Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/vSL3jYZgI_uhGImz-LpPlvsDUj0.roa
File: vSL3jYZgI_uhGImz-LpPlvsDUj0.roa (raw, json)
Hash identifier: 2XiwEGGVd7JngwNuVLKiVW7LWQI6I5w+VbNU1u8AOMY=
Subject key identifier: BD:22:F7:8D:86:60:23:FB:A1:18:89:B3:F8:BA:4F:96:FB:03:52:3D
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 018848659EA4280496BB1DE41DCBA49A1AAB
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/vSL3jYZgI_uhGImz-LpPlvsDUj0.roa
Signing time: Tue 23 May 2023 11:36:39 +0000
ROA not before: Tue 23 May 2023 11:36:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202940
IP address blocks: 84.108.143.0/24 maxlen: 24
84.108.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 08:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:65:9e:a4:28:04:96:bb:1d:e4:1d:cb:a4:9a:1a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: May 23 11:36:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd22f78d866023fba11889b3f8ba4f96fb03523d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:b7:4e:69:17:76:51:ad:65:cc:c4:87:4f:
68:ff:c1:29:8f:54:85:04:64:87:d1:7d:80:7e:1c:
93:4c:b1:79:3f:df:76:e1:fa:1a:f0:63:3a:03:3d:
cb:01:d1:82:8d:63:e1:56:af:f4:74:57:08:a9:57:
36:b2:47:f8:a1:42:b4:65:6f:6d:88:8f:64:6d:f4:
c6:95:12:d8:16:7e:35:10:f8:02:8f:82:01:6c:a3:
30:0d:e4:82:d6:bd:99:77:f0:4b:d2:11:bf:3f:4e:
1f:c9:92:ae:e8:23:f8:16:cc:c7:0c:07:88:fc:af:
25:57:8b:97:27:62:10:f2:0f:c6:dc:4a:62:af:1c:
eb:a0:3c:15:38:da:d4:d4:09:7d:0a:f8:c7:a7:01:
c7:bb:e8:e1:63:85:d9:c8:2a:72:8c:5b:c4:80:75:
44:43:bb:84:b1:4a:3e:1a:cc:76:46:3f:8c:0c:57:
32:3c:72:ea:ff:61:9c:e6:af:be:9d:e3:f0:a2:7d:
d9:11:c6:5b:80:7d:78:70:e9:c3:4d:58:a2:29:03:
81:0d:9d:74:78:c4:a4:d8:ec:50:d3:37:1b:d4:91:
ac:b9:af:82:ff:09:46:63:31:9d:8d:0b:aa:12:fb:
72:17:37:5e:55:b9:9c:a7:3d:db:d4:2e:4b:5d:76:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:22:F7:8D:86:60:23:FB:A1:18:89:B3:F8:BA:4F:96:FB:03:52:3D
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/vSL3jYZgI_uhGImz-LpPlvsDUj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.108.142.0/23
Signature Algorithm: sha256WithRSAEncryption
95:32:91:f3:4f:35:65:cc:ba:6c:c0:88:52:80:cd:55:01:e4:
45:01:18:29:43:8f:53:41:45:61:ea:53:0d:ad:ae:8a:f9:81:
cb:32:c7:35:dc:e2:54:99:bc:2c:74:b8:a3:e6:cb:43:13:9b:
fe:a6:34:df:e8:aa:8c:25:ee:5d:e1:b8:f9:cf:50:9f:1c:35:
06:75:b2:ce:f7:49:54:32:6f:04:9c:37:04:1c:76:10:77:46:
ed:23:34:3a:e7:21:e9:d5:0b:a0:37:26:bf:31:f4:16:a6:c4:
94:ef:0b:ca:46:c3:38:74:dc:78:f9:97:80:ba:b1:e8:d7:74:
08:83:00:1d:e7:cf:a8:81:7f:c0:f8:5d:f5:f4:b4:20:78:c6:
96:25:d5:fd:5b:ef:11:01:d0:03:81:a0:c2:ba:a9:f5:ce:b6:
e7:7a:98:ed:5c:f2:f4:24:8d:29:4f:18:02:0e:d0:cc:1e:06:
0e:06:16:18:4f:9e:85:c8:72:26:86:51:01:7b:59:d4:03:89:
15:b2:29:8e:97:00:ca:d8:32:96:43:ec:39:0c:24:af:67:0b:
b0:1f:3f:54:8e:3e:c5:7b:4c:3d:23:eb:e0:db:42:73:f5:56:
2e:1c:97:b4:28:c6:62:e9:9c:47:f7:61:7b:61:5f:ce:47:2e:
80:8b:e7:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhIZZ6kKASWux3kHcukmhqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjMwNTIzMTEzNjM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDIyZjc4ZDg2NjAyM2ZiYTExODg5YjNmOGJhNGY5NmZiMDM1MjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTO3TmkXdlGtZczEh09o/8Epj1SF
BGSH0X2AfhyTTLF5P9924foa8GM6Az3LAdGCjWPhVq/0dFcIqVc2skf4oUK0ZW9t
iI9kbfTGlRLYFn41EPgCj4IBbKMwDeSC1r2Zd/BL0hG/P04fyZKu6CP4FszHDAeI
/K8lV4uXJ2IQ8g/G3EpirxzroDwVONrU1Al9CvjHpwHHu+jhY4XZyCpyjFvEgHVE
Q7uEsUo+Gsx2Rj+MDFcyPHLq/2Gc5q++nePwon3ZEcZbgH14cOnDTViiKQOBDZ10
eMSk2OxQ0zcb1JGsua+C/wlGYzGdjQuqEvtyFzdeVbmcpz3b1C5LXXblNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL0i942GYCP7oRiJs/i6T5b7A1I9MB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvdlNMM2pZWmdJX3VoR0ltei1McFBsdnNEVWowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVGyOMA0G
CSqGSIb3DQEBCwUAA4IBAQCVMpHzTzVlzLpswIhSgM1VAeRFARgpQ49TQUVh6lMN
ra6K+YHLMsc13OJUmbwsdLij5stDE5v+pjTf6KqMJe5d4bj5z1CfHDUGdbLO90lU
Mm8EnDcEHHYQd0btIzQ65yHp1QugNya/MfQWpsSU7wvKRsM4dNx4+ZeAurHo13QI
gwAd58+ogX/A+F319LQgeMaWJdX9W+8RAdADgaDCuqn1zrbnepjtXPL0JI0pTxgC
DtDMHgYOBhYYT56FyHImhlEBe1nUA4kVsimOlwDK2DKWQ+w5DCSvZwuwHz9Ujj7F
e0w9I+vg20Jz9VYuHJe0KMZi6ZxH92F7YV/ORy6Ai+fw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:57 2024 by rpki-client on console-fra.rpki-client.org