Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/snufMnf-grAvDnpKoNN9T90VbKU.roa
File: snufMnf-grAvDnpKoNN9T90VbKU.roa (raw, json)
Hash identifier: GyP/us8+LiP/0EIC+W/1sX7rN+xx6xl0aPjL5Y7axi4=
Subject key identifier: B2:7B:9F:32:77:FE:82:B0:2F:0E:7A:4A:A0:D3:7D:4F:DD:15:6C:A5
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0186547891AFD410D406588641F5C5F4113C
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/snufMnf-grAvDnpKoNN9T90VbKU.roa
Signing time: Wed 15 Feb 2023 09:47:13 +0000
ROA not before: Wed 15 Feb 2023 09:47:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34471
IP address blocks: 84.232.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:78:91:af:d4:10:d4:06:58:86:41:f5:c5:f4:11:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Feb 15 09:47:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b27b9f3277fe82b02f0e7a4aa0d37d4fdd156ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1f:d3:00:d8:61:07:ef:23:18:e6:07:b0:9c:
d2:c3:b1:ed:e5:70:3d:6c:ab:2b:2c:bb:0a:8d:61:
b9:d7:e0:9f:93:b3:59:9c:01:c1:2c:8d:06:2f:c1:
0d:ba:96:c2:46:f4:38:74:71:46:7f:24:41:c3:fe:
a1:ec:75:9a:72:ac:59:b6:c8:7b:49:cc:b2:55:c7:
a5:09:e1:be:d8:86:64:39:32:b9:b4:3e:3d:8f:07:
13:be:f8:4f:bd:f8:56:b8:77:39:7c:f4:f8:95:91:
72:c2:af:14:c8:0c:1c:64:ed:1c:bb:40:2c:6d:ad:
4c:91:42:56:93:40:ca:9e:ec:46:c7:e1:4c:9d:0e:
df:5a:ae:28:e5:85:14:6e:88:f0:13:cc:f1:04:f4:
8c:c6:ec:bd:de:83:4b:5e:04:51:23:f1:4e:63:b2:
1e:9b:5e:fd:5b:83:cf:49:bf:64:3e:f9:a4:6e:30:
e1:50:f8:d6:6c:7c:4c:f3:11:e0:d8:1d:d8:9f:e8:
fa:63:b1:8e:52:d4:62:ac:78:82:60:f4:17:f2:49:
25:d0:25:76:5d:70:a7:34:24:42:9d:a7:f9:2b:6e:
3a:d0:a7:e0:e4:dc:66:bc:93:05:f7:6d:e6:24:33:
8b:5b:09:8a:7b:16:61:b4:a5:5f:01:94:63:4a:6a:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7B:9F:32:77:FE:82:B0:2F:0E:7A:4A:A0:D3:7D:4F:DD:15:6C:A5
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/snufMnf-grAvDnpKoNN9T90VbKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:b5:08:cb:9b:ef:b7:59:6f:23:44:1a:f9:54:ca:6d:3a:9a:
5f:77:b1:d5:07:3c:4a:b9:69:48:cb:b9:e3:a4:99:18:9c:41:
e3:d0:31:76:18:c0:9c:54:43:78:44:f9:c3:5c:10:d1:c1:54:
04:92:35:19:3c:c3:35:1d:9a:be:79:e6:54:e3:ef:1a:a0:98:
0b:23:4f:82:56:ec:8a:78:2a:2a:3a:e2:6e:ac:ac:52:e5:b9:
88:ff:e1:15:e4:2c:70:14:eb:be:d7:a3:61:d7:52:f5:aa:e1:
a5:43:9e:8c:47:5f:8d:92:fa:46:d1:ad:b2:14:f9:c1:e2:3d:
6b:5a:5b:a2:46:25:3b:16:ba:28:f3:09:cf:57:0f:95:ad:7e:
36:76:3b:14:b7:0f:89:55:7e:99:db:60:b3:42:c3:c5:65:7e:
dc:92:7e:35:cb:50:27:43:81:94:a5:1f:3b:9c:45:1d:a1:d4:
b7:16:bd:b2:91:cc:6f:c7:00:27:45:de:0c:fc:10:cf:dc:8f:
06:99:db:16:58:67:7e:2a:70:75:fa:8c:eb:cd:73:a9:fc:56:
16:ed:6d:bb:e5:3c:84:c2:cc:ef:30:2a:49:ec:3e:84:18:20:
56:94:a5:16:4f:ea:a7:ba:07:06:58:a0:8c:e2:0b:18:82:ee:
0b:4e:16:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZUeJGv1BDUBliGQfXF9BE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjMwMjE1MDk0NzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjdiOWYzMjc3ZmU4MmIwMmYwZTdhNGFhMGQzN2Q0ZmRkMTU2Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h/TANhhB+8jGOYHsJzSw7Ht5XA9
bKsrLLsKjWG51+Cfk7NZnAHBLI0GL8ENupbCRvQ4dHFGfyRBw/6h7HWacqxZtsh7
ScyyVcelCeG+2IZkOTK5tD49jwcTvvhPvfhWuHc5fPT4lZFywq8UyAwcZO0cu0As
ba1MkUJWk0DKnuxGx+FMnQ7fWq4o5YUUbojwE8zxBPSMxuy93oNLXgRRI/FOY7Ie
m179W4PPSb9kPvmkbjDhUPjWbHxM8xHg2B3Yn+j6Y7GOUtRirHiCYPQX8kkl0CV2
XXCnNCRCnaf5K2460Kfg5NxmvJMF923mJDOLWwmKexZhtKVfAZRjSmpEkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLJ7nzJ3/oKwLw56SqDTfU/dFWylMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvc251Zk1uZi1nckF2RG5wS29OTjlUOTBWYktVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVOhoMA0G
CSqGSIb3DQEBCwUAA4IBAQDDtQjLm++3WW8jRBr5VMptOppfd7HVBzxKuWlIy7nj
pJkYnEHj0DF2GMCcVEN4RPnDXBDRwVQEkjUZPMM1HZq+eeZU4+8aoJgLI0+CVuyK
eCoqOuJurKxS5bmI/+EV5CxwFOu+16Nh11L1quGlQ56MR1+NkvpG0a2yFPnB4j1r
WluiRiU7Froo8wnPVw+VrX42djsUtw+JVX6Z22CzQsPFZX7ckn41y1AnQ4GUpR87
nEUdodS3Fr2ykcxvxwAnRd4M/BDP3I8GmdsWWGd+KnB1+ozrzXOp/FYW7W275TyE
wszvMCpJ7D6EGCBWlKUWT+qnugcGWKCM4gsYgu4LTha0
-----END CERTIFICATE-----
Generated at Wed Dec 20 11:13:05 2023 by rpki-client on console-fra.rpki-client.org