Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/fzhllaektIPirLcT3GqR0BHv6c8.roa
File: fzhllaektIPirLcT3GqR0BHv6c8.roa (raw, json)
Hash identifier: /TLxs8xHtrrGr9vL2eLjQ4fgLNAI/v3Z5bZaMKTIvb8=
Subject key identifier: 7F:38:65:95:A7:A4:B4:83:E2:AC:B7:13:DC:6A:91:D0:11:EF:E9:CF
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 018820606B9403AE94A354286CB33AD5D77A
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/fzhllaektIPirLcT3GqR0BHv6c8.roa
Signing time: Mon 15 May 2023 17:06:09 +0000
ROA not before: Mon 15 May 2023 17:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34400
IP address blocks: 84.23.96.0/20 maxlen: 24
84.23.105.0/24 maxlen: 24
84.23.109.0/24 maxlen: 24
84.23.107.0/24 maxlen: 24
84.23.108.0/24 maxlen: 24
84.23.106.0/24 maxlen: 24
84.23.115.0/24 maxlen: 24
84.23.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:60:6b:94:03:ae:94:a3:54:28:6c:b3:3a:d5:d7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: May 15 17:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f386595a7a4b483e2acb713dc6a91d011efe9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:44:00:f8:14:a5:28:bd:df:90:3d:98:8e:
e6:cb:63:40:cc:ac:bf:4d:8b:9c:0a:07:8f:4b:b9:
a7:0b:ef:bb:c0:e3:a9:f9:0e:ee:47:ba:cc:5f:2b:
ef:8e:07:0d:79:34:27:8f:ba:1e:88:f4:d8:1f:72:
a4:80:c6:72:c8:0e:8e:a2:44:75:96:70:c7:12:aa:
77:15:28:c3:12:b4:04:8f:c4:2b:10:5a:c6:6a:29:
b9:0c:bf:76:03:6b:1b:6a:3a:5b:1e:97:1c:14:2b:
45:ad:0f:2b:18:7f:dd:1a:12:fa:8a:4c:3c:c8:7d:
1f:6d:96:d0:28:99:76:e9:c6:46:c6:2d:1c:e3:9a:
ba:11:7a:19:68:5e:36:32:53:0d:aa:8d:b0:a7:a8:
6e:64:83:70:2e:ad:df:d9:bb:a9:24:e1:3b:b7:b3:
f0:36:6d:f6:16:36:89:a5:ff:cf:e5:f7:f4:c5:d5:
a2:05:98:c0:e5:53:6b:11:16:f3:04:45:e4:cc:27:
46:79:79:bc:f7:92:ec:68:52:26:a0:fe:58:2b:2a:
9f:74:14:77:e3:fd:98:e7:b6:98:3e:66:87:2b:9f:
db:7e:a4:db:fd:90:fa:ef:95:4b:06:74:ae:49:f1:
1c:b8:de:37:be:f9:49:d5:3b:df:a2:a2:a4:38:fc:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:38:65:95:A7:A4:B4:83:E2:AC:B7:13:DC:6A:91:D0:11:EF:E9:CF
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/fzhllaektIPirLcT3GqR0BHv6c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.23.96.0/20
84.23.113.0/24
84.23.115.0/24
Signature Algorithm: sha256WithRSAEncryption
83:44:f9:74:56:a4:66:11:17:55:97:f8:2c:8d:19:ef:8c:50:
02:2b:50:7a:0b:ab:d2:4d:c1:b6:11:ca:e9:85:53:ab:50:e0:
34:b4:20:3b:d4:01:55:5d:1f:b6:5a:0c:e5:96:d3:75:a5:92:
bd:8c:1f:e0:ae:a6:95:31:1f:6f:ba:1b:a8:fa:c3:b8:e9:a1:
65:c4:51:81:52:d0:b7:61:49:88:dd:28:79:31:e6:91:5a:b6:
f1:a8:49:a0:81:96:e1:07:7c:e1:4d:be:a7:68:53:38:1d:aa:
88:84:fd:7a:05:be:d0:fa:ba:0b:4c:4b:ae:c8:aa:65:f7:f4:
e1:86:5f:8f:ef:cb:21:ff:a2:3b:38:85:54:57:51:da:5a:58:
ee:fe:c5:f7:fd:76:2f:55:49:a4:5e:e0:29:1f:11:3b:d6:87:
14:cd:10:42:fe:1c:17:11:eb:08:fa:d1:f8:cf:23:fd:c1:f6:
2a:43:33:8e:84:4e:dd:d6:1f:67:f3:fb:8d:68:e9:2c:e0:6b:
bf:7b:5e:7b:5e:72:c8:93:cb:11:51:a6:ed:bf:00:89:7a:30:
3c:f7:f9:22:4c:b8:67:66:7d:7f:6e:77:a0:88:3f:fb:bb:c6:
73:8d:59:9a:e9:47:07:24:b7:e9:62:37:a8:8e:97:2d:99:83:
e3:f2:6f:47
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYggYGuUA66Uo1QobLM61dd6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk
OTIyMTIwHhcNMjMwNTE1MTcwNjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjM4NjU5NWE3YTRiNDgzZTJhY2I3MTNkYzZhOTFkMDExZWZlOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnztEAPgUpSi935A9mI7my2NAzKy/
TYucCgePS7mnC++7wOOp+Q7uR7rMXyvvjgcNeTQnj7oeiPTYH3KkgMZyyA6OokR1
lnDHEqp3FSjDErQEj8QrEFrGaim5DL92A2sbajpbHpccFCtFrQ8rGH/dGhL6ikw8
yH0fbZbQKJl26cZGxi0c45q6EXoZaF42MlMNqo2wp6huZINwLq3f2bupJOE7t7Pw
Nm32FjaJpf/P5ff0xdWiBZjA5VNrERbzBEXkzCdGeXm895LsaFImoP5YKyqfdBR3
4/2Y57aYPmaHK5/bfqTb/ZD675VLBnSuSfEcuN43vvlJ1TvfoqKkOPw4XQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH84ZZWnpLSD4qy3E9xqkdAR7+nPMB8GA1UdIwQY
MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt
NDkyNGZhMDAwYjdjLzEvZnpobGxhZWt0SVBpckxjVDNHcVIwQkh2NmM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj
LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEVBdgAwQA
VBdxAwQAVBdzMA0GCSqGSIb3DQEBCwUAA4IBAQCDRPl0VqRmERdVl/gsjRnvjFAC
K1B6C6vSTcG2EcrphVOrUOA0tCA71AFVXR+2WgzlltN1pZK9jB/grqaVMR9vuhuo
+sO46aFlxFGBUtC3YUmI3Sh5MeaRWrbxqEmggZbhB3zhTb6naFM4HaqIhP16Bb7Q
+roLTEuuyKpl9/Thhl+P78sh/6I7OIVUV1HaWlju/sX3/XYvVUmkXuApHxE71ocU
zRBC/hwXEesI+tH4zyP9wfYqQzOOhE7d1h9n8/uNaOks4Gu/e157XnLIk8sRUabt
vwCJejA89/kiTLhnZn1/bnegiD/7u8ZzjVma6UcHJLfpYjeojpctmYPj8m9H
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:20 2023 by rpki-client on console-ams.rpki-client.org