Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zSM_IBejAyS3muHw_ub3C-EA4Uw.roa
File: zSM_IBejAyS3muHw_ub3C-EA4Uw.roa (raw, json)
Hash identifier: JOD1SrhS7nc/Z5vXWZx9+x9WmQMs4HQBPFkPj5qH4r0=
Subject key identifier: CD:23:3F:20:17:A3:03:24:B7:9A:E1:F0:FE:E6:F7:0B:E1:00:E1:4C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188F6749B7D3BA5D3F5E504BE1B34955905
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zSM_IBejAyS3muHw_ub3C-EA4Uw.roa
Signing time: Mon 26 Jun 2023 06:46:57 +0000
ROA not before: Mon 26 Jun 2023 06:46:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 84.32.56.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 14:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:74:9b:7d:3b:a5:d3:f5:e5:04:be:1b:34:95:59:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 26 06:46:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd233f2017a30324b79ae1f0fee6f70be100e14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:93:ec:f9:e6:5b:c2:b0:98:2b:38:11:e8:
65:1b:61:0e:bf:bd:e2:06:b4:5b:02:3f:e3:06:90:
af:69:ca:99:e0:90:33:94:21:99:6d:fe:d8:ff:cb:
e1:f5:00:b2:da:ad:08:1f:7d:64:a5:8f:d3:0a:1e:
df:7f:6f:80:0e:fa:f7:b6:42:4f:ce:b9:79:aa:b7:
b6:78:cb:06:0d:b7:10:15:37:7d:e1:ca:f7:5d:2d:
9b:47:98:58:4c:24:a0:67:dc:30:c4:69:84:c7:95:
07:65:b5:40:23:dd:30:7d:7c:6c:7e:8e:ec:9f:90:
b5:07:63:99:f5:07:57:cf:64:d4:c9:34:5d:ad:29:
89:93:b4:55:11:cc:61:35:db:78:d0:85:53:95:d8:
f3:45:fa:7c:b2:cc:9f:02:ac:71:36:28:de:b5:91:
1b:ba:15:a0:eb:cb:5f:04:f4:e3:dc:f5:c1:41:aa:
b2:5d:76:9e:8d:23:61:aa:a1:4c:74:d0:06:1e:bf:
7c:92:0b:7f:5b:d9:13:93:09:e9:af:47:c2:5d:5b:
d0:9f:9f:84:e3:7b:ae:d5:cf:d4:97:a8:79:49:28:
a4:5a:00:68:5e:4b:e2:83:15:4b:15:35:b9:1d:7d:
98:04:d4:49:f3:39:d0:8e:04:a7:59:3b:5e:2a:2a:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:23:3F:20:17:A3:03:24:B7:9A:E1:F0:FE:E6:F7:0B:E1:00:E1:4C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zSM_IBejAyS3muHw_ub3C-EA4Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.42.0/24
84.32.56.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:1b:10:d0:dc:4e:f8:6b:27:22:4b:6f:56:8b:ff:0d:52:9d:
8a:36:9f:92:42:56:8a:e1:06:a0:d1:c5:fb:3d:50:a4:37:ff:
e1:05:95:b1:6e:f2:44:30:83:af:33:ae:73:33:90:2f:71:f1:
58:48:75:b7:b6:16:f4:5d:32:72:34:01:84:f6:22:8d:fd:c6:
bf:6a:9e:ec:a5:b8:37:0f:b6:1f:1b:d5:f1:21:e6:e6:a1:ac:
c5:05:48:be:2c:92:7b:5f:fa:70:b6:f0:8c:84:a9:89:03:93:
3a:b1:35:f6:1e:1a:c3:80:29:31:ee:37:7a:8d:a6:e1:83:4e:
53:3d:9a:00:86:2d:df:4e:bd:5e:7f:92:55:eb:b2:22:a7:05:
ae:32:f1:f8:cf:90:ac:67:7f:f7:b3:2d:4f:dd:70:01:11:fe:
6f:84:71:5c:59:05:dc:d8:06:04:09:ac:fe:8f:d3:d4:ea:73:
c1:00:d3:d4:ed:2c:71:2c:45:c4:ac:5f:92:f7:43:f2:7b:0e:
06:ee:55:50:3c:e7:c5:29:a2:de:a5:06:b4:6b:23:61:d9:3c:
7f:62:89:d1:1a:cb:31:19:d1:a1:91:01:1d:2f:0b:9c:25:fe:
43:ab:55:be:66:6e:32:b9:f6:e9:da:76:c6:83:fb:60:af:9d:
dc:1d:66:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:33 2024 by rpki-client on console-ams.rpki-client.org