Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MPf-p_zVVfAZrlSpk4yqsA31BcE.roa
File: MPf-p_zVVfAZrlSpk4yqsA31BcE.roa (raw, json)
Hash identifier: QFjkREvWHKK1y6v3iBBxGHaiC2zLXQafamg0EIlWIKg=
Subject key identifier: 30:F7:FE:A7:FC:D5:55:F0:19:AE:54:A9:93:8C:AA:B0:0D:F5:05:C1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018644A8091B5392CF7909CC97928DC97B04
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MPf-p_zVVfAZrlSpk4yqsA31BcE.roa
Signing time: Sun 12 Feb 2023 08:05:08 +0000
ROA not before: Sun 12 Feb 2023 08:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 84.32.40.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:44:a8:09:1b:53:92:cf:79:09:cc:97:92:8d:c9:7b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 12 08:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30f7fea7fcd555f019ae54a9938caab00df505c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:b7:77:6c:97:f7:f8:e5:46:85:e5:cd:34:
12:e7:89:bd:64:e4:94:0f:a4:23:8f:65:3c:65:5a:
55:89:0f:de:91:ea:97:1a:c8:52:29:4b:9c:b6:4b:
43:7f:1f:37:3a:6d:da:6a:76:6f:79:59:e0:3b:e7:
bb:26:90:8c:69:af:9c:f4:a8:2b:7c:09:47:ce:7e:
5c:b3:42:c1:11:cf:a3:28:78:be:91:54:a7:fa:3d:
c4:32:a2:fe:a3:32:76:e8:b1:61:ba:c7:b4:fa:be:
24:40:06:ea:b8:bb:ae:ee:1c:22:54:31:1f:6c:e5:
db:c8:5c:4c:11:ba:c3:0d:7e:3b:fa:76:a5:91:57:
c9:34:3a:b7:cf:41:a8:c8:b4:13:b3:e4:ca:be:83:
c5:fb:8a:3a:e6:09:5e:da:26:86:a8:a3:1f:67:b3:
ce:c4:32:5d:b1:50:dd:6d:c4:1f:2e:9f:94:0f:a6:
07:b3:78:91:31:b5:e1:71:6a:1c:eb:e5:79:29:54:
01:b3:56:67:2a:c1:5c:cc:a0:cd:17:3b:cf:9b:23:
ad:2a:cc:f7:6c:db:65:7d:cb:d7:41:ed:4e:40:47:
d1:c5:66:57:de:f7:f3:05:d9:e2:44:87:69:18:7c:
6e:22:4c:31:45:6f:34:54:c0:cb:79:5b:d3:a3:1b:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F7:FE:A7:FC:D5:55:F0:19:AE:54:A9:93:8C:AA:B0:0D:F5:05:C1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MPf-p_zVVfAZrlSpk4yqsA31BcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.40.0/24
88.216.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:62:18:66:1e:84:78:28:58:8c:88:5f:62:e5:cb:2a:e2:f1:
5d:49:72:41:fd:6f:46:c5:71:cd:93:c5:8b:3c:6f:bc:f8:8d:
d6:60:5c:45:77:97:3e:92:a8:ea:7c:a1:02:28:82:2a:18:cf:
08:93:1e:46:e2:4d:4d:2d:b5:02:b3:0d:33:3b:3a:07:bc:46:
f6:75:1f:73:f9:bf:d6:c7:d9:c6:75:63:60:a6:3b:fa:87:56:
a1:c8:63:56:26:32:b4:83:06:ef:7b:e4:b4:62:95:b3:e9:44:
c8:7c:f8:00:9f:b3:4e:7b:1f:8e:8b:d4:d9:58:ab:36:63:33:
37:d9:4e:b6:60:11:6d:37:5b:9d:d2:33:11:89:2b:36:be:ed:
29:a7:5a:4b:aa:ba:5c:22:c4:4e:e2:b8:16:9e:73:6b:b4:b2:
b2:10:69:df:1a:bc:89:3a:4e:c0:df:bf:e0:44:f5:a0:45:24:
a1:05:1b:d7:0c:3d:d4:ba:94:f3:70:9b:62:7b:f4:65:9b:2a:
21:2a:f4:76:bb:ca:a8:a8:fd:a9:48:23:5e:c9:ee:53:46:ea:
93:56:ce:87:b7:a8:17:67:65:44:d8:e3:c3:d4:ea:b4:d2:c8:
a5:db:60:95:77:e0:d3:39:87:49:5d:02:09:6b:50:73:0a:90:
2a:86:0b:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZEqAkbU5LPeQnMl5KNyXsEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMjEyMDgwNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGY3ZmVhN2ZjZDU1NWYwMTlhZTU0YTk5MzhjYWFiMDBkZjUwNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4e3d2yX9/jlRoXlzTQS54m9ZOSU
D6Qjj2U8ZVpViQ/ekeqXGshSKUuctktDfx83Om3aanZveVngO+e7JpCMaa+c9Kgr
fAlHzn5cs0LBEc+jKHi+kVSn+j3EMqL+ozJ26LFhuse0+r4kQAbquLuu7hwiVDEf
bOXbyFxMEbrDDX47+nalkVfJNDq3z0GoyLQTs+TKvoPF+4o65gle2iaGqKMfZ7PO
xDJdsVDdbcQfLp+UD6YHs3iRMbXhcWoc6+V5KVQBs1ZnKsFczKDNFzvPmyOtKsz3
bNtlfcvXQe1OQEfRxWZX3vfzBdniRIdpGHxuIkwxRW80VMDLeVvToxt9WwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDD3/qf81VXwGa5UqZOMqrAN9QXBMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvTVBmLXBfelZWZkFacmxTcGs0eXFzQTMxQmNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCAoAwQA
WNgpMA0GCSqGSIb3DQEBCwUAA4IBAQB9YhhmHoR4KFiMiF9i5csq4vFdSXJB/W9G
xXHNk8WLPG+8+I3WYFxFd5c+kqjqfKECKIIqGM8Ikx5G4k1NLbUCsw0zOzoHvEb2
dR9z+b/Wx9nGdWNgpjv6h1ahyGNWJjK0gwbve+S0YpWz6UTIfPgAn7NOex+Oi9TZ
WKs2YzM32U62YBFtN1ud0jMRiSs2vu0pp1pLqrpcIsRO4rgWnnNrtLKyEGnfGryJ
Ok7A37/gRPWgRSShBRvXDD3UupTzcJtie/RlmyohKvR2u8qoqP2pSCNeye5TRuqT
Vs6Ht6gXZ2VE2OPD1Oq00sil22CVd+DTOYdJXQIJa1BzCpAqhgsd
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:29 2023 by rpki-client on console-ams.rpki-client.org