Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xQOtqv46Zjc6c6EM14_A42m01mo.roa
File: xQOtqv46Zjc6c6EM14_A42m01mo.roa (raw, json)
Hash identifier: QkmUDy0opg91hLFtyiOeUldxsdwM6go1PIPEd+tCA+I=
Subject key identifier: C5:03:AD:AA:FE:3A:66:37:3A:73:A1:0C:D7:8F:C0:E3:69:B4:D6:6A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B756C576819FDB6E50EA95EBC11383A89
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xQOtqv46Zjc6c6EM14_A42m01mo.roa
Signing time: Sat 28 Oct 2023 08:35:16 +0000
ROA not before: Sat 28 Oct 2023 08:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33891
IP address blocks: 84.32.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 18:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:75:6c:57:68:19:fd:b6:e5:0e:a9:5e:bc:11:38:3a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 28 08:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c503adaafe3a66373a73a10cd78fc0e369b4d66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e2:b9:49:3f:dd:e7:24:ab:42:53:b9:80:d0:
11:43:bb:6f:6a:0d:e1:8e:02:89:b0:02:d5:62:7e:
a7:78:9d:01:09:7a:62:56:44:43:19:eb:c9:58:78:
3e:43:fa:22:61:47:33:8f:a6:77:ec:f7:a8:1e:6b:
e9:2c:4c:a1:be:5d:14:b5:ac:12:d2:7d:8b:a3:6e:
fd:16:55:37:4e:fb:2e:9e:c7:07:c5:cd:68:e8:61:
18:e7:65:b8:b8:d5:a3:14:01:52:c4:a1:04:19:8b:
ae:72:0b:00:5f:7b:2d:b6:25:b9:3e:42:e6:e9:f9:
27:77:5d:1e:dc:7f:25:f1:22:06:ae:00:e2:0b:3f:
ca:ef:52:b7:b1:40:2a:28:7d:d0:f3:58:25:ee:cc:
27:de:e2:96:d7:da:2e:00:52:c7:a0:5b:3d:39:c1:
69:a8:2b:4d:67:50:66:cb:0a:09:f3:97:d8:a6:8d:
1a:6c:52:56:65:c4:1e:f1:75:6c:fa:29:55:50:00:
fc:2e:f8:c5:83:2e:82:88:ee:76:2f:60:96:82:e4:
d3:27:4b:80:c3:4a:03:72:62:3d:ee:bf:fe:cf:ce:
f1:a9:6d:72:03:38:9d:0f:c3:f5:c4:d5:ae:5a:84:
53:8f:7c:3a:5b:09:c9:b9:c7:47:61:c3:66:5b:25:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:03:AD:AA:FE:3A:66:37:3A:73:A1:0C:D7:8F:C0:E3:69:B4:D6:6A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xQOtqv46Zjc6c6EM14_A42m01mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.64.0/24
Signature Algorithm: sha256WithRSAEncryption
63:0c:1b:9a:14:66:e6:a4:4d:b8:08:9c:50:3c:3d:7e:83:fa:
fc:dd:1d:71:22:d7:3c:46:80:33:fa:eb:73:02:3c:c5:47:7b:
bc:d3:19:98:57:f6:b4:79:f4:b8:69:0f:20:c7:61:fb:9d:ef:
3a:90:81:b6:fa:7a:de:f3:3b:83:3e:c8:c6:77:53:7c:2e:88:
40:ad:3a:7c:06:94:05:47:c2:a7:44:28:2d:9e:69:dd:02:66:
10:e4:a6:3b:15:d8:c4:cc:da:60:34:47:f0:f1:ab:9a:5f:40:
5b:e6:15:f7:1b:61:70:54:0d:c0:0d:94:60:db:63:38:42:ba:
eb:67:17:bb:1d:47:7b:36:5c:73:82:c5:0d:60:b2:c5:09:b9:
fe:54:08:d7:f8:65:11:97:55:b3:b0:f4:0c:8a:69:b5:51:84:
84:43:9a:72:e4:ac:82:cd:da:19:4a:bb:6a:af:4e:0c:84:7e:
bb:eb:46:f9:e0:9a:56:67:1d:ad:59:9e:9b:54:b7:9a:8b:c7:
5e:be:d8:d9:75:6c:26:f9:e1:fb:29:b8:cc:08:9f:73:9d:58:
cc:1a:53:89:84:6c:70:29:9e:d0:4a:c3:d3:37:17:86:47:02:
39:bc:01:bc:50:67:26:78:e2:0e:84:67:ea:2c:78:11:5f:01:
67:bc:95:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org