Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-NIVfQatYCEapXkYYFUykZ0_dlU.roa
File: 1-NIVfQatYCEapXkYYFUykZ0_dlU.roa (raw, json)
Hash identifier: KMDgROzVhulRtRi4nlhHJpcin6HXDZG09LnSnmAvgyg=
Subject key identifier: F8:D2:15:7D:06:AD:60:21:1A:A5:79:18:60:55:32:91:9D:3F:76:55
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01889A4549D137DA364C26F92C8A6E0E60FA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-NIVfQatYCEapXkYYFUykZ0_dlU.roa
Signing time: Thu 08 Jun 2023 09:10:12 +0000
ROA not before: Thu 08 Jun 2023 09:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45887
IP address blocks: 84.32.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 14:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:45:49:d1:37:da:36:4c:26:f9:2c:8a:6e:0e:60:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 8 09:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8d2157d06ad60211aa57918605532919d3f7655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:4d:84:26:87:52:98:17:e2:17:5f:46:f9:
a6:fe:00:de:71:8e:9b:de:91:94:35:80:27:79:14:
f9:78:00:0a:1e:88:bc:54:a3:2b:1f:31:8e:ba:7c:
e9:2b:1d:8d:68:ef:b5:c2:de:26:89:fb:19:9c:bf:
53:4f:cc:12:97:9e:e1:5b:fa:cd:2a:22:7e:7b:b3:
8f:cc:4b:11:8f:ee:4c:7a:1d:81:8e:61:cb:49:a7:
c3:8a:8c:df:e8:3a:29:14:54:91:e1:16:53:3b:b4:
24:41:11:67:07:81:c3:56:48:75:38:53:42:fc:71:
bc:96:88:21:cf:c7:13:8d:11:4a:38:ad:69:19:2d:
cc:ed:d2:6b:fc:18:f7:67:58:89:61:d3:98:06:d3:
ab:ea:bd:52:15:c4:16:15:be:66:38:ed:71:54:fb:
33:7a:dd:b1:bc:bf:6f:69:d3:84:c6:81:66:b0:ac:
0c:e1:2e:9b:d7:f9:ab:6a:c7:41:91:eb:8d:6f:20:
ed:14:96:29:87:dd:8a:0e:d1:6a:85:11:db:96:30:
11:c6:c0:e0:cb:07:5a:7d:e0:5a:e0:0b:3b:2a:00:
11:1d:ca:5a:99:11:c0:87:fd:72:bd:41:70:1d:0f:
97:02:6b:b6:f1:6b:2c:47:c8:f5:36:29:b2:3c:32:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D2:15:7D:06:AD:60:21:1A:A5:79:18:60:55:32:91:9D:3F:76:55
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-NIVfQatYCEapXkYYFUykZ0_dlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:be:86:9c:f9:24:41:2f:d3:7e:6d:c6:4c:b4:59:55:2a:dd:
89:04:ea:69:84:03:03:29:e2:37:16:49:11:d9:8b:c2:4d:5a:
49:72:03:d8:9e:02:83:9f:49:e4:15:e5:57:e0:3b:ad:a8:8a:
88:97:6a:4b:6a:80:28:50:ae:e7:62:a6:c5:c4:b5:a0:9b:1a:
b2:c4:d8:be:0f:46:c3:6e:00:7c:1d:ca:44:ee:72:7f:5c:7e:
ac:1e:22:28:83:ab:98:ea:9c:2b:11:46:45:dd:84:00:a1:73:
db:79:19:51:41:0b:64:28:06:09:46:17:5d:82:d7:16:d9:42:
0d:fb:55:da:f1:da:d4:9c:0a:1a:e8:e7:34:4d:fd:19:f9:50:
7c:30:01:41:31:a4:c3:e9:f8:7a:7a:2b:16:b8:90:44:cd:c3:
df:1b:cf:47:fc:df:1f:2b:bb:1f:22:e8:84:2e:99:d2:4f:ff:
a7:97:d4:05:e8:43:f5:23:e6:3a:0d:62:8f:0e:d9:97:71:4c:
1e:f5:df:55:a7:e3:03:f8:64:67:ba:0b:90:4a:47:a1:cc:f1:
35:df:fe:b2:18:be:8a:58:1b:12:e2:27:1b:92:64:1f:b0:58:
6c:7c:20:90:a5:a5:fb:fd:e8:83:f8:a1:30:c0:26:33:ec:91:
e7:29:cb:4d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYiaRUnRN9o2TCb5LIpuDmD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNjA4MDkxMDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGQyMTU3ZDA2YWQ2MDIxMWFhNTc5MTg2MDU1MzI5MTlkM2Y3NjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVZNhCaHUpgX4hdfRvmm/gDecY6b
3pGUNYAneRT5eAAKHoi8VKMrHzGOunzpKx2NaO+1wt4mifsZnL9TT8wSl57hW/rN
KiJ+e7OPzEsRj+5Meh2BjmHLSafDiozf6DopFFSR4RZTO7QkQRFnB4HDVkh1OFNC
/HG8loghz8cTjRFKOK1pGS3M7dJr/Bj3Z1iJYdOYBtOr6r1SFcQWFb5mOO1xVPsz
et2xvL9vadOExoFmsKwM4S6b1/mrasdBkeuNbyDtFJYph92KDtFqhRHbljARxsDg
ywdafeBa4As7KgARHcpamRHAh/1yvUFwHQ+XAmu28WssR8j1NimyPDKkHQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPjSFX0GrWAhGqV5GGBVMpGdP3ZVMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvMS1OSVZmUWF0WUNFYXBYa1lZRlV5a1owX2RsVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGMvMzk0YzkzLWRjYTMtNGJjNS04YzliLTIzNDgxYmYwOTFj
My8xL1Q3MUZfT05XNHFaZkhrMGRyM2dVdHRhOW84VS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFQgOzAN
BgkqhkiG9w0BAQsFAAOCAQEAa76GnPkkQS/Tfm3GTLRZVSrdiQTqaYQDAyniNxZJ
EdmLwk1aSXID2J4Cg59J5BXlV+A7raiKiJdqS2qAKFCu52KmxcS1oJsassTYvg9G
w24AfB3KRO5yf1x+rB4iKIOrmOqcKxFGRd2EAKFz23kZUUELZCgGCUYXXYLXFtlC
DftV2vHa1JwKGujnNE39GflQfDABQTGkw+n4enorFriQRM3D3xvPR/zfHyu7HyLo
hC6Z0k//p5fUBehD9SPmOg1ijw7Zl3FMHvXfVafjA/hkZ7oLkEpHoczxNd/+shi+
ilgbEuInG5JkH7BYbHwgkKWl+/3og/ihMMAmM+yR5ynLTQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org