Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x7kHk1B8gfw5J88iqidVY_z0XPI.roa
File: x7kHk1B8gfw5J88iqidVY_z0XPI.roa (raw, json)
Hash identifier: 2wPzHR6UN6Lj9gs9V3MKcO5O2htSYZmrcbLDXlRQ5M8=
Subject key identifier: C7:B9:07:93:50:7C:81:FC:39:27:CF:22:AA:27:55:63:FC:F4:5C:F2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187D74BD3C6B3288F2C1EBAB10E07B8FC4B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x7kHk1B8gfw5J88iqidVY_z0XPI.roa
Signing time: Mon 01 May 2023 12:31:23 +0000
ROA not before: Mon 01 May 2023 12:31:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 84.32.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d7:4b:d3:c6:b3:28:8f:2c:1e:ba:b1:0e:07:b8:fc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 1 12:31:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7b90793507c81fc3927cf22aa275563fcf45cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:04:44:13:f1:75:4a:4d:00:92:55:fd:78:94:
5e:ec:fa:75:13:84:6d:da:25:11:a3:59:a1:3c:71:
08:9e:39:b2:11:c1:4d:22:ad:7d:14:c8:02:a2:4b:
6a:e3:35:96:b9:ef:a0:9f:3f:d2:f1:84:df:7d:06:
4a:03:9f:25:59:85:96:33:99:6b:8f:05:a2:e7:83:
40:2d:ea:c2:fd:d0:3f:fa:cb:a0:b7:3d:1c:00:c7:
32:cd:b8:cc:95:62:28:f4:57:e0:3d:b0:a8:8a:4c:
ac:86:9c:65:3e:5c:83:bb:93:b9:f4:eb:a0:4f:4f:
33:cf:49:39:2c:7d:11:e9:37:d4:54:89:5f:0a:31:
cd:c4:b0:9a:b8:b9:f4:d7:c1:3f:df:8c:8d:4c:13:
01:ea:aa:ce:76:59:ad:ea:a4:a1:b7:1f:0e:d9:69:
4c:de:21:97:b7:31:c6:aa:c2:71:cc:b5:77:2f:16:
86:5b:7c:62:96:f0:69:d7:05:8b:5b:03:d1:80:09:
dc:97:03:65:a9:c6:3b:dd:db:44:b4:7a:90:81:4b:
cc:4e:23:1b:f1:d9:cc:26:08:87:92:20:b1:40:30:
52:4e:ab:f6:93:cf:c3:b5:57:f8:cf:69:d3:b1:90:
b3:da:86:2a:cb:57:e5:d9:72:16:59:27:af:ea:f1:
cc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B9:07:93:50:7C:81:FC:39:27:CF:22:AA:27:55:63:FC:F4:5C:F2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x7kHk1B8gfw5J88iqidVY_z0XPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:94:b2:0a:43:35:d2:b4:46:db:16:a8:7f:ee:ff:01:ef:28:
36:cc:61:05:d4:a2:ab:6a:69:16:6d:17:69:f4:4e:2c:7f:18:
88:6e:5b:68:98:96:d8:eb:00:94:e3:a0:92:af:8c:a4:11:0e:
70:24:1b:c3:c2:ff:2f:f0:a0:c7:fd:f0:1d:c2:02:04:cd:fc:
8e:0b:24:1a:d0:c1:fb:c5:28:e6:b1:ed:72:3a:3a:03:0e:a9:
ab:ee:2c:33:00:c4:8e:38:b3:2c:db:68:2c:90:2e:55:2e:3c:
51:bd:bc:cf:99:dd:7a:71:ef:94:77:9b:b8:2f:41:28:24:ed:
b3:5b:27:55:85:f7:d5:ff:c5:9e:de:2f:37:12:95:85:24:2f:
8f:fc:a7:aa:2e:ca:87:de:05:bb:0a:d9:de:e5:e4:da:e0:a3:
e7:db:3f:6c:82:76:b2:89:09:48:0a:34:86:1c:99:ac:5b:ab:
d0:c9:8f:1b:6f:8a:f5:93:28:33:7d:bd:47:ad:4b:15:4e:f3:
7f:7f:f7:3a:f6:92:f4:aa:8d:6e:23:88:8c:0e:2b:b9:3c:a3:
a7:83:42:ea:64:60:dc:6b:22:d2:2e:83:fd:dd:d2:c3:d0:83:
e4:f0:a3:e7:6e:98:af:e1:5f:94:48:56:a2:89:d9:22:8a:4d:
e4:99:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org