Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8l5UcXT6QgHOjze8BfL0cG11DXQ.roa
File: 8l5UcXT6QgHOjze8BfL0cG11DXQ.roa (raw, json)
Hash identifier: yzDFeQUNKUIlcuFwgklzaBwjS9VZhSWywR6v64A041g=
Subject key identifier: F2:5E:54:71:74:FA:42:01:CE:8F:37:BC:05:F2:F4:70:6D:75:0D:74
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFD821C463A102F3FC5A96CB735C24
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8l5UcXT6QgHOjze8BfL0cG11DXQ.roa
Signing time: Sun 01 Jan 2023 18:54:55 +0000
ROA not before: Sun 01 Jan 2023 18:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 84.32.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Mar 2023 10:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d8:21:c4:63:a1:02:f3:fc:5a:96:cb:73:5c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f25e547174fa4201ce8f37bc05f2f4706d750d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:76:42:d3:51:86:af:3a:ba:58:e7:4d:a1:
aa:05:6a:ae:91:c0:18:a2:dc:e6:2f:99:48:59:c6:
b6:28:2d:2b:47:70:cb:58:8d:bc:f9:30:b7:49:4d:
2b:b1:b3:6d:12:a8:dc:51:53:0d:95:77:c4:19:0a:
89:8d:e9:c3:6c:e5:b6:0a:8b:78:b8:33:af:de:89:
45:52:04:77:df:c9:56:09:a6:bc:fb:44:52:6e:e1:
67:0b:50:54:bc:d0:cf:15:ca:03:66:cb:e7:c6:3b:
6d:ed:9b:fd:3d:65:e7:c5:eb:9c:90:f3:c8:c3:9c:
dc:cf:0a:c5:81:fa:04:0d:03:5e:d6:ca:88:e4:8f:
bb:4c:f6:58:a5:98:b3:cc:69:e2:36:dd:f6:4e:d4:
d6:2c:74:11:26:fe:54:df:20:e1:77:db:33:16:17:
db:7d:10:71:a0:70:47:a4:73:57:87:02:03:18:14:
aa:e2:97:88:9d:32:98:a4:72:fc:eb:34:71:7c:f1:
cd:75:31:d8:1a:d0:5d:78:6d:6a:1e:fe:83:b6:d4:
31:68:07:ae:c0:15:4b:c7:65:46:3d:21:1e:50:df:
50:9b:8b:3f:b5:85:b0:8f:bf:7d:26:5b:c7:3a:6f:
d1:59:af:04:ae:7d:42:7f:5b:8b:76:f5:60:0f:81:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5E:54:71:74:FA:42:01:CE:8F:37:BC:05:F2:F4:70:6D:75:0D:74
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8l5UcXT6QgHOjze8BfL0cG11DXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.244.0/24
Signature Algorithm: sha256WithRSAEncryption
83:94:09:61:2a:96:43:33:b4:b4:b0:79:46:e2:e5:3a:c1:de:
10:1c:e3:1d:be:de:a8:92:d1:8f:e1:2a:e7:cb:12:8e:da:e1:
6b:74:e2:20:f2:f0:81:c6:fb:36:fb:a9:04:ac:39:5a:0c:9d:
34:0b:24:2f:d1:44:bf:73:37:8e:b0:eb:7c:82:55:74:60:d3:
5f:cf:7c:46:b4:35:a7:9c:ef:26:6c:26:05:3d:54:cf:56:d2:
de:ee:16:7d:8a:57:fa:56:cd:8c:0f:5e:90:e8:12:9a:e5:99:
1e:e6:46:a1:63:96:aa:17:f0:9f:eb:fd:c1:96:23:98:dd:ff:
a4:48:db:94:af:c1:9b:d3:21:3f:ce:ef:86:e2:98:4b:4b:43:
1d:3a:e4:a0:2a:17:78:c9:3e:4e:32:db:44:35:f8:87:d4:07:
f2:af:87:b2:54:a1:0b:55:cd:4f:a9:43:db:bc:a3:a9:fc:7d:
48:13:2b:d7:5d:da:b0:75:f4:ef:53:cc:ab:0d:e7:a1:63:a5:
64:55:06:d0:dd:08:ff:ec:be:b8:42:18:08:33:87:84:44:92:
de:a9:10:48:b9:55:9c:92:a2:10:72:20:8c:e2:f7:97:3a:ce:
4e:4d:06:16:65:78:f6:28:e3:30:c3:5b:f0:c5:c9:61:d8:00:
59:fc:fd:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVur9ghxGOhAvP8WpbLc1wkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTAxMTg1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjVlNTQ3MTc0ZmE0MjAxY2U4ZjM3YmMwNWYyZjQ3MDZkNzUwZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp12QtNRhq86uljnTaGqBWqukcAY
otzmL5lIWca2KC0rR3DLWI28+TC3SU0rsbNtEqjcUVMNlXfEGQqJjenDbOW2Cot4
uDOv3olFUgR338lWCaa8+0RSbuFnC1BUvNDPFcoDZsvnxjtt7Zv9PWXnxeuckPPI
w5zczwrFgfoEDQNe1sqI5I+7TPZYpZizzGniNt32TtTWLHQRJv5U3yDhd9szFhfb
fRBxoHBHpHNXhwIDGBSq4peInTKYpHL86zRxfPHNdTHYGtBdeG1qHv6DttQxaAeu
wBVLx2VGPSEeUN9Qm4s/tYWwj799JlvHOm/RWa8Ern1Cf1uLdvVgD4E4NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPJeVHF0+kIBzo83vAXy9HBtdQ10MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvOGw1VWNYVDZRZ0hPanplOEJmTDBjRzExRFhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCD0MA0G
CSqGSIb3DQEBCwUAA4IBAQCDlAlhKpZDM7S0sHlG4uU6wd4QHOMdvt6oktGP4Srn
yxKO2uFrdOIg8vCBxvs2+6kErDlaDJ00CyQv0US/czeOsOt8glV0YNNfz3xGtDWn
nO8mbCYFPVTPVtLe7hZ9ilf6Vs2MD16Q6BKa5Zke5kahY5aqF/Cf6/3BliOY3f+k
SNuUr8Gb0yE/zu+G4phLS0MdOuSgKhd4yT5OMttENfiH1Afyr4eyVKELVc1PqUPb
vKOp/H1IEyvXXdqwdfTvU8yrDeehY6VkVQbQ3Qj/7L64QhgIM4eERJLeqRBIuVWc
kqIQciCM4veXOs5OTQYWZXj2KOMww1vwxclh2ABZ/P0H
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org