Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9210lB2IxTVfQ-ttoMuTpeFdKxk.roa
File: 9210lB2IxTVfQ-ttoMuTpeFdKxk.roa (raw, json)
Hash identifier: GS40pSoecqVMMH3hS7QJIjYIYxGCzIhHzR2tezQiw5E=
Subject key identifier: F7:6D:74:94:1D:88:C5:35:5F:43:EB:6D:A0:CB:93:A5:E1:5D:2B:19
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186FF14063997C635CCE739B317A33E8814
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9210lB2IxTVfQ-ttoMuTpeFdKxk.roa
Signing time: Mon 20 Mar 2023 12:52:27 +0000
ROA not before: Mon 20 Mar 2023 12:52:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 84.32.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Mar 2023 18:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:14:06:39:97:c6:35:cc:e7:39:b3:17:a3:3e:88:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 20 12:52:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f76d74941d88c5355f43eb6da0cb93a5e15d2b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:10:e0:e8:c8:a1:6b:1d:b5:7b:4d:3b:c9:d3:
af:a6:ac:e5:0f:b3:a8:f7:86:6b:50:21:e8:d4:c9:
8c:3d:77:41:bb:7a:77:3c:cb:a3:2d:cc:0f:ec:e1:
07:b7:03:c4:66:c4:76:65:68:86:1f:1a:45:6a:0f:
55:1e:fc:0b:c2:6d:78:2a:43:af:98:0a:7a:61:90:
8f:9c:0b:05:58:50:d5:f8:e0:39:25:bb:f2:e5:f0:
63:0c:09:35:82:f2:d1:ce:f5:6b:00:54:c9:45:b9:
ad:92:a7:17:46:b1:2f:21:00:f6:d2:8d:c4:8f:18:
9b:97:43:de:ff:a5:ae:1c:12:65:27:3e:fd:f9:8f:
48:14:2b:4d:dd:2b:9b:1f:36:33:65:ae:1d:69:62:
09:11:d2:f3:8b:d1:75:4c:e7:ae:6d:c9:00:91:8c:
c8:17:7e:9f:b9:15:1a:2a:da:0c:d8:74:22:2e:64:
22:3b:67:62:d6:e1:40:0f:0d:44:77:6c:a6:bc:21:
75:81:10:5f:40:d5:dc:51:7c:57:cb:05:19:53:9a:
c4:eb:b5:aa:24:7c:69:52:7c:2f:8e:8d:20:b3:2e:
32:45:b1:19:81:a6:23:f0:f5:46:13:9e:e4:a6:aa:
0e:2a:94:c9:92:08:7c:d8:f8:46:df:48:77:a1:83:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6D:74:94:1D:88:C5:35:5F:43:EB:6D:A0:CB:93:A5:E1:5D:2B:19
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9210lB2IxTVfQ-ttoMuTpeFdKxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.229.0/24
Signature Algorithm: sha256WithRSAEncryption
84:41:01:71:64:6d:6b:46:d7:f8:5b:95:bd:90:84:ba:7c:42:
27:6c:a2:15:75:f5:c6:11:14:47:2e:b3:9c:47:8f:5d:a6:56:
0f:60:03:9d:5b:81:a4:de:c5:ea:86:22:be:6f:c3:2f:74:d5:
e7:f2:58:29:bc:f4:d1:c1:99:ad:39:94:9b:09:f9:58:22:64:
2c:2c:3d:ed:1e:4a:ab:1b:c3:af:aa:19:ee:cc:24:6b:3d:72:
c7:c1:a3:d8:ee:05:75:82:3c:70:95:3c:cb:59:a3:c2:cf:19:
33:b2:94:c1:a6:d6:ef:00:9d:f9:14:b4:31:87:c3:2d:eb:90:
04:d9:e1:28:8b:d2:0b:96:f5:a2:50:1f:91:e7:2c:d4:35:f0:
65:87:5d:95:59:94:86:85:38:b5:f9:2d:d6:0a:5a:a6:88:c8:
8a:13:24:6e:4b:99:d4:22:ab:dd:e3:13:89:1d:95:f3:88:17:
98:93:20:32:98:00:c5:18:24:5a:b1:4e:09:cc:35:50:a1:f0:
4e:24:83:10:a6:b6:37:50:37:9c:bd:69:29:64:dc:ff:43:4f:
87:73:44:12:ce:6f:aa:23:5b:cd:8b:73:f2:f1:5f:cf:29:8a:
ca:87:15:b8:f4:57:a7:12:3f:a1:e1:d4:41:c3:4e:67:a2:04:
25:a8:cb:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYb/FAY5l8Y1zOc5sxejPogUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMzIwMTI1MjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzZkNzQ5NDFkODhjNTM1NWY0M2ViNmRhMGNiOTNhNWUxNWQyYjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBDg6Mihax21e007ydOvpqzlD7Oo
94ZrUCHo1MmMPXdBu3p3PMujLcwP7OEHtwPEZsR2ZWiGHxpFag9VHvwLwm14KkOv
mAp6YZCPnAsFWFDV+OA5Jbvy5fBjDAk1gvLRzvVrAFTJRbmtkqcXRrEvIQD20o3E
jxibl0Pe/6WuHBJlJz79+Y9IFCtN3SubHzYzZa4daWIJEdLzi9F1TOeubckAkYzI
F36fuRUaKtoM2HQiLmQiO2di1uFADw1Ed2ymvCF1gRBfQNXcUXxXywUZU5rE67Wq
JHxpUnwvjo0gsy4yRbEZgaYj8PVGE57kpqoOKpTJkgh82PhG30h3oYNC7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPdtdJQdiMU1X0PrbaDLk6XhXSsZMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvOTIxMGxCMkl4VFZmUS10dG9NdVRwZUZkS3hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCDlMA0G
CSqGSIb3DQEBCwUAA4IBAQCEQQFxZG1rRtf4W5W9kIS6fEInbKIVdfXGERRHLrOc
R49dplYPYAOdW4Gk3sXqhiK+b8MvdNXn8lgpvPTRwZmtOZSbCflYImQsLD3tHkqr
G8OvqhnuzCRrPXLHwaPY7gV1gjxwlTzLWaPCzxkzspTBptbvAJ35FLQxh8Mt65AE
2eEoi9ILlvWiUB+R5yzUNfBlh12VWZSGhTi1+S3WClqmiMiKEyRuS5nUIqvd4xOJ
HZXziBeYkyAymADFGCRasU4JzDVQofBOJIMQprY3UDecvWkpZNz/Q0+Hc0QSzm+q
I1vNi3Py8V/PKYrKhxW49FenEj+h4dRBw05nogQlqMsx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org