Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TWdR_FRZGN8I5DyU_BQuXE-egQ4.roa
File: TWdR_FRZGN8I5DyU_BQuXE-egQ4.roa (raw, json)
Hash identifier: WShT/vtRgvgKYF7JsFqfIpAswRsaLcU1qQFBa10RYak=
Subject key identifier: 4D:67:51:FC:54:59:18:DF:08:E4:3C:94:FC:14:2E:5C:4F:9E:81:0E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B5B73C78F847CE8B2C8AC658C13C115E0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TWdR_FRZGN8I5DyU_BQuXE-egQ4.roa
Signing time: Mon 23 Oct 2023 07:33:16 +0000
ROA not before: Mon 23 Oct 2023 07:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 84.32.176.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:73:c7:8f:84:7c:e8:b2:c8:ac:65:8c:13:c1:15:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 23 07:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d6751fc545918df08e43c94fc142e5c4f9e810e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:55:3a:42:73:b5:bc:8b:14:e1:9f:4e:71:
cb:2a:e1:8e:4b:23:2a:e2:72:c7:9c:db:0f:9b:94:
2d:07:76:98:74:22:d6:c6:41:93:4d:41:58:ff:2b:
ed:c6:a1:08:54:19:53:b8:8f:f0:68:2c:f5:ed:1e:
30:5e:e7:33:c8:cb:7a:c8:79:2e:81:13:2a:9e:5f:
e8:1e:12:8f:c1:37:e5:00:5e:6b:cb:4e:a9:2e:8e:
ee:52:15:c2:5a:c0:af:23:7a:e8:7f:d2:a6:51:f1:
cc:d2:c1:61:e4:30:16:fb:c2:ae:9f:1d:1d:15:1b:
09:a9:f2:9f:ac:64:f3:ea:38:eb:70:a6:5d:9a:75:
be:d0:77:5b:5f:3e:15:ab:9e:f9:10:6f:a1:28:68:
8b:6e:1c:7f:2a:e2:dc:6b:1c:59:56:16:c8:c8:9d:
38:5f:e3:5d:3b:3e:12:5b:86:0d:89:6e:3e:e5:12:
e9:c9:af:46:5d:ec:67:34:d1:e6:7f:e6:33:0c:43:
57:09:19:76:4a:dd:0f:22:13:79:80:b4:60:e0:60:
6d:6c:24:7b:5e:50:93:a9:29:8f:83:96:9e:80:bb:
b7:16:6d:ba:6d:b9:33:d1:15:7c:31:da:f2:ff:74:
c0:3a:b9:ba:b1:52:98:58:24:0d:c2:17:73:e5:c3:
27:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:67:51:FC:54:59:18:DF:08:E4:3C:94:FC:14:2E:5C:4F:9E:81:0E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TWdR_FRZGN8I5DyU_BQuXE-egQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.9.0/24
84.32.176.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:6a:eb:b6:6d:0e:9c:96:dd:c8:fd:2c:5c:3d:b2:4c:93:9b:
3f:18:12:e3:79:73:26:7d:4b:19:a4:52:ad:50:9e:8b:d4:38:
6b:21:eb:49:ae:be:74:40:46:0c:a4:64:68:1a:fe:50:90:d5:
5c:02:7b:66:b5:a0:66:aa:c5:f0:0e:70:04:36:73:03:e4:d3:
ff:dd:e6:ed:14:e0:58:e0:d8:fc:18:d3:80:48:ba:51:19:37:
95:d6:30:11:98:69:9b:83:8a:9d:f0:f9:45:1e:58:6f:99:72:
7b:f0:91:1a:5a:ce:fc:87:9a:3e:de:54:ed:51:2a:59:ab:58:
08:6a:00:3b:46:7a:38:05:70:2c:26:45:8d:01:f2:80:7e:db:
4f:82:8f:9e:28:28:c5:e4:4e:88:b2:2c:f7:d8:33:1b:06:6e:
11:7e:76:19:1a:07:db:fc:88:5c:e4:10:9b:67:e3:99:1a:d0:
e7:f7:f3:a8:78:9c:45:66:12:ac:55:ae:d1:a2:e1:47:ae:82:
df:39:a6:10:e8:02:10:70:58:4f:22:7d:9b:25:ae:5c:5a:9f:
ba:43:b9:d2:7f:5e:59:fe:2f:40:16:d7:9b:61:7c:12:83:eb:
36:ed:3e:81:6f:95:7c:28:ba:be:2b:1f:26:ea:d0:1e:df:ab:
09:14:ce:e2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtbc8ePhHzossisZYwTwRXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMDIzMDczMzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDY3NTFmYzU0NTkxOGRmMDhlNDNjOTRmYzE0MmU1YzRmOWU4MTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7dVOkJztbyLFOGfTnHLKuGOSyMq
4nLHnNsPm5QtB3aYdCLWxkGTTUFY/yvtxqEIVBlTuI/waCz17R4wXuczyMt6yHku
gRMqnl/oHhKPwTflAF5ry06pLo7uUhXCWsCvI3rof9KmUfHM0sFh5DAW+8Kunx0d
FRsJqfKfrGTz6jjrcKZdmnW+0HdbXz4Vq575EG+hKGiLbhx/KuLcaxxZVhbIyJ04
X+NdOz4SW4YNiW4+5RLpya9GXexnNNHmf+YzDENXCRl2St0PIhN5gLRg4GBtbCR7
XlCTqSmPg5aegLu3Fm26bbkz0RV8Mdry/3TAOrm6sVKYWCQNwhdz5cMnEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE1nUfxUWRjfCOQ8lPwULlxPnoEOMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvVFdkUl9GUlpHTjhJNUR5VV9CUXVYRS1lZ1E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCAJAwQB
VCCwMA0GCSqGSIb3DQEBCwUAA4IBAQA/auu2bQ6clt3I/SxcPbJMk5s/GBLjeXMm
fUsZpFKtUJ6L1DhrIetJrr50QEYMpGRoGv5QkNVcAntmtaBmqsXwDnAENnMD5NP/
3ebtFOBY4Nj8GNOASLpRGTeV1jARmGmbg4qd8PlFHlhvmXJ78JEaWs78h5o+3lTt
USpZq1gIagA7Rno4BXAsJkWNAfKAfttPgo+eKCjF5E6Isiz32DMbBm4RfnYZGgfb
/Ihc5BCbZ+OZGtDn9/OoeJxFZhKsVa7RouFHroLfOaYQ6AIQcFhPIn2bJa5cWp+6
Q7nSf15Z/i9AFtebYXwSg+s27T6Bb5V8KLq+Kx8m6tAe36sJFM7i
-----END CERTIFICATE-----
Generated at Fri Nov 10 07:03:17 2023 by rpki-client on console-ams.rpki-client.org