Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/4FUgx_hDEZAF1ltAl8rg06TwDss.roa
File: 4FUgx_hDEZAF1ltAl8rg06TwDss.roa (raw, json)
Hash identifier: Dp5yapfKvIef6YdY9NFF03BGwkbd3kN2GK16fdhFHpE=
Subject key identifier: E0:55:20:C7:F8:43:11:90:05:D6:5B:40:97:CA:E0:D3:A4:F0:0E:CB
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0187E0F3BE4396E78E9C7E094C713E35A160
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/4FUgx_hDEZAF1ltAl8rg06TwDss.roa
Signing time: Wed 03 May 2023 09:31:22 +0000
ROA not before: Wed 03 May 2023 09:31:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207464
IP address blocks: 84.214.116.0/22 maxlen: 22
84.214.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:f3:be:43:96:e7:8e:9c:7e:09:4c:71:3e:35:a1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: May 3 09:31:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e05520c7f843119005d65b4097cae0d3a4f00ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:df:a0:85:8f:f1:7c:f6:4c:40:d8:86:94:8a:
6b:a0:82:d9:e4:93:cf:f4:93:c0:98:4c:f1:db:3f:
fe:d6:b7:ed:a1:bf:50:16:92:af:bf:24:0a:a3:15:
d3:41:d7:8c:0a:75:24:3c:2a:b5:2c:b3:02:b1:42:
0f:bb:b3:28:0c:52:6a:db:5c:7b:5c:e2:94:a8:5c:
3d:9f:1f:20:ac:e3:04:30:99:5d:ae:9f:68:bd:bd:
2c:fe:6d:fb:27:fb:87:ef:fc:1e:0c:d7:f3:a7:c1:
e8:d6:46:d5:97:33:81:1f:ec:d4:26:86:7c:89:74:
7d:4d:e1:72:43:10:43:12:14:f3:e5:26:e3:10:06:
30:bc:c8:81:e0:ca:b5:25:2e:03:d5:60:f5:6e:65:
7d:6b:b4:a9:78:2b:fa:24:f3:88:d5:62:4e:fb:42:
22:fb:12:02:02:38:5a:7d:6d:e2:f8:dd:93:ba:5f:
d7:5e:5a:9e:02:9e:b8:15:21:32:83:e6:04:43:ed:
0b:1d:81:20:d1:ba:98:29:e9:52:80:f2:60:6d:df:
52:85:f4:6b:d6:1c:de:93:d1:b7:9f:3d:96:d5:72:
bb:11:47:f2:a1:08:d7:18:2c:47:25:43:6a:6b:3a:
2b:ad:1d:89:3c:75:28:80:77:c4:f7:8a:4b:91:d8:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:55:20:C7:F8:43:11:90:05:D6:5B:40:97:CA:E0:D3:A4:F0:0E:CB
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/4FUgx_hDEZAF1ltAl8rg06TwDss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.214.116.0/22
84.214.232.0/22
Signature Algorithm: sha256WithRSAEncryption
11:bd:07:d3:cb:d8:9a:f7:7c:ad:76:68:dc:64:c2:1b:b3:76:
3e:ba:b1:0e:fb:c7:d1:43:a7:20:1a:d4:87:8b:10:25:e3:bc:
32:88:c4:5c:6d:4e:2b:9b:18:d7:10:8d:08:01:3c:36:48:09:
9a:34:44:ef:8e:af:7e:91:22:12:b2:0c:27:10:78:79:11:cb:
b8:0a:80:2d:06:d5:9c:56:a4:0f:c6:ed:44:05:f8:b6:b6:5a:
22:8a:ba:61:c3:aa:d6:12:fc:4c:75:15:27:f2:b3:f6:51:2c:
e2:90:05:87:97:89:c2:bf:68:3b:4c:80:71:4f:32:26:44:65:
12:73:55:f6:90:b4:09:10:3b:e8:5a:bc:0e:22:dc:c4:e3:31:
df:be:95:c3:2d:0b:de:88:f7:57:a3:a8:b3:d1:7c:d2:06:22:
66:4b:2a:04:f9:bb:3f:93:ed:1d:f8:1f:03:1e:4c:34:96:bb:
b9:2a:7e:b6:13:c7:3d:2e:e8:fc:bd:66:7c:93:a8:b6:08:bc:
ad:b3:72:f8:56:c5:77:57:7c:47:d6:26:70:00:2a:b7:47:92:
bc:17:07:b6:b1:f5:75:ae:35:81:f7:d1:09:c7:49:c6:af:20:
59:28:1c:23:ae:d1:7b:71:fe:e1:4e:64:e8:11:b2:87:dd:7d:
81:77:db:77
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYfg875DlueOnH4JTHE+NaFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0
Y2Y0NTYwHhcNMjMwNTAzMDkzMTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDU1MjBjN2Y4NDMxMTkwMDVkNjViNDA5N2NhZTBkM2E0ZjAwZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd+ghY/xfPZMQNiGlIproILZ5JPP
9JPAmEzx2z/+1rftob9QFpKvvyQKoxXTQdeMCnUkPCq1LLMCsUIPu7MoDFJq21x7
XOKUqFw9nx8grOMEMJldrp9ovb0s/m37J/uH7/weDNfzp8Ho1kbVlzOBH+zUJoZ8
iXR9TeFyQxBDEhTz5SbjEAYwvMiB4Mq1JS4D1WD1bmV9a7SpeCv6JPOI1WJO+0Ii
+xICAjhafW3i+N2Tul/XXlqeAp64FSEyg+YEQ+0LHYEg0bqYKelSgPJgbd9ShfRr
1hzek9G3nz2W1XK7EUfyoQjXGCxHJUNqazorrR2JPHUogHfE94pLkdhRZwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOBVIMf4QxGQBdZbQJfK4NOk8A7LMB8GA1UdIwQY
MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt
YjlmMjk4YTc5OGU0LzEvNEZVZ3hfaERFWkFGMWx0QWw4cmcwNlR3RHNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0
LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVNZ0AwQC
VNboMA0GCSqGSIb3DQEBCwUAA4IBAQARvQfTy9ia93ytdmjcZMIbs3Y+urEO+8fR
Q6cgGtSHixAl47wyiMRcbU4rmxjXEI0IATw2SAmaNETvjq9+kSISsgwnEHh5Ecu4
CoAtBtWcVqQPxu1EBfi2tloiirphw6rWEvxMdRUn8rP2USzikAWHl4nCv2g7TIBx
TzImRGUSc1X2kLQJEDvoWrwOItzE4zHfvpXDLQveiPdXo6iz0XzSBiJmSyoE+bs/
k+0d+B8DHkw0lru5Kn62E8c9Luj8vWZ8k6i2CLyts3L4VsV3V3xH1iZwACq3R5K8
Fwe2sfV1rjWB99EJx0nGryBZKBwjrtF7cf7hTmToEbKH3X2Bd9t3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:43 2024 by rpki-client on console-fra.rpki-client.org