Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1RU8dlgv8oeqdjKXDh4usJ-evmg.roa
File: 1RU8dlgv8oeqdjKXDh4usJ-evmg.roa (raw, json)
Hash identifier: jr7aWZIZ0DJ70GX5Fh+S0MxkQnA6or/nGMqXAXSTAi0=
Subject key identifier: D5:15:3C:76:58:2F:F2:87:AA:76:32:97:0E:1E:2E:B0:9F:9E:BE:68
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189867B2D6A62C733C80B97AA0076125AA2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1RU8dlgv8oeqdjKXDh4usJ-evmg.roa
Signing time: Mon 24 Jul 2023 05:59:26 +0000
ROA not before: Mon 24 Jul 2023 05:59:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 84.32.77.0/24 maxlen: 24
84.32.136.0/22 maxlen: 24
88.216.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 05:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:86:7b:2d:6a:62:c7:33:c8:0b:97:aa:00:76:12:5a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 24 05:59:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5153c76582ff287aa7632970e1e2eb09f9ebe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:41:c0:d7:11:c8:9e:e9:bd:78:b5:4f:f3:
c6:ae:5c:90:1e:76:61:b3:8e:ac:4a:a8:a5:37:6f:
34:e9:11:6b:1f:71:28:bf:33:c9:69:91:ea:91:d3:
7b:1e:4a:d0:18:1d:9d:1d:ac:11:e5:23:9d:53:b6:
ba:df:6c:70:46:3b:fa:29:24:8c:97:b4:d7:0d:6f:
55:ce:75:c2:1d:d7:15:18:05:2a:51:a5:3b:3a:64:
71:46:0f:3e:a1:a9:be:44:c7:b8:6b:2d:42:e2:c1:
6a:32:29:07:91:2f:0a:8c:24:df:ce:b4:3a:71:9a:
d3:54:6e:a3:64:7c:9c:8c:c9:41:81:d2:9d:96:24:
b7:6a:d2:97:59:1a:46:01:5a:07:32:26:3b:d8:1b:
b9:0f:7c:6b:bd:d2:fb:06:e3:09:d8:7f:5b:35:de:
35:89:a4:63:fe:b0:92:6c:c6:f3:9f:a5:dc:e1:9a:
ac:d1:1a:a1:cf:66:0a:1b:94:8e:f9:e0:ef:5d:f3:
9b:72:b2:bf:b8:b9:1a:5e:cb:fb:e5:ba:38:f8:58:
99:06:ff:68:08:e9:ee:24:11:5c:b3:fc:13:fe:82:
ee:81:cf:4d:13:a2:e7:cf:b2:87:ce:69:d2:a9:d8:
0e:27:28:dc:e3:eb:ad:de:ea:36:3e:63:57:bc:ab:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:15:3C:76:58:2F:F2:87:AA:76:32:97:0E:1E:2E:B0:9F:9E:BE:68
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1RU8dlgv8oeqdjKXDh4usJ-evmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.77.0/24
84.32.136.0/22
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
13:e0:0d:d3:b1:08:af:c7:83:81:b1:2e:b8:c9:80:67:61:08:
fd:d1:3c:aa:a5:a0:44:04:5e:81:1b:8f:5b:0b:92:c2:f1:33:
d4:81:99:9a:cf:11:0c:97:b4:c6:2f:5e:1d:33:07:ed:71:f7:
81:f0:a2:32:c5:c4:73:e6:9d:4d:29:9f:5c:36:48:35:02:07:
97:25:2a:f7:2f:09:c2:37:30:89:4c:e6:ce:6f:20:3b:4a:27:
0e:13:86:b3:d1:57:8f:df:17:c3:dc:1d:17:a1:37:04:9b:64:
82:25:f0:dd:4a:54:a7:92:28:61:78:65:87:3b:d4:a9:a9:54:
5f:a0:eb:76:60:af:a9:ad:8b:53:10:a2:36:c5:e6:78:74:ea:
fb:71:3b:81:3f:81:f2:c0:ee:af:66:3e:85:62:1d:67:60:a1:
11:99:1b:db:07:90:41:71:51:0c:74:05:ff:67:eb:b2:ea:3c:
0b:5c:a7:d7:05:83:70:44:13:13:c6:62:50:85:17:8f:91:1e:
64:f0:0e:11:ed:22:c0:19:d0:f5:d3:17:48:84:19:c3:8d:84:
27:47:78:50:77:b9:4c:98:77:4d:37:01:2f:dd:fd:40:9b:c5:
4a:d1:24:4e:33:5a:a7:94:8c:b0:a8:ac:f7:91:b1:48:34:f3:
5c:83:82:d2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYmGey1qYsczyAuXqgB2ElqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNzI0MDU1OTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTE1M2M3NjU4MmZmMjg3YWE3NjMyOTcwZTFlMmViMDlmOWViZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHZBwNcRyJ7pvXi1T/PGrlyQHnZh
s46sSqilN2806RFrH3EovzPJaZHqkdN7HkrQGB2dHawR5SOdU7a632xwRjv6KSSM
l7TXDW9VznXCHdcVGAUqUaU7OmRxRg8+oam+RMe4ay1C4sFqMikHkS8KjCTfzrQ6
cZrTVG6jZHycjMlBgdKdliS3atKXWRpGAVoHMiY72Bu5D3xrvdL7BuMJ2H9bNd41
iaRj/rCSbMbzn6Xc4Zqs0Rqhz2YKG5SO+eDvXfObcrK/uLkaXsv75bo4+FiZBv9o
COnuJBFcs/wT/oLugc9NE6Lnz7KHzmnSqdgOJyjc4+ut3uo2PmNXvKs+awIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNUVPHZYL/KHqnYylw4eLrCfnr5oMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvMVJVOGRsZ3Y4b2VxZGpLWERoNHVzSi1ldm1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCBNAwQC
VCCIAwQCWNj4MA0GCSqGSIb3DQEBCwUAA4IBAQAT4A3TsQivx4OBsS64yYBnYQj9
0TyqpaBEBF6BG49bC5LC8TPUgZmazxEMl7TGL14dMwftcfeB8KIyxcRz5p1NKZ9c
Nkg1AgeXJSr3LwnCNzCJTObObyA7SicOE4az0VeP3xfD3B0XoTcEm2SCJfDdSlSn
kihheGWHO9SpqVRfoOt2YK+prYtTEKI2xeZ4dOr7cTuBP4HywO6vZj6FYh1nYKER
mRvbB5BBcVEMdAX/Z+uy6jwLXKfXBYNwRBMTxmJQhRePkR5k8A4R7SLAGdD10xdI
hBnDjYQnR3hQd7lMmHdNNwEv3f1Am8VK0SROM1qnlIywqKz3kbFINPNcg4LS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org