Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zLPkow8mg8zTkt6-c9Oc_IRnl8g.roa
File: zLPkow8mg8zTkt6-c9Oc_IRnl8g.roa (raw, json)
Hash identifier: rXpYFNpG8FMC7FEVoukTIZQDVLZ/WjSlaXKoPAx7LTg=
Subject key identifier: CC:B3:E4:A3:0F:26:83:CC:D3:92:DE:BE:73:D3:9C:FC:84:67:97:C8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185DA3FDF255522868A5A8FC25F0062EA8A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zLPkow8mg8zTkt6-c9Oc_IRnl8g.roa
Signing time: Sun 22 Jan 2023 16:11:36 +0000
ROA not before: Sun 22 Jan 2023 16:11:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 84.32.85.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jan 2023 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:da:3f:df:25:55:22:86:8a:5a:8f:c2:5f:00:62:ea:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 22 16:11:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccb3e4a30f2683ccd392debe73d39cfc846797c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:38:44:0c:e9:ad:48:a4:a8:02:f0:92:95:
c3:49:50:38:7f:e3:84:ed:22:11:43:4f:97:20:fa:
90:11:2d:7a:e7:fe:df:e6:f9:56:ab:6e:9a:82:2d:
cf:67:39:db:d6:85:df:67:9d:86:d7:0c:d2:3c:fb:
1e:db:6f:7a:4a:61:f3:bb:ea:78:73:43:80:b0:01:
5c:eb:1e:ef:30:f4:56:c1:9c:7c:13:39:19:21:e3:
44:9f:6e:0e:75:3b:2c:7f:3c:de:5a:c1:e1:f7:7d:
15:1e:85:38:f3:fb:31:93:24:13:bf:45:70:bb:b4:
d7:20:4f:fa:26:aa:0c:dc:f4:3d:1f:5d:7b:76:95:
e8:91:7c:57:41:c1:ca:05:c7:d5:6c:8a:eb:a9:c1:
7d:96:ee:bc:4a:08:7c:d5:29:20:19:ff:d1:d6:35:
32:c6:93:73:f4:e6:db:3e:07:73:e2:0c:09:12:b5:
97:ad:78:83:9b:74:0b:76:16:3b:dc:c5:92:3c:d5:
5e:84:c3:d0:97:cb:fc:65:ab:6e:2d:6d:c3:f2:c3:
1c:14:73:d4:93:47:35:0c:15:61:1c:c5:7c:90:f1:
70:60:6a:af:43:db:f7:fb:8b:97:bc:80:44:03:e3:
dc:98:d0:91:69:2a:28:69:d8:7b:5a:9e:04:ba:7d:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B3:E4:A3:0F:26:83:CC:D3:92:DE:BE:73:D3:9C:FC:84:67:97:C8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zLPkow8mg8zTkt6-c9Oc_IRnl8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.85.0/24
84.32.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:28:e4:94:19:a1:94:31:d3:6d:90:d4:27:d5:3f:b8:70:cd:
7c:81:ec:9a:5d:77:b4:91:b1:09:2e:91:2c:c4:36:db:1d:ea:
8b:4c:e0:a5:6f:b2:a9:62:e9:02:46:95:cf:54:b6:98:d0:fe:
45:b3:c5:f3:52:d1:92:67:60:45:e1:d3:8b:36:9b:47:9a:5f:
e5:64:87:da:6f:8d:6f:1b:23:ab:6b:fa:d1:e0:ae:9c:ff:5b:
cb:59:74:d6:ad:15:14:44:21:64:45:ed:14:98:ab:2e:a0:a8:
17:d5:08:7d:dd:93:d8:8f:1f:c0:e9:07:86:c7:7b:88:f2:cc:
cc:ab:0b:bb:3c:8e:8d:fd:7c:2d:30:3d:2d:bf:67:18:bb:6e:
2f:39:43:06:26:93:9c:ca:e1:0c:0b:73:a4:34:45:d8:ce:49:
d8:f1:42:df:ba:1c:59:27:72:ae:3e:cf:9d:bb:42:58:ee:24:
05:25:e0:62:87:78:37:56:4d:95:10:2e:b8:df:fa:14:d3:34:
e5:38:08:6f:07:d4:b8:44:e9:97:c0:35:7e:2c:2f:f3:87:bf:
17:b9:f5:f8:ad:b8:09:94:7b:0f:3a:68:b8:61:7c:53:14:15:
65:7a:87:8e:e6:83:cc:8e:f0:26:10:d3:5f:fb:f2:d8:bf:f0:
f2:58:fb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org