Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SHUBxdapL6Um-8rJBGd_DV5CUfU.roa
File: SHUBxdapL6Um-8rJBGd_DV5CUfU.roa (raw, json)
Hash identifier: gLifJkGpPCzjv7r+dupeMA2gi1PqlVL7oUkDXjHwxAc=
Subject key identifier: 48:75:01:C5:D6:A9:2F:A5:26:FB:CA:C9:04:67:7F:0D:5E:42:51:F5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01865B4C628F488758565A3C7ED7DC8CE933
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SHUBxdapL6Um-8rJBGd_DV5CUfU.roa
Signing time: Thu 16 Feb 2023 17:36:17 +0000
ROA not before: Thu 16 Feb 2023 17:36:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 84.32.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Apr 2023 13:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5b:4c:62:8f:48:87:58:56:5a:3c:7e:d7:dc:8c:e9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 16 17:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=487501c5d6a92fa526fbcac904677f0d5e4251f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:3a:01:7f:1e:c6:6f:ab:d7:eb:ba:3c:8e:
5c:1f:6b:df:6e:92:c9:f6:09:fc:15:2e:48:18:0f:
54:e2:cb:41:47:cb:e3:37:07:b1:95:73:02:fc:21:
bd:c9:90:4c:4f:eb:ad:72:40:b9:e1:74:b2:e0:05:
2c:25:f9:f9:bf:ee:50:9e:10:e6:42:37:c9:62:1e:
f7:56:a0:7d:6a:54:c1:5f:03:0e:c0:02:b7:26:44:
6a:5a:bc:84:f2:19:dc:df:38:25:86:1a:30:5f:5b:
f0:d3:28:e4:98:17:fe:5c:08:86:12:f6:6d:82:4c:
d3:65:4c:4d:c7:9c:ca:a2:fc:99:f6:b8:03:a3:f2:
fd:a8:46:76:11:5a:4e:14:96:82:5e:cb:df:65:08:
7d:b7:e2:21:36:b9:38:12:4e:88:f3:14:4e:29:f4:
a0:ef:d0:f7:6f:70:5c:e3:1a:2a:0e:a7:2a:37:41:
62:c8:72:52:c0:29:02:bb:4a:33:7b:09:ac:11:40:
b1:77:6d:6c:89:f1:c3:ae:11:e7:61:cc:27:7d:41:
83:12:ed:25:02:af:39:2f:aa:0d:d0:62:60:4f:35:
9c:64:92:eb:bf:e9:53:6b:51:1e:39:e9:d7:2b:b7:
47:94:e3:79:70:22:59:da:47:ac:53:26:ac:17:b1:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:75:01:C5:D6:A9:2F:A5:26:FB:CA:C9:04:67:7F:0D:5E:42:51:F5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SHUBxdapL6Um-8rJBGd_DV5CUfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.231.0/24
Signature Algorithm: sha256WithRSAEncryption
93:87:27:81:4f:7c:1b:11:c9:57:9b:0c:5c:c5:25:86:92:2c:
85:07:0d:ee:e7:4c:62:9f:e4:72:f3:fe:26:3f:5a:37:69:1b:
43:03:6d:c6:cc:b6:7b:b7:d8:da:14:a1:1d:24:9d:24:2c:92:
25:44:49:17:8c:3d:55:c1:e5:6c:08:2c:b2:c1:4d:5b:75:b2:
c5:09:13:9d:25:ef:79:60:bc:d1:c0:5b:20:64:c9:c6:2d:7f:
07:3c:5f:51:bf:6c:ba:14:e0:d3:d4:3b:86:be:0b:9d:0f:fc:
5a:bb:53:d4:5f:d5:20:01:36:39:ce:11:63:0e:8a:7c:20:83:
78:c2:a9:ae:b0:78:52:cb:6a:9d:66:e9:e7:67:f3:48:d8:16:
1b:6c:82:cc:d2:fb:07:ff:67:6f:53:c9:ff:d4:72:8d:02:2d:
ff:2d:48:77:e6:dd:5a:9d:91:39:d8:6d:4e:78:5b:b9:2a:1e:
f7:36:fe:36:b7:a2:b8:92:e1:ce:19:16:18:1f:6e:47:d6:a7:
ab:39:ec:07:ec:e8:3d:31:c1:54:19:4c:5f:14:ff:58:e3:16:
2a:ce:a5:52:4c:d4:43:c3:6d:a5:63:db:eb:c7:98:09:33:22:
ad:73:bd:04:2e:10:47:cf:61:99:4f:82:52:1d:52:72:1b:82:
8f:8a:0e:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZbTGKPSIdYVlo8ftfcjOkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMjE2MTczNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODc1MDFjNWQ2YTkyZmE1MjZmYmNhYzkwNDY3N2YwZDVlNDI1MWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HY6AX8exm+r1+u6PI5cH2vfbpLJ
9gn8FS5IGA9U4stBR8vjNwexlXMC/CG9yZBMT+utckC54XSy4AUsJfn5v+5QnhDm
QjfJYh73VqB9alTBXwMOwAK3JkRqWryE8hnc3zglhhowX1vw0yjkmBf+XAiGEvZt
gkzTZUxNx5zKovyZ9rgDo/L9qEZ2EVpOFJaCXsvfZQh9t+IhNrk4Ek6I8xROKfSg
79D3b3Bc4xoqDqcqN0FiyHJSwCkCu0ozewmsEUCxd21sifHDrhHnYcwnfUGDEu0l
Aq85L6oN0GJgTzWcZJLrv+lTa1EeOenXK7dHlON5cCJZ2kesUyasF7F7twIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEh1AcXWqS+lJvvKyQRnfw1eQlH1MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvU0hVQnhkYXBMNlVtLThySkJHZF9EVjVDVWZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCDnMA0G
CSqGSIb3DQEBCwUAA4IBAQCThyeBT3wbEclXmwxcxSWGkiyFBw3u50xin+Ry8/4m
P1o3aRtDA23GzLZ7t9jaFKEdJJ0kLJIlREkXjD1VweVsCCyywU1bdbLFCROdJe95
YLzRwFsgZMnGLX8HPF9Rv2y6FODT1DuGvgudD/xau1PUX9UgATY5zhFjDop8IIN4
wqmusHhSy2qdZunnZ/NI2BYbbILM0vsH/2dvU8n/1HKNAi3/LUh35t1anZE52G1O
eFu5Kh73Nv42t6K4kuHOGRYYH25H1qerOewH7Og9McFUGUxfFP9Y4xYqzqVSTNRD
w22lY9vrx5gJMyKtc70ELhBHz2GZT4JSHVJyG4KPig7g
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org