Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SZ-EGo2wvLA0Y_BBTC-D7U7taZY.roa
File: SZ-EGo2wvLA0Y_BBTC-D7U7taZY.roa (raw, json)
Hash identifier: ZP9hIFRT4t4X2yNsUSz2TbIYfk0sEOovM+S9UP0Ke9A=
Subject key identifier: 49:9F:84:1A:8D:B0:BC:B0:34:63:F0:41:4C:2F:83:ED:4E:ED:69:96
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B1D2F39220E5F5F9AA1A026C7C05F72D3
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SZ-EGo2wvLA0Y_BBTC-D7U7taZY.roa
Signing time: Wed 11 Oct 2023 05:21:55 +0000
ROA not before: Wed 11 Oct 2023 05:21:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60558
IP address blocks: 84.32.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:2f:39:22:0e:5f:5f:9a:a1:a0:26:c7:c0:5f:72:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 11 05:21:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=499f841a8db0bcb03463f0414c2f83ed4eed6996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:71:fb:d2:8f:e0:18:50:8d:71:bf:46:c9:7f:
b6:11:2d:cd:6f:df:bd:87:13:e3:51:a1:de:bd:1c:
ec:35:19:02:cb:53:50:56:09:48:ac:69:32:c8:65:
d1:4a:b4:e7:4f:95:77:52:53:76:26:ba:42:f1:9a:
e0:84:bf:6f:31:15:ec:c0:50:68:a9:16:bb:8d:8a:
c6:63:73:24:4f:f3:9f:1e:78:34:d7:73:6b:c1:ff:
08:7c:eb:cf:47:80:c4:9b:73:cc:12:b9:df:0f:dd:
98:d9:5a:ca:96:19:67:d9:10:f7:94:98:cc:f3:0d:
e6:a2:62:5a:65:06:2a:84:50:5d:d0:e1:7c:47:c8:
c6:98:26:eb:b3:5d:fb:7f:30:32:7f:e4:b3:69:e2:
d7:50:ba:1f:12:a1:7f:df:af:bb:50:6b:47:4d:40:
7a:27:76:d8:44:49:8b:7c:39:47:b3:44:32:87:f6:
5b:2e:4d:b4:ce:45:5a:69:ed:ec:71:5b:cc:a4:aa:
cc:e8:ce:0c:d5:f7:a2:75:4e:e8:ab:25:0e:c0:74:
47:a1:cd:4d:76:ea:02:1d:a3:cd:a9:52:bc:62:eb:
18:21:f2:4d:77:db:bb:e1:72:9c:f9:68:be:bd:1b:
6c:9d:47:6e:1c:1f:7b:29:26:c9:b7:6c:c5:c4:54:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9F:84:1A:8D:B0:BC:B0:34:63:F0:41:4C:2F:83:ED:4E:ED:69:96
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SZ-EGo2wvLA0Y_BBTC-D7U7taZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:01:b3:e3:7f:2f:26:ad:43:9e:f4:f8:a1:68:50:a2:94:d1:
73:ce:1d:88:96:4f:cd:7e:cd:af:7e:ff:b2:8c:ba:ba:91:48:
bd:f3:0c:3c:04:6f:6a:8a:a8:10:28:9d:bc:5a:21:0e:8a:4b:
5c:ba:25:59:76:5c:bb:ce:4c:00:b6:45:40:c1:5e:53:49:8f:
6a:7a:ca:c6:b3:c7:5a:cc:11:68:05:46:be:14:7b:91:10:10:
ca:52:fd:12:06:0d:f1:c9:a8:18:88:d0:73:7b:59:98:35:e3:
f9:18:6f:7c:d2:33:2d:9e:1f:d5:2b:a8:9e:71:37:83:7d:09:
18:9c:98:4d:82:05:61:8b:9d:81:91:96:20:cd:02:c2:6c:ac:
4e:f4:ec:01:b8:24:e9:ab:4d:21:f5:a0:d8:0b:89:3c:83:d6:
7b:a8:ca:f6:5c:94:f7:0a:10:77:fe:e5:0d:d9:bf:69:d1:df:
35:aa:fe:00:20:11:42:9f:64:f3:df:4f:49:4e:c6:1e:f9:67:
30:20:61:cf:11:87:09:c1:7e:99:1d:b7:a5:4e:58:8e:ca:1e:
87:6c:95:e8:73:ca:df:a7:ca:9a:06:27:f5:01:bd:cc:9d:4f:
28:d7:48:63:e9:bc:86:39:ee:17:82:61:40:61:fd:41:02:5f:
0d:e7:9a:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsdLzkiDl9fmqGgJsfAX3LTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMDExMDUyMTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTlmODQxYThkYjBiY2IwMzQ2M2YwNDE0YzJmODNlZDRlZWQ2OTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXH70o/gGFCNcb9GyX+2ES3Nb9+9
hxPjUaHevRzsNRkCy1NQVglIrGkyyGXRSrTnT5V3UlN2JrpC8ZrghL9vMRXswFBo
qRa7jYrGY3MkT/OfHng013Nrwf8IfOvPR4DEm3PMErnfD92Y2VrKlhln2RD3lJjM
8w3momJaZQYqhFBd0OF8R8jGmCbrs137fzAyf+SzaeLXULofEqF/36+7UGtHTUB6
J3bYREmLfDlHs0Qyh/ZbLk20zkVaae3scVvMpKrM6M4M1feidU7oqyUOwHRHoc1N
duoCHaPNqVK8YusYIfJNd9u74XKc+Wi+vRtsnUduHB97KSbJt2zFxFRAmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEmfhBqNsLywNGPwQUwvg+1O7WmWMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvU1otRUdvMnd2TEEwWV9CQlRDLUQ3VTd0YVpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCCxMA0G
CSqGSIb3DQEBCwUAA4IBAQCgAbPjfy8mrUOe9PihaFCilNFzzh2Ilk/Nfs2vfv+y
jLq6kUi98ww8BG9qiqgQKJ28WiEOiktcuiVZdly7zkwAtkVAwV5TSY9qesrGs8da
zBFoBUa+FHuREBDKUv0SBg3xyagYiNBze1mYNeP5GG980jMtnh/VK6iecTeDfQkY
nJhNggVhi52BkZYgzQLCbKxO9OwBuCTpq00h9aDYC4k8g9Z7qMr2XJT3ChB3/uUN
2b9p0d81qv4AIBFCn2Tz309JTsYe+WcwIGHPEYcJwX6ZHbelTliOyh6HbJXoc8rf
p8qaBif1Ab3MnU8o10hj6byGOe4XgmFAYf1BAl8N55r9
-----END CERTIFICATE-----
Generated at Fri Nov 10 07:03:17 2023 by rpki-client on console-ams.rpki-client.org