Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Vl8DE8PWdeIieUX6cPqVW3l5XJc.roa
File: Vl8DE8PWdeIieUX6cPqVW3l5XJc.roa (raw, json)
Hash identifier: UrX7HsWCURMzVhTsaREcq9rT2Nknvga9kzCoo5K8Fx0=
Subject key identifier: 56:5F:03:13:C3:D6:75:E2:22:79:45:FA:70:FA:95:5B:79:79:5C:97
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189AAD3FCAC5951E2F48AD6B84BE0E4EB25
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Vl8DE8PWdeIieUX6cPqVW3l5XJc.roa
Signing time: Mon 31 Jul 2023 07:22:46 +0000
ROA not before: Mon 31 Jul 2023 07:22:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 84.32.56.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Jul 2023 07:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:d3:fc:ac:59:51:e2:f4:8a:d6:b8:4b:e0:e4:eb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 31 07:22:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=565f0313c3d675e2227945fa70fa955b79795c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:64:00:b4:dc:c9:0a:b0:f5:dd:f3:41:b4:
4a:c0:7f:6f:40:77:99:f7:b0:33:24:34:0d:f6:24:
64:de:6a:2b:1a:15:f0:6b:69:17:41:67:88:bc:f6:
d3:b8:b5:51:b5:c3:c7:f1:5e:cd:67:91:b5:ed:61:
4d:d5:36:9f:4d:89:ca:b2:dd:51:5a:23:68:c4:e2:
cf:49:c6:35:20:bb:12:9b:85:5e:e3:bb:51:92:10:
18:de:79:87:06:20:1d:c3:f1:e0:07:0f:03:c5:b4:
6c:8d:7e:10:20:0f:58:74:2d:32:1e:06:21:db:4c:
2f:53:a9:13:9d:f2:50:fa:c7:0e:54:7f:e0:c9:08:
be:89:8e:df:52:be:64:67:da:ca:18:58:33:4c:6c:
96:9f:b1:d6:37:4d:4a:fc:ff:de:16:b9:2c:f9:3d:
55:4b:9a:04:af:22:f2:55:fb:1b:c5:4e:76:56:4d:
46:7c:44:cc:95:17:bb:e7:8a:e4:f8:0a:7f:a2:b8:
6c:f2:89:bd:d6:39:53:46:c1:b1:fa:84:f2:7d:b7:
88:5f:a6:67:e2:8c:56:2b:1e:5e:49:4b:76:14:7b:
35:7d:25:c8:79:0e:ee:8e:f6:c4:50:bc:36:e3:05:
ee:75:6a:48:dc:2f:05:75:bb:3a:a3:76:eb:04:92:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5F:03:13:C3:D6:75:E2:22:79:45:FA:70:FA:95:5B:79:79:5C:97
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Vl8DE8PWdeIieUX6cPqVW3l5XJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.42.0/24
84.32.56.0/24
84.32.64.0/23
84.32.68.0/24
84.32.92.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:24:3e:33:c6:f8:09:e7:01:48:6e:e5:8c:63:b2:34:78:12:
4a:3e:27:ba:eb:ab:7b:4b:7c:6c:41:0f:94:0c:e0:3b:22:f2:
11:2d:10:11:67:31:94:52:8f:f8:c7:6b:57:f8:30:a0:22:66:
2b:ba:6e:cc:8b:ca:27:16:c9:7a:0c:5b:e9:ae:d7:64:85:ce:
56:85:e0:b6:33:8c:91:67:5c:c0:5b:47:da:4d:c9:9b:45:2e:
96:02:12:95:98:c6:78:6e:4a:24:9b:8c:11:47:93:2c:99:48:
e4:5a:0b:88:39:4d:d8:49:38:ba:8b:75:a6:0a:42:80:1c:3d:
ac:2f:40:06:24:5d:ee:93:07:1e:09:1f:9c:22:39:22:fd:fd:
8a:3c:9e:99:fc:0c:6b:fa:fe:a9:d8:d3:18:7c:46:a7:5c:fa:
ab:1b:75:98:1a:68:b1:bf:e1:a6:f9:19:0f:de:9c:52:33:09:
84:04:f8:40:38:8c:e6:a0:17:d0:8a:54:f0:94:64:4a:ae:7c:
9f:b0:6d:ed:2e:ae:29:31:a8:d0:5c:62:85:d2:f3:b8:38:6c:
c2:1b:2d:e9:2b:29:32:0a:a4:32:75:6c:cb:f4:79:23:55:81:
02:de:a5:8b:9a:d6:cc:73:6d:b2:1b:48:4e:a5:24:59:ab:f7:
4d:cb:c2:f8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYmq0/ysWVHi9IrWuEvg5OslMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNzMxMDcyMjQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjVmMDMxM2MzZDY3NWUyMjI3OTQ1ZmE3MGZhOTU1Yjc5Nzk1Yzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2glkALTcyQqw9d3zQbRKwH9vQHeZ
97AzJDQN9iRk3morGhXwa2kXQWeIvPbTuLVRtcPH8V7NZ5G17WFN1TafTYnKst1R
WiNoxOLPScY1ILsSm4Ve47tRkhAY3nmHBiAdw/HgBw8DxbRsjX4QIA9YdC0yHgYh
20wvU6kTnfJQ+scOVH/gyQi+iY7fUr5kZ9rKGFgzTGyWn7HWN01K/P/eFrks+T1V
S5oEryLyVfsbxU52Vk1GfETMlRe754rk+Ap/orhs8om91jlTRsGx+oTyfbeIX6Zn
4oxWKx5eSUt2FHs1fSXIeQ7ujvbEULw24wXudWpI3C8Fdbs6o3brBJKclQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFZfAxPD1nXiInlF+nD6lVt5eVyXMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvVmw4REU4UFdkZUlpZVVYNmNQcVZXM2w1WEpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVCAqAwQA
VCA4AwQBVCBAAwQAVCBEAwQAVCBcMA0GCSqGSIb3DQEBCwUAA4IBAQCPJD4zxvgJ
5wFIbuWMY7I0eBJKPie666t7S3xsQQ+UDOA7IvIRLRARZzGUUo/4x2tX+DCgImYr
um7Mi8onFsl6DFvprtdkhc5WheC2M4yRZ1zAW0faTcmbRS6WAhKVmMZ4bkokm4wR
R5MsmUjkWguIOU3YSTi6i3WmCkKAHD2sL0AGJF3ukwceCR+cIjki/f2KPJ6Z/Axr
+v6p2NMYfEanXPqrG3WYGmixv+Gm+RkP3pxSMwmEBPhAOIzmoBfQilTwlGRKrnyf
sG3tLq4pMajQXGKF0vO4OGzCGy3pKykyCqQydWzL9HkjVYEC3qWLmtbMc22yG0hO
pSRZq/dNy8L4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org