Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/K_RZNo-BORPQMQhPiqJDqKvAk-Q.roa
File: K_RZNo-BORPQMQhPiqJDqKvAk-Q.roa (raw, json)
Hash identifier: O30U9/dDgZ2gS1f0x2rRE0CyooYewUj+IvWWHj0eOAw=
Subject key identifier: 2B:F4:59:36:8F:81:39:13:D0:31:08:4F:8A:A2:43:A8:AB:C0:93:E4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFBA28AE66B5FD84D5BC3F1D178992
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/K_RZNo-BORPQMQhPiqJDqKvAk-Q.roa
Signing time: Sun 01 Jan 2023 18:54:48 +0000
ROA not before: Sun 01 Jan 2023 18:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 84.32.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:ba:28:ae:66:b5:fd:84:d5:bc:3f:1d:17:89:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bf459368f813913d031084f8aa243a8abc093e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:59:e7:e2:64:f7:38:7b:9c:49:8f:82:fc:
88:7e:c4:0a:e1:b0:b2:07:c5:3b:72:44:63:67:3f:
f5:d1:94:1a:91:9c:95:40:95:fd:5c:ad:8b:b6:66:
d8:5f:86:8a:97:ac:ea:bc:99:be:b7:f2:08:84:7c:
7d:05:0d:9c:90:7e:e3:2e:a1:d6:44:f6:5d:e4:4b:
eb:c0:89:5f:2b:19:1e:5a:15:ee:0d:ff:0a:57:8e:
93:91:3a:5a:41:3a:97:dc:de:40:6a:27:fd:72:83:
d4:71:4c:5f:14:44:ac:61:a6:54:01:0d:4c:a9:2c:
4f:5c:66:3a:f9:9c:45:02:2b:2f:91:18:64:4f:1f:
26:ff:b8:b0:e5:71:23:81:ff:19:29:50:7a:70:55:
16:99:1d:7d:be:f1:8d:fd:48:58:a0:b3:65:73:9f:
5a:2d:a4:2f:2e:fe:44:26:c2:22:37:d7:4e:5b:ba:
49:b9:b5:df:17:cb:3d:f9:92:10:f4:63:63:d0:90:
2d:34:e9:5a:85:42:f2:e3:d9:ae:1b:de:16:99:79:
f9:28:ad:78:d7:83:06:47:0c:e8:ad:5e:b2:d9:04:
03:7c:cb:75:43:dc:3a:59:bb:7a:70:c1:5e:91:d3:
f4:81:8a:67:ed:dc:41:09:02:37:6e:bf:bf:3a:8e:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F4:59:36:8F:81:39:13:D0:31:08:4F:8A:A2:43:A8:AB:C0:93:E4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/K_RZNo-BORPQMQhPiqJDqKvAk-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b3:bd:4b:48:81:84:a5:64:73:87:bd:41:4d:6e:52:54:6a:
7f:ad:8d:c2:d9:0f:23:e6:8c:05:fb:7c:23:e1:7c:07:85:b4:
6f:76:5c:40:a2:09:fe:4e:6e:a0:31:74:cf:29:c2:51:80:ee:
ca:26:03:46:e1:b0:2f:02:ed:1d:44:3b:2b:a0:65:9a:3f:12:
cb:a6:17:d9:c3:e7:4d:dd:45:8c:95:59:60:d7:27:b7:c2:34:
42:64:3b:3f:cb:09:08:0d:89:9d:8a:78:a1:b7:60:7b:17:e5:
0c:93:af:a9:e5:86:fe:87:75:1f:70:33:63:ef:08:bd:de:25:
ec:cf:62:01:df:01:4c:b4:9b:89:e0:64:0d:31:7a:25:ed:cf:
8d:d2:e0:42:2d:eb:1d:c2:3c:c1:3e:2c:8b:3b:ac:a4:b9:06:
97:3b:f0:62:a2:82:27:de:70:53:fe:31:18:86:7b:ca:e0:22:
dc:d8:c5:ed:17:55:14:4f:bd:f5:e6:55:54:dc:72:85:5d:c5:
04:b7:c3:01:f4:b2:00:47:71:8b:ed:74:f4:f8:f5:e8:5c:f6:
8b:dc:e8:ab:a1:3b:36:ce:25:03:a6:ff:f5:8f:a6:d4:9b:52:
57:59:ec:0f:d9:04:4a:89:96:c0:e4:40:16:f2:5a:d4:76:27:
85:8e:ed:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVur7oorma1/YTVvD8dF4mSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTAxMTg1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmY0NTkzNjhmODEzOTEzZDAzMTA4NGY4YWEyNDNhOGFiYzA5M2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjNZ5+Jk9zh7nEmPgvyIfsQK4bCy
B8U7ckRjZz/10ZQakZyVQJX9XK2LtmbYX4aKl6zqvJm+t/IIhHx9BQ2ckH7jLqHW
RPZd5EvrwIlfKxkeWhXuDf8KV46TkTpaQTqX3N5Aaif9coPUcUxfFESsYaZUAQ1M
qSxPXGY6+ZxFAisvkRhkTx8m/7iw5XEjgf8ZKVB6cFUWmR19vvGN/UhYoLNlc59a
LaQvLv5EJsIiN9dOW7pJubXfF8s9+ZIQ9GNj0JAtNOlahULy49muG94WmXn5KK14
14MGRwzorV6y2QQDfMt1Q9w6Wbt6cMFekdP0gYpn7dxBCQI3br+/Oo5xdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCv0WTaPgTkT0DEIT4qiQ6irwJPkMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvS19SWk5vLUJPUlBRTVFoUGlxSkRxS3ZBay1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCAPMA0G
CSqGSIb3DQEBCwUAA4IBAQCgs71LSIGEpWRzh71BTW5SVGp/rY3C2Q8j5owF+3wj
4XwHhbRvdlxAogn+Tm6gMXTPKcJRgO7KJgNG4bAvAu0dRDsroGWaPxLLphfZw+dN
3UWMlVlg1ye3wjRCZDs/ywkIDYmdiniht2B7F+UMk6+p5Yb+h3UfcDNj7wi93iXs
z2IB3wFMtJuJ4GQNMXol7c+N0uBCLesdwjzBPiyLO6ykuQaXO/BiooIn3nBT/jEY
hnvK4CLc2MXtF1UUT7315lVU3HKFXcUEt8MB9LIAR3GL7XT0+PXoXPaL3OiroTs2
ziUDpv/1j6bUm1JXWewP2QRKiZbA5EAW8lrUdieFju2O
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:29 2023 by rpki-client on console-ams.rpki-client.org