Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Tgzy6C2BSAbugeF8SaKcze5Duks.roa
File: Tgzy6C2BSAbugeF8SaKcze5Duks.roa (raw, json)
Hash identifier: Tmt4b9ZLN838/siOGRFPmASszpY4CeV7a0VDJOntcrQ=
Subject key identifier: 4E:0C:F2:E8:2D:81:48:06:EE:81:E1:7C:49:A2:9C:CD:EE:43:BA:4B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01859A75A47BF28BF562131AB4EFC727B88E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Tgzy6C2BSAbugeF8SaKcze5Duks.roa
Signing time: Tue 10 Jan 2023 06:54:38 +0000
ROA not before: Tue 10 Jan 2023 06:54:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 88.216.212.0/22 maxlen: 24
84.32.252.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jan 2023 18:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:75:a4:7b:f2:8b:f5:62:13:1a:b4:ef:c7:27:b8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 10 06:54:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e0cf2e82d814806ee81e17c49a29ccdee43ba4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:6b:da:94:73:bd:e8:65:24:9f:9e:14:51:
6e:2d:47:14:a9:cd:e5:52:4d:f7:d7:97:65:d6:73:
2e:cb:47:fa:6d:46:29:8f:3e:82:e0:b4:2c:5d:81:
a3:d8:e5:c0:8f:92:15:c6:fd:c7:15:ff:10:2c:e2:
96:6b:0b:e8:98:03:4b:93:76:bc:9c:cc:1a:3b:f6:
30:a4:e5:57:50:b8:6f:e3:3b:6a:a6:ec:6b:9a:40:
a9:bb:fb:62:aa:e1:b8:02:0e:c2:80:a1:9f:cb:c4:
00:fe:3a:53:b7:56:18:fb:d5:f4:50:da:1a:cd:da:
03:6b:6b:19:61:b6:5e:5f:27:37:6e:f4:d5:10:55:
30:56:fd:27:13:ce:9a:fb:d1:ab:45:4d:a8:99:fb:
57:09:80:0b:1d:47:0e:3e:d3:57:8e:e9:d1:54:8e:
27:c7:84:8a:2e:bd:f5:64:ad:9e:3d:7a:9a:ca:99:
8f:fe:45:e8:87:3f:69:35:5c:4a:4e:c3:16:05:c3:
7b:ba:91:43:39:01:0d:37:6b:88:c8:7f:99:5f:5b:
5f:bd:3c:9a:a8:f2:f0:72:34:cb:eb:c9:2f:43:80:
13:be:9b:e3:79:14:f3:f7:46:36:bc:00:bb:9e:25:
4c:5c:cc:40:0c:bd:87:42:a3:c9:37:70:21:b4:ea:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0C:F2:E8:2D:81:48:06:EE:81:E1:7C:49:A2:9C:CD:EE:43:BA:4B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Tgzy6C2BSAbugeF8SaKcze5Duks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.252.0/23
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
64:7a:ea:54:33:d6:a7:4d:81:bf:45:c9:ba:6b:12:c6:10:10:
c2:4b:68:92:26:32:10:a8:07:13:15:d4:4c:d2:8a:71:72:40:
e6:7f:d2:86:c5:dc:f8:ea:95:67:0e:0b:2f:49:a6:b7:50:59:
4a:83:60:ba:e5:2b:48:fd:7e:ea:96:a9:41:a2:7d:6b:35:c1:
38:18:b3:32:1f:7f:72:27:d6:a7:96:6b:88:cc:d0:13:00:24:
f9:5d:39:b6:af:f9:43:1b:64:11:c1:ab:3f:c9:ad:46:11:a3:
39:36:d4:6f:9e:9b:e0:bc:e3:2e:4a:59:4a:61:37:18:51:23:
eb:6f:69:fa:0d:2d:30:6a:29:5c:fa:16:05:7e:18:3f:e6:4a:
b1:16:5f:7f:dd:47:12:77:0e:f4:63:6e:5b:03:a9:4b:f3:09:
0a:ec:8a:8e:59:48:82:ce:41:22:97:08:e7:ff:07:30:70:1b:
fa:77:36:fa:48:bf:f5:b5:be:77:07:e7:c7:7a:10:1d:44:73:
1b:fc:69:ce:a2:24:56:7a:0e:ad:1c:9e:97:cb:eb:86:a2:f5:
9e:67:49:a1:ef:95:0f:59:17:92:fe:a3:93:61:2a:4b:f4:23:
ee:72:d7:cf:d9:26:32:3b:23:18:d8:97:30:60:7f:e6:f0:8e:
66:74:7e:72
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWadaR78ov1YhMatO/HJ7iOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTEwMDY1NDM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTBjZjJlODJkODE0ODA2ZWU4MWUxN2M0OWEyOWNjZGVlNDNiYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk1r2pRzvehlJJ+eFFFuLUcUqc3l
Uk3315dl1nMuy0f6bUYpjz6C4LQsXYGj2OXAj5IVxv3HFf8QLOKWawvomANLk3a8
nMwaO/YwpOVXULhv4ztqpuxrmkCpu/tiquG4Ag7CgKGfy8QA/jpTt1YY+9X0UNoa
zdoDa2sZYbZeXyc3bvTVEFUwVv0nE86a+9GrRU2omftXCYALHUcOPtNXjunRVI4n
x4SKLr31ZK2ePXqaypmP/kXohz9pNVxKTsMWBcN7upFDOQENN2uIyH+ZX1tfvTya
qPLwcjTL68kvQ4ATvpvjeRTz90Y2vAC7niVMXMxADL2HQqPJN3AhtOpKawIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE4M8ugtgUgG7oHhfEminM3uQ7pLMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvVGd6eTZDMkJTQWJ1Z2VGOFNhS2N6ZTVEdWtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVCD8AwQC
WNjUMA0GCSqGSIb3DQEBCwUAA4IBAQBkeupUM9anTYG/Rcm6axLGEBDCS2iSJjIQ
qAcTFdRM0opxckDmf9KGxdz46pVnDgsvSaa3UFlKg2C65StI/X7qlqlBon1rNcE4
GLMyH39yJ9anlmuIzNATACT5XTm2r/lDG2QRwas/ya1GEaM5NtRvnpvgvOMuSllK
YTcYUSPrb2n6DS0wailc+hYFfhg/5kqxFl9/3UcSdw70Y25bA6lL8wkK7IqOWUiC
zkEilwjn/wcwcBv6dzb6SL/1tb53B+fHehAdRHMb/GnOoiRWeg6tHJ6Xy+uGovWe
Z0mh75UPWReS/qOTYSpL9CPuctfP2SYyOyMY2JcwYH/m8I5mdH5y
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org