Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3QvcExenAAZOYA772hoxgIiFgbs.roa
File: 3QvcExenAAZOYA772hoxgIiFgbs.roa (raw, json)
Hash identifier: WPm9A3gfi2HOZPU63rvBiMYY+47sTaPcXeolUbidPkg=
Subject key identifier: DD:0B:DC:13:17:A7:00:06:4E:60:0E:FB:DA:1A:31:80:88:85:81:BB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AF9B786ABB77B1633E5B6C8D9426CF078
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3QvcExenAAZOYA772hoxgIiFgbs.roa
Signing time: Wed 04 Oct 2023 08:04:28 +0000
ROA not before: Wed 04 Oct 2023 08:04:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 84.32.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 13:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f9:b7:86:ab:b7:7b:16:33:e5:b6:c8:d9:42:6c:f0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 4 08:04:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd0bdc1317a700064e600efbda1a3180888581bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:d4:c3:8f:ea:d3:52:b4:e9:8f:65:94:0d:
fc:ec:c9:f6:96:93:da:1d:88:d0:6f:1a:9b:e9:b8:
56:f6:cd:67:48:97:34:d7:f5:e2:65:ec:4a:71:85:
a7:69:05:70:5c:5c:ee:a8:a2:84:fc:fe:89:5d:e3:
da:36:be:3b:10:a7:4b:38:9e:58:46:d0:a8:d1:88:
17:9f:17:0e:ae:02:a2:95:47:8e:a7:6f:7f:cf:59:
02:c0:0b:04:4b:f0:8b:ed:31:fe:cc:e9:9b:2f:82:
9c:44:69:d0:3a:20:e8:1f:0c:a7:82:cd:28:3f:66:
0c:a7:66:0b:27:f5:96:79:0e:77:58:8c:2e:80:ec:
79:bc:a6:84:29:8d:ec:be:7e:98:7a:1a:5a:8a:36:
92:c3:4b:4e:84:52:ad:b2:24:41:f7:2e:58:12:ca:
bd:1f:78:a4:11:5a:11:26:c6:9e:f2:e0:b4:fe:60:
8f:45:d4:97:81:9e:3e:6a:f8:da:72:1f:7a:0f:a7:
49:9c:f4:f6:bb:dd:ae:7c:17:b5:b4:e2:ab:30:05:
c2:9b:70:89:b3:36:74:8a:c3:83:7d:1a:5c:9d:c0:
ee:c7:77:61:87:4e:8e:7d:1e:18:ef:7e:94:99:81:
b4:55:cb:11:30:e2:92:e1:1b:6c:13:a2:94:5a:72:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0B:DC:13:17:A7:00:06:4E:60:0E:FB:DA:1A:31:80:88:85:81:BB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3QvcExenAAZOYA772hoxgIiFgbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d1:da:01:fb:9d:c5:e5:ac:9b:c7:27:61:12:0a:dd:b2:09:
8d:9e:2d:fa:33:0d:70:b3:48:b2:e2:04:5a:2f:7e:35:b2:30:
dd:cc:d7:d8:f6:59:04:3f:53:bc:06:c8:35:7a:44:40:89:21:
52:7d:01:95:1f:63:2b:aa:5c:b5:2b:44:65:87:a4:c4:8c:e4:
e5:57:89:e5:1f:2d:06:55:96:0b:38:5f:a8:a1:0c:43:08:74:
39:0f:3a:49:2d:95:2b:13:ef:75:a5:51:e9:7a:f2:c9:2c:fa:
82:c5:c5:60:a9:68:ae:9e:7c:7e:60:be:25:30:4d:a3:ac:31:
f1:51:43:5c:e6:d0:55:b1:c8:ab:f7:3b:cb:f7:4e:e2:13:51:
80:9b:a7:59:ed:79:99:e2:88:74:50:f5:ea:f8:4e:a7:64:d2:
ec:1a:7c:4e:d0:e8:c2:17:4e:05:7c:6d:c0:42:64:51:86:2b:
0c:3e:46:ed:b9:98:d8:a5:20:8a:bc:64:c3:39:10:d4:a2:84:
44:94:6d:ad:2f:77:73:a3:54:9e:b1:ce:94:26:f1:dc:b7:d5:
e8:1b:8e:2e:1d:0a:c4:9b:25:ea:b7:8b:5b:f0:f9:b7:b3:55:
4c:b3:3a:7e:4d:be:be:d0:49:80:62:17:97:d9:23:9d:f9:18:
94:b9:d1:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYr5t4art3sWM+W2yNlCbPB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMDA0MDgwNDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDBiZGMxMzE3YTcwMDA2NGU2MDBlZmJkYTFhMzE4MDg4ODU4MWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJrUw4/q01K06Y9llA387Mn2lpPa
HYjQbxqb6bhW9s1nSJc01/XiZexKcYWnaQVwXFzuqKKE/P6JXePaNr47EKdLOJ5Y
RtCo0YgXnxcOrgKilUeOp29/z1kCwAsES/CL7TH+zOmbL4KcRGnQOiDoHwyngs0o
P2YMp2YLJ/WWeQ53WIwugOx5vKaEKY3svn6YehpaijaSw0tOhFKtsiRB9y5YEsq9
H3ikEVoRJsae8uC0/mCPRdSXgZ4+avjach96D6dJnPT2u92ufBe1tOKrMAXCm3CJ
szZ0isODfRpcncDux3dhh06OfR4Y736UmYG0VcsRMOKS4RtsE6KUWnLyDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN0L3BMXpwAGTmAO+9oaMYCIhYG7MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvM1F2Y0V4ZW5BQVpPWUE3NzJob3hnSWlGZ2JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCDnMA0G
CSqGSIb3DQEBCwUAA4IBAQAO0doB+53F5aybxydhEgrdsgmNni36Mw1ws0iy4gRa
L341sjDdzNfY9lkEP1O8Bsg1ekRAiSFSfQGVH2Mrqly1K0Rlh6TEjOTlV4nlHy0G
VZYLOF+ooQxDCHQ5DzpJLZUrE+91pVHpevLJLPqCxcVgqWiunnx+YL4lME2jrDHx
UUNc5tBVscir9zvL907iE1GAm6dZ7XmZ4oh0UPXq+E6nZNLsGnxO0OjCF04FfG3A
QmRRhisMPkbtuZjYpSCKvGTDORDUooRElG2tL3dzo1Sesc6UJvHct9XoG44uHQrE
myXqt4tb8Pm3s1VMszp+Tb6+0EmAYheX2SOd+RiUudET
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org