Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/IK2HLUsMz1TLYgOXTFCnlC8_3Zg.roa
File: IK2HLUsMz1TLYgOXTFCnlC8_3Zg.roa (raw, json)
Hash identifier: MTCwofRKCy/rER/xXYRntGEkdGEXyGE1cLh/2QVPU+4=
Subject key identifier: 20:AD:87:2D:4B:0C:CF:54:CB:62:03:97:4C:50:A7:94:2F:3F:DD:98
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0185734CAFE1F3F658BB85110E75E53391A8
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/IK2HLUsMz1TLYgOXTFCnlC8_3Zg.roa
Signing time: Mon 02 Jan 2023 16:24:43 +0000
ROA not before: Mon 02 Jan 2023 16:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21208
IP address blocks: 84.14.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jul 2023 12:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:af:e1:f3:f6:58:bb:85:11:0e:75:e5:33:91:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 16:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20ad872d4b0ccf54cb6203974c50a7942f3fdd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:fb:85:04:24:b1:43:e0:7a:7a:57:c7:79:
ac:df:26:1e:89:5b:8c:d1:ff:a4:48:30:fb:aa:e7:
58:ab:24:99:f0:39:a8:36:94:50:74:4f:fb:db:e1:
e4:13:65:bb:04:98:4e:a1:db:b4:9c:d3:9b:d0:fe:
52:10:0b:43:98:a3:d5:fb:60:47:f0:ed:36:d4:29:
88:18:a4:3d:f9:e2:de:ac:7b:9a:dc:65:d8:b0:69:
99:5d:4b:c2:32:28:4e:33:3b:d7:b6:f9:5d:3a:ef:
0a:ce:d4:67:2a:0e:4c:f0:94:74:8c:fc:8d:9a:93:
9e:65:fc:7b:e4:c9:2c:89:cf:a5:eb:6f:bd:2d:67:
5c:f8:a2:7e:94:13:81:c6:18:24:b8:9a:50:d6:ad:
b6:9c:ae:31:dd:ed:61:1d:3c:c1:ed:e2:d0:d8:68:
3f:a3:9c:82:a6:40:8a:70:97:32:50:25:b9:62:0a:
04:4f:63:e5:3e:d3:b8:26:05:bd:44:27:f2:6a:4c:
15:10:23:d8:65:28:7d:5e:cf:cc:37:c5:54:d8:52:
42:1b:11:f5:82:b2:be:19:5e:8b:3b:4f:d3:d6:c0:
cb:91:57:fc:a1:87:a7:ad:42:2d:d7:bf:20:9e:8c:
69:b1:57:2a:0f:8b:b2:b0:d1:5c:54:22:d5:43:66:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AD:87:2D:4B:0C:CF:54:CB:62:03:97:4C:50:A7:94:2F:3F:DD:98
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/IK2HLUsMz1TLYgOXTFCnlC8_3Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.14.234.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:e4:5a:d9:df:38:d7:36:ea:43:05:0f:01:67:24:66:7c:e0:
82:23:7e:ac:19:2c:17:9c:04:a0:49:ab:4b:b4:d0:21:4c:02:
b0:43:48:ff:32:8d:5c:93:53:e4:cb:f8:38:c6:b2:d5:1a:ae:
5a:6c:43:9a:04:dd:6c:0e:db:5a:0e:8c:50:46:96:20:13:5e:
a1:7b:60:37:13:02:b8:89:1d:01:66:7c:9b:e6:84:d4:cf:d4:
24:9b:09:72:fc:6f:da:e8:0f:0b:27:4c:a6:47:36:35:33:64:
19:46:16:2a:a2:7b:a0:0b:cd:66:f5:8e:5a:d3:6c:73:2a:07:
77:a3:24:01:bf:26:5f:8f:21:5b:57:5e:9a:05:cd:37:3d:4b:
11:8b:70:6c:a0:8d:53:dd:95:a5:7f:91:d4:ed:52:91:51:50:
25:11:52:11:ea:e9:9e:d0:14:75:04:e6:32:d0:33:e8:59:88:
9e:5f:59:c7:e0:df:0c:54:af:49:47:7a:34:cb:2b:ec:a3:9c:
8c:76:36:52:16:5c:1e:ea:67:30:de:7e:76:66:dd:67:e1:1a:
5d:3c:3b:8f:75:c1:8e:9c:64:88:0c:e8:98:e3:a8:a9:7d:50:
f4:bf:f3:93:ee:dd:af:71:0d:8f:40:31:cc:6e:9d:2d:f0:ca:
90:10:bc:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzTK/h8/ZYu4URDnXlM5GoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz
NjYwMjYwHhcNMjMwMTAyMTYyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGFkODcyZDRiMGNjZjU0Y2I2MjAzOTc0YzUwYTc5NDJmM2ZkZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYb7hQQksUPgenpXx3ms3yYeiVuM
0f+kSDD7qudYqySZ8DmoNpRQdE/72+HkE2W7BJhOodu0nNOb0P5SEAtDmKPV+2BH
8O021CmIGKQ9+eLerHua3GXYsGmZXUvCMihOMzvXtvldOu8KztRnKg5M8JR0jPyN
mpOeZfx75Mksic+l62+9LWdc+KJ+lBOBxhgkuJpQ1q22nK4x3e1hHTzB7eLQ2Gg/
o5yCpkCKcJcyUCW5YgoET2PlPtO4JgW9RCfyakwVECPYZSh9Xs/MN8VU2FJCGxH1
grK+GV6LO0/T1sDLkVf8oYenrUIt178gnoxpsVcqD4uysNFcVCLVQ2Y11QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCthy1LDM9Uy2IDl0xQp5QvP92YMB8GA1UdIwQY
MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt
YjNiNzhiMGI2NmVhLzEvSUsySExVc016MVRMWWdPWFRGQ25sQzhfM1pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh
LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVA7qMA0G
CSqGSIb3DQEBCwUAA4IBAQCu5FrZ3zjXNupDBQ8BZyRmfOCCI36sGSwXnASgSatL
tNAhTAKwQ0j/Mo1ck1Pky/g4xrLVGq5abEOaBN1sDttaDoxQRpYgE16he2A3EwK4
iR0BZnyb5oTUz9Qkmwly/G/a6A8LJ0ymRzY1M2QZRhYqonugC81m9Y5a02xzKgd3
oyQBvyZfjyFbV16aBc03PUsRi3BsoI1T3ZWlf5HU7VKRUVAlEVIR6ume0BR1BOYy
0DPoWYieX1nH4N8MVK9JR3o0yyvso5yMdjZSFlwe6mcw3n52Zt1n4RpdPDuPdcGO
nGSIDOiY46ipfVD0v/OT7t2vcQ2PQDHMbp0t8MqQELzp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:28 2024 by rpki-client on console-ams.rpki-client.org