Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GYYgyA3UrXlJi8fP9cmJn8wIGNs.roa
File: GYYgyA3UrXlJi8fP9cmJn8wIGNs.roa (raw, json)
Hash identifier: E31/x7CiMhcplUn0dmrUaxrriU74ZMBSxrMTJyjQOq0=
Subject key identifier: 19:86:20:C8:0D:D4:AD:79:49:8B:C7:CF:F5:C9:89:9F:CC:08:18:DB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018BB7DCBAEA85918D59DFDED02BFC041DEA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GYYgyA3UrXlJi8fP9cmJn8wIGNs.roa
Signing time: Fri 10 Nov 2023 06:12:58 +0000
ROA not before: Fri 10 Nov 2023 06:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 84.32.176.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b7:dc:ba:ea:85:91:8d:59:df:de:d0:2b:fc:04:1d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 10 06:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=198620c80dd4ad79498bc7cff5c9899fcc0818db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c6:e4:39:95:0b:bc:48:0d:1b:49:ae:04:04:
23:c1:f7:2c:dd:5c:db:de:ba:64:2f:69:4e:02:16:
3d:4a:cc:f1:e1:cb:73:08:f1:ff:eb:fe:76:7b:d9:
18:e0:cd:17:63:65:95:06:fa:ca:b5:14:0a:31:3f:
53:88:6c:a7:d6:e0:9f:b3:12:a7:75:2f:63:3e:d2:
76:c9:5c:e3:3a:73:1f:f7:cf:ae:66:4e:0c:f0:42:
c6:cb:93:4b:ad:b6:c9:ae:28:41:a5:64:b6:25:74:
7a:a7:eb:13:1e:26:dc:5a:19:77:bd:4e:73:f8:60:
c9:b0:ff:9b:88:d5:f4:26:db:cb:0a:fc:07:10:eb:
86:01:a3:8f:8e:09:9f:14:21:cd:c7:8e:10:81:b7:
7d:f6:1e:4e:92:21:6e:27:1a:83:1e:4d:7f:de:56:
22:62:2e:58:0b:2f:d0:51:8f:6b:2a:82:07:ee:8a:
35:96:4d:fc:4d:20:5e:2a:ac:d4:ae:db:5e:7c:28:
28:80:98:69:9c:30:32:ac:f4:a2:5d:27:62:d6:a3:
5f:a3:3c:42:4a:d8:ba:5b:88:66:17:2e:1b:c2:4d:
ad:b2:0e:06:71:00:7c:15:fd:72:35:2a:35:df:21:
29:73:85:3f:a6:b2:5a:16:6b:6c:88:9a:27:36:33:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:20:C8:0D:D4:AD:79:49:8B:C7:CF:F5:C9:89:9F:CC:08:18:DB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GYYgyA3UrXlJi8fP9cmJn8wIGNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.9.0/24
84.32.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:bd:0d:bf:64:14:c7:ca:aa:d3:62:84:b8:64:33:85:87:40:
8a:06:4a:af:46:29:94:15:ae:25:22:61:03:30:4c:75:91:77:
4d:79:66:38:b4:18:aa:8c:b6:a2:dd:8b:ce:bf:77:eb:a6:e7:
77:7f:30:8a:e5:94:13:e2:86:27:4a:0d:8e:09:19:c0:24:91:
e4:71:6c:0b:47:9a:1d:0a:9e:ec:95:f1:ae:1d:71:68:0c:48:
8e:7c:2d:f6:5f:5c:52:64:49:98:f3:83:85:e4:22:d1:48:23:
79:21:f2:72:64:c1:2d:cf:a7:de:79:b4:11:f0:29:8b:2b:08:
47:43:3d:ca:e1:aa:b7:ba:34:1a:7a:a0:9b:6f:40:81:90:ca:
12:be:1a:48:30:fe:a4:23:c6:1e:fa:66:d1:de:0b:33:5f:de:
04:59:42:eb:5f:bb:7a:b5:76:f3:5f:d0:bd:a9:6e:ed:32:d0:
8b:8f:e3:00:c2:c6:ee:64:9d:bb:de:07:57:6e:53:db:98:e9:
1d:0d:c7:6c:fb:65:5c:86:8e:5f:04:11:2e:08:c8:92:71:51:
97:8e:84:b5:4d:97:48:1e:aa:7c:3c:a8:ba:19:ad:03:66:c3:
3b:f1:21:ea:7a:b0:30:97:41:32:96:cd:a5:c4:9e:fd:34:35:
4a:10:e5:04
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYu33LrqhZGNWd/e0Cv8BB3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMTEwMDYxMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTg2MjBjODBkZDRhZDc5NDk4YmM3Y2ZmNWM5ODk5ZmNjMDgxOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsbkOZULvEgNG0muBAQjwfcs3Vzb
3rpkL2lOAhY9Sszx4ctzCPH/6/52e9kY4M0XY2WVBvrKtRQKMT9TiGyn1uCfsxKn
dS9jPtJ2yVzjOnMf98+uZk4M8ELGy5NLrbbJrihBpWS2JXR6p+sTHibcWhl3vU5z
+GDJsP+biNX0JtvLCvwHEOuGAaOPjgmfFCHNx44Qgbd99h5OkiFuJxqDHk1/3lYi
Yi5YCy/QUY9rKoIH7oo1lk38TSBeKqzUrttefCgogJhpnDAyrPSiXSdi1qNfozxC
Sti6W4hmFy4bwk2tsg4GcQB8Ff1yNSo13yEpc4U/prJaFmtsiJonNjMlgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBmGIMgN1K15SYvHz/XJiZ/MCBjbMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvR1lZZ3lBM1VyWGxKaThmUDljbUpuOHdJR05zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCAJAwQA
VCCwMA0GCSqGSIb3DQEBCwUAA4IBAQAOvQ2/ZBTHyqrTYoS4ZDOFh0CKBkqvRimU
Fa4lImEDMEx1kXdNeWY4tBiqjLai3YvOv3frpud3fzCK5ZQT4oYnSg2OCRnAJJHk
cWwLR5odCp7slfGuHXFoDEiOfC32X1xSZEmY84OF5CLRSCN5IfJyZMEtz6feebQR
8CmLKwhHQz3K4aq3ujQaeqCbb0CBkMoSvhpIMP6kI8Ye+mbR3gszX94EWULrX7t6
tXbzX9C9qW7tMtCLj+MAwsbuZJ273gdXblPbmOkdDcds+2Vcho5fBBEuCMiScVGX
joS1TZdIHqp8PKi6Ga0DZsM78SHqerAwl0Eyls2lxJ79NDVKEOUE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org