:2d:44:
87:f3:50:7d:e1:0c:ae:d5:86:8d:d1:d2:49:da:bf:35:dd:d1:
ba:a0:a0:d2:64:c2:05:1b:c9:a7:57:aa:69:5f:99:cf:d2:40:
26:8b:a0:23:92:77:5a:7e:75:1f:0a:59:a6:aa:cd:0c:b6:5c:
66:d0:6a:04:75:09:dc:7e:51:17:8d:07:57:ec:e5:f8:80:df:
2d:e3:99:ca:fd:2a:91:b4:ad:94:cd:95:78:1b:5b:5f:ff:f1:
cf:7e:2c:d9:53:62:db:06:5a:6b:fe:68:7c:27:4f:88:3d:84:
66:24:e9:26:28:1e:1e:9c:b9:e7:de:bb:f8:74:c5:69:14:dd:
ba:37:56:05:60:dd:dd:34:84:05:79:f6:08:49:cd:0e:e7:ef:
36:6d:22:54:13:27:ab:6a:89:cf:81:03:25:6d:67:07:d8:a2:
58:c9:46:49:ab:29:a0:d4:65:e4:e6:63:1e:28:5f:95:ca:65:
5f:ad:5b:94:1b:de:5d:ba:ca:88:d7:38:a9:71:6f:16:36:ee:
44:37:40:97:81:b5:5f:d0:70:37:ab:2a:31:53:52:f8:4f:b1:
92:88:61:b2:82:39:b9:c5:f3:f0:18:91:f1:5f:6f:0a:93:37:
fe:f8:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org