Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Tt5X_A2iivwcFqC3z9iX21cezR4.roa
File: Tt5X_A2iivwcFqC3z9iX21cezR4.roa (raw, json)
Hash identifier: 3XKk6/b/YSecS5t7mvTlBahINTvuAEXPRcSqQlHXzCw=
Subject key identifier: 4E:DE:57:FC:0D:A2:8A:FC:1C:16:A0:B7:CF:D8:97:DB:57:1E:CD:1E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A899BE6BAA8667D6FB07BFE032E7C6B27
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Tt5X_A2iivwcFqC3z9iX21cezR4.roa
Signing time: Tue 12 Sep 2023 13:36:50 +0000
ROA not before: Tue 12 Sep 2023 13:36:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 84.32.67.0/24 maxlen: 24
88.216.240.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 14:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:9b:e6:ba:a8:66:7d:6f:b0:7b:fe:03:2e:7c:6b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 12 13:36:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ede57fc0da28afc1c16a0b7cfd897db571ecd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:23:e2:b2:96:3b:05:f8:3f:87:7b:93:16:
8b:87:58:a3:e4:5f:c3:80:1d:31:75:52:cf:d8:16:
95:f8:76:d6:02:32:e7:36:b8:46:65:75:05:11:03:
96:ae:3b:4e:af:03:df:71:1d:9a:f1:07:95:0b:e6:
cc:ea:be:3a:dc:ce:1e:15:96:7a:cc:af:0a:af:95:
0c:76:66:a1:0f:e9:b8:fc:93:ba:f4:03:bc:b7:f3:
7f:be:0a:2a:bf:9e:35:56:5a:a4:38:f8:cb:96:16:
a2:c7:af:9c:2a:24:78:82:d2:df:1d:77:33:00:4b:
cd:4d:b8:d7:06:bf:d1:a1:b8:d3:f2:93:88:db:af:
34:73:93:23:36:17:c5:56:70:2a:f3:fa:a1:09:88:
75:37:93:a1:bf:53:21:ff:35:e0:04:47:83:81:f9:
28:26:16:a8:0e:66:65:ea:99:ca:37:42:a0:67:d5:
07:fc:9e:a1:06:df:7b:89:dd:20:30:da:3e:af:0b:
71:50:b5:96:38:78:f3:9d:81:e2:81:76:3b:ca:62:
d6:30:3d:3d:03:e9:f3:9b:7d:de:a1:74:07:da:ac:
4f:79:fc:7e:45:06:77:0f:a7:2d:b7:11:71:f4:7b:
e4:c5:7c:da:de:ec:42:4b:e3:12:86:72:bb:a0:f6:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DE:57:FC:0D:A2:8A:FC:1C:16:A0:B7:CF:D8:97:DB:57:1E:CD:1E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Tt5X_A2iivwcFqC3z9iX21cezR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.67.0/24
88.216.240.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:ad:ab:c7:75:8f:65:c9:1f:c7:79:e4:e3:2d:b2:5e:a0:28:
07:bf:39:a0:67:cf:1e:ae:83:b0:6d:0a:2b:e6:8f:c6:a7:4f:
af:95:14:ae:43:13:4d:66:5c:7a:84:34:91:f4:b3:a8:c7:ff:
c2:00:d4:43:e1:55:89:a1:9f:07:91:c0:2d:0d:ec:47:f5:11:
e4:75:49:bc:40:99:5a:57:91:ff:c0:e8:a5:2e:55:0d:ef:c6:
52:f5:4e:85:2a:11:31:8a:cd:43:f8:8b:24:66:9b:12:e7:4e:
dd:ff:0b:cb:bf:04:5c:94:34:34:e6:da:24:75:94:29:de:6b:
1f:aa:b2:53:73:da:f3:ba:1a:b6:11:20:b7:bc:88:3c:73:12:
08:91:2f:85:f2:59:cb:f9:25:4e:1d:b7:6e:be:bf:1a:64:8f:
17:06:0c:88:c1:0e:99:7c:b4:01:01:43:2c:31:9c:1b:ca:be:
24:1f:3e:ff:18:11:d4:97:7c:89:c2:20:d2:b9:60:33:61:0d:
94:e7:4a:dd:cd:d6:9a:69:2e:4c:0d:0f:56:5c:fb:e6:f6:ea:
04:0a:37:0d:2b:48:a9:78:97:52:ec:3a:12:70:26:1b:56:03:
6f:9d:80:1c:81:a0:d8:3a:be:01:e3:e5:70:c7:67:0d:9a:aa:
27:3b:ff:08
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqJm+a6qGZ9b7B7/gMufGsnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwOTEyMTMzNjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWRlNTdmYzBkYTI4YWZjMWMxNmEwYjdjZmQ4OTdkYjU3MWVjZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUwj4rKWOwX4P4d7kxaLh1ij5F/D
gB0xdVLP2BaV+HbWAjLnNrhGZXUFEQOWrjtOrwPfcR2a8QeVC+bM6r463M4eFZZ6
zK8Kr5UMdmahD+m4/JO69AO8t/N/vgoqv541VlqkOPjLlhaix6+cKiR4gtLfHXcz
AEvNTbjXBr/RobjT8pOI2680c5MjNhfFVnAq8/qhCYh1N5Ohv1Mh/zXgBEeDgfko
JhaoDmZl6pnKN0KgZ9UH/J6hBt97id0gMNo+rwtxULWWOHjznYHigXY7ymLWMD09
A+nzm33eoXQH2qxPefx+RQZ3D6cttxFx9HvkxXza3uxCS+MShnK7oPYUwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE7eV/wNoor8HBagt8/Yl9tXHs0eMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvVHQ1WF9BMmlpdndjRnFDM3o5aVgyMWNlelI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCBDAwQD
WNjwMA0GCSqGSIb3DQEBCwUAA4IBAQB+ravHdY9lyR/HeeTjLbJeoCgHvzmgZ88e
roOwbQor5o/Gp0+vlRSuQxNNZlx6hDSR9LOox//CANRD4VWJoZ8HkcAtDexH9RHk
dUm8QJlaV5H/wOilLlUN78ZS9U6FKhExis1D+IskZpsS507d/wvLvwRclDQ05tok
dZQp3msfqrJTc9rzuhq2ESC3vIg8cxIIkS+F8lnL+SVOHbduvr8aZI8XBgyIwQ6Z
fLQBAUMsMZwbyr4kHz7/GBHUl3yJwiDSuWAzYQ2U50rdzdaaaS5MDQ9WXPvm9uoE
CjcNK0ipeJdS7DoScCYbVgNvnYAcgaDYOr4B4+Vwx2cNmqonO/8I
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org