Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7Y5SgeKi8rp5MX5hNkuTKyU96zs.roa
File: 7Y5SgeKi8rp5MX5hNkuTKyU96zs.roa (raw, json)
Hash identifier: ZqlfGBUc7CxlJg2YjHnjvRCQCs8sMSIk4llHjEwijis=
Subject key identifier: ED:8E:52:81:E2:A2:F2:BA:79:31:7E:61:36:4B:93:2B:25:3D:EB:3B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018617175377E7FC07D6706165A8BAD3F5C6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7Y5SgeKi8rp5MX5hNkuTKyU96zs.roa
Signing time: Fri 03 Feb 2023 11:44:09 +0000
ROA not before: Fri 03 Feb 2023 11:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201801
IP address blocks: 84.32.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:17:53:77:e7:fc:07:d6:70:61:65:a8:ba:d3:f5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 3 11:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed8e5281e2a2f2ba79317e61364b932b253deb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:fc:50:ec:26:d3:eb:00:3c:47:20:28:95:
b0:33:a5:69:89:76:63:42:11:d1:65:09:d2:33:87:
ee:e5:20:c0:2a:3b:b9:c7:71:96:61:21:5d:f7:54:
a9:ee:db:dc:f9:f0:c3:b7:21:f6:60:7c:14:f2:c2:
5c:ce:a0:97:7e:d6:ed:9a:79:f5:50:9a:49:82:a8:
39:e9:e2:24:ee:e1:9b:f4:7d:b6:84:90:d9:f1:4b:
7d:15:b1:3f:47:33:55:b3:6c:6c:7b:d7:1f:c4:75:
d8:75:a1:8c:00:af:ea:9e:40:b3:41:f7:ae:d8:7b:
4f:59:d6:d8:40:12:5f:6e:65:97:12:d8:a9:98:ec:
6b:50:85:2b:f9:8f:26:59:5c:91:6f:8f:3a:c8:40:
af:91:bd:99:dc:b7:cb:c9:32:ca:26:51:9a:0f:a9:
1a:7b:2e:e3:35:ce:f5:aa:f4:45:a9:98:39:d7:8d:
0e:03:67:2e:fc:76:40:72:a6:43:4d:55:9b:c1:04:
05:c7:cd:ac:b5:46:d4:9f:ee:75:46:df:17:26:14:
36:95:e9:ef:2b:bc:62:7c:be:70:ca:78:b3:4d:09:
e7:2e:0d:fd:8d:b3:0f:a4:b0:0d:c9:8b:86:c3:90:
20:4d:40:6f:10:98:c2:ef:d4:37:70:57:69:a1:a7:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8E:52:81:E2:A2:F2:BA:79:31:7E:61:36:4B:93:2B:25:3D:EB:3B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7Y5SgeKi8rp5MX5hNkuTKyU96zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:94:ab:8d:b5:10:3e:5d:5e:4b:0f:4d:ea:d0:ca:7d:3c:33:
12:31:15:2c:7c:7f:76:c7:e9:0c:2c:c3:2c:f5:c9:64:f8:e7:
80:89:21:2d:1e:13:c9:a8:30:78:37:dc:f6:39:09:d9:f2:ef:
0f:7c:a3:d4:cd:e9:f6:c9:76:20:1e:fc:21:9f:14:d1:53:5c:
e8:75:16:e8:52:26:8c:01:06:c2:03:73:48:70:e8:b2:84:b2:
d2:c9:22:08:41:ef:d9:f3:0c:3b:ea:d1:06:43:03:f7:ea:d7:
38:d8:29:ac:41:07:0f:85:2c:f2:dc:29:59:35:97:4d:ec:eb:
5e:ca:fb:82:c7:9b:8e:2e:a9:20:e7:2c:5b:fc:7c:9c:ba:b6:
92:45:03:09:2c:e5:d8:cd:7f:c5:58:ca:47:0e:53:39:86:19:
4a:df:a1:3c:fd:fd:e3:df:f4:71:ed:77:af:1c:5d:a9:2a:fa:
bd:5c:38:01:1c:ab:6b:b9:e6:17:99:02:6c:ae:db:a9:e4:4d:
2c:0b:c2:a6:51:58:3e:ad:da:b6:79:73:26:15:40:f3:6f:c6:
e4:41:34:d1:e0:c2:03:68:4a:b9:ca:64:91:4c:16:a1:fc:89:
c7:37:27:e0:49:31:5e:83:90:5d:1a:51:28:e9:ae:08:cf:f9:
da:37:b2:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYXF1N35/wH1nBhZai60/XGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMjAzMTE0NDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDhlNTI4MWUyYTJmMmJhNzkzMTdlNjEzNjRiOTMyYjI1M2RlYjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJn8UOwm0+sAPEcgKJWwM6VpiXZj
QhHRZQnSM4fu5SDAKju5x3GWYSFd91Sp7tvc+fDDtyH2YHwU8sJczqCXftbtmnn1
UJpJgqg56eIk7uGb9H22hJDZ8Ut9FbE/RzNVs2xse9cfxHXYdaGMAK/qnkCzQfeu
2HtPWdbYQBJfbmWXEtipmOxrUIUr+Y8mWVyRb486yECvkb2Z3LfLyTLKJlGaD6ka
ey7jNc71qvRFqZg5140OA2cu/HZAcqZDTVWbwQQFx82stUbUn+51Rt8XJhQ2lenv
K7xifL5wynizTQnnLg39jbMPpLANyYuGw5AgTUBvEJjC79Q3cFdpoac2bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO2OUoHiovK6eTF+YTZLkyslPes7MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvN1k1U2dlS2k4cnA1TVg1aE5rdVRLeVU5NnpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCA+MA0G
CSqGSIb3DQEBCwUAA4IBAQBqlKuNtRA+XV5LD03q0Mp9PDMSMRUsfH92x+kMLMMs
9clk+OeAiSEtHhPJqDB4N9z2OQnZ8u8PfKPUzen2yXYgHvwhnxTRU1zodRboUiaM
AQbCA3NIcOiyhLLSySIIQe/Z8ww76tEGQwP36tc42CmsQQcPhSzy3ClZNZdN7Ote
yvuCx5uOLqkg5yxb/HycuraSRQMJLOXYzX/FWMpHDlM5hhlK36E8/f3j3/Rx7Xev
HF2pKvq9XDgBHKtrueYXmQJsrtup5E0sC8KmUVg+rdq2eXMmFUDzb8bkQTTR4MID
aEq5ymSRTBah/InHNyfgSTFeg5BdGlEo6a4Iz/naN7Kj
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:27 2023 by rpki-client on console-ams.rpki-client.org