Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5mzvVljZHF2eKZK_ltt00jpmWys.roa
File: 5mzvVljZHF2eKZK_ltt00jpmWys.roa (raw, json)
Hash identifier: ZqqL2vDOxY/6P7FGQV+fqWoZJNkLTaseqp4lALMYuoI=
Subject key identifier: E6:6C:EF:56:58:D9:1C:5D:9E:29:92:BF:96:DB:74:D2:3A:66:5B:2B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFCD296D34099440A578EDD02F0FCB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5mzvVljZHF2eKZK_ltt00jpmWys.roa
Signing time: Sun 01 Jan 2023 18:54:53 +0000
ROA not before: Sun 01 Jan 2023 18:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 84.32.87.0/24 maxlen: 24
88.216.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jun 2023 09:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:cd:29:6d:34:09:94:40:a5:78:ed:d0:2f:0f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e66cef5658d91c5d9e2992bf96db74d23a665b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:c4:f8:08:99:ee:3d:51:9a:37:b0:39:e6:
30:95:84:ad:93:87:97:ab:c4:20:2b:bd:39:4a:66:
d3:6e:d3:40:99:e5:99:43:33:b4:a5:a5:86:83:6f:
ed:ab:78:d3:eb:70:46:2a:53:d5:05:07:b6:8f:55:
15:73:8e:b7:b3:55:7d:3f:b5:7b:77:f2:4b:20:b6:
72:e8:a2:d6:d0:04:62:93:bf:d2:43:50:40:aa:a6:
52:e5:a3:e3:fd:ea:05:89:77:44:53:99:42:01:2f:
ed:69:94:54:70:8a:fb:79:0e:07:62:7e:9a:88:06:
06:7a:5d:0c:58:0d:1c:c9:51:01:47:a4:9f:f6:df:
63:d8:af:f3:76:c3:4c:4e:a2:2e:0a:10:c8:96:56:
9d:e2:34:c7:b2:59:25:12:d4:dc:de:08:f7:b5:ab:
f1:e4:02:46:81:48:0e:fb:1d:ee:ae:d9:51:73:47:
90:cc:76:d1:06:24:9f:1f:01:3d:c5:0a:d5:07:51:
19:11:69:08:b5:ee:86:26:05:6f:ca:bf:79:a9:f3:
10:77:9d:04:a1:0c:8f:97:54:4f:17:a6:16:40:ae:
2c:04:d6:9e:a8:be:6d:62:a4:1a:9c:a8:6f:94:64:
a4:a1:86:13:9d:00:bd:c4:6a:ea:1f:59:eb:05:bb:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6C:EF:56:58:D9:1C:5D:9E:29:92:BF:96:DB:74:D2:3A:66:5B:2B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5mzvVljZHF2eKZK_ltt00jpmWys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.87.0/24
88.216.96.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9e:9b:d1:09:e6:bd:6c:da:db:92:79:d3:26:de:9a:14:1d:
21:ba:d0:be:72:0a:a1:e6:b6:34:40:81:03:60:30:e5:16:7c:
bb:3c:53:78:ff:1a:ca:76:92:e3:31:e9:2d:86:8a:2b:bc:b9:
b7:34:8d:b0:1e:85:bc:e7:ef:9d:95:42:64:dc:11:05:a6:f9:
20:75:e9:97:32:f3:2b:58:93:9c:fd:a8:29:8a:fc:84:ba:e4:
7f:80:f1:c3:a9:ea:b6:e8:cd:e1:7a:9c:f1:b7:03:42:b5:c5:
7c:e5:1c:cc:5a:dd:0e:e2:cc:b1:52:84:0a:d2:48:1d:85:ef:
0d:1e:cd:71:d7:82:54:5e:f7:8f:f3:71:23:10:27:23:f6:a1:
d0:fb:b4:84:12:4f:11:5a:a0:0e:d1:4b:c8:29:83:1d:23:13:
30:c6:a1:e2:28:f9:22:8d:a3:29:de:c4:21:24:20:d4:16:e5:
9d:92:c5:83:34:85:9b:80:b8:d8:57:ad:d4:13:c1:5c:94:99:
81:6a:bd:9e:04:c5:26:10:62:bc:d9:b5:36:22:6b:33:1e:9a:
72:96:7e:bf:dd:56:bd:17:32:00:2a:59:69:a7:ed:ab:7f:29:
12:ce:87:38:eb:1e:33:29:94:f6:8f:c0:ac:2e:df:23:55:be:
28:17:aa:3d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVur80pbTQJlECleO3QLw/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTAxMTg1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjZjZWY1NjU4ZDkxYzVkOWUyOTkyYmY5NmRiNzRkMjNhNjY1YjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WTE+AiZ7j1RmjewOeYwlYStk4eX
q8QgK705SmbTbtNAmeWZQzO0paWGg2/tq3jT63BGKlPVBQe2j1UVc463s1V9P7V7
d/JLILZy6KLW0ARik7/SQ1BAqqZS5aPj/eoFiXdEU5lCAS/taZRUcIr7eQ4HYn6a
iAYGel0MWA0cyVEBR6Sf9t9j2K/zdsNMTqIuChDIllad4jTHslklEtTc3gj3tavx
5AJGgUgO+x3urtlRc0eQzHbRBiSfHwE9xQrVB1EZEWkIte6GJgVvyr95qfMQd50E
oQyPl1RPF6YWQK4sBNaeqL5tYqQanKhvlGSkoYYTnQC9xGrqH1nrBbu2AwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOZs71ZY2RxdnimSv5bbdNI6ZlsrMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvNW16dlZsalpIRjJlS1pLX2x0dDAwanBtV3lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCBXAwQA
WNhgMA0GCSqGSIb3DQEBCwUAA4IBAQAxnpvRCea9bNrbknnTJt6aFB0hutC+cgqh
5rY0QIEDYDDlFny7PFN4/xrKdpLjMekthoorvLm3NI2wHoW85++dlUJk3BEFpvkg
demXMvMrWJOc/agpivyEuuR/gPHDqeq26M3hepzxtwNCtcV85RzMWt0O4syxUoQK
0kgdhe8NHs1x14JUXveP83EjECcj9qHQ+7SEEk8RWqAO0UvIKYMdIxMwxqHiKPki
jaMp3sQhJCDUFuWdksWDNIWbgLjYV63UE8FclJmBar2eBMUmEGK82bU2ImszHppy
ln6/3Va9FzIAKllpp+2rfykSzoc46x4zKZT2j8CsLt8jVb4oF6o9
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org