Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Yv99YDB14UbAhnc-eieIsgntv_8.roa
File: Yv99YDB14UbAhnc-eieIsgntv_8.roa (raw, json)
Hash identifier: jYc5QVcuxyXSLz827MMNVbXt56l7r0q0xVsMsruZtJE=
Subject key identifier: 62:FF:7D:60:30:75:E1:46:C0:86:77:3E:7A:27:88:B2:09:ED:BF:FF
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01886E54662785DDE7B551D84C9C5E42CE8C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Yv99YDB14UbAhnc-eieIsgntv_8.roa
Signing time: Tue 30 May 2023 20:23:24 +0000
ROA not before: Tue 30 May 2023 20:23:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 84.32.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jul 2023 19:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6e:54:66:27:85:dd:e7:b5:51:d8:4c:9c:5e:42:ce:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 30 20:23:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62ff7d603075e146c086773e7a2788b209edbfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8c:62:63:87:ae:6e:70:12:12:b7:8c:84:a0:
7e:2c:77:e7:22:08:7f:e1:e6:23:80:c1:05:c0:d3:
c0:db:7e:96:a6:16:d0:25:7f:e3:c8:5a:a7:a2:64:
86:e1:17:95:53:59:92:1e:97:12:a7:bf:d4:fa:5f:
a4:50:f2:c0:30:c7:53:fc:41:6f:f7:b3:01:75:ec:
7f:aa:dc:c4:0b:38:a2:bc:8a:a7:57:72:25:7b:bb:
df:20:b2:8f:2a:7d:19:80:5f:38:30:8d:bf:9c:dc:
17:f4:cc:76:b6:ba:d3:d6:30:bd:10:4e:6b:3c:4a:
d6:81:f0:e3:93:5f:e8:e7:65:c5:b8:e1:6c:60:41:
b7:87:32:5e:be:17:6a:9d:96:73:bf:d9:8a:4d:71:
fb:36:8c:4b:a2:96:0b:36:cb:f6:76:f1:41:c0:ac:
5d:9b:01:cb:15:3c:15:7b:2b:18:8f:08:fb:e9:7f:
fb:96:54:78:5a:0d:1f:43:eb:77:41:c3:0a:67:d5:
93:e6:cd:55:c0:43:a6:f2:82:04:e2:f0:70:3b:67:
96:5d:d2:1e:c6:82:08:11:f2:4c:70:36:6b:9b:23:
c0:82:a6:40:bd:91:c5:fc:86:c8:fc:d1:86:60:d4:
f2:14:be:2e:49:2c:43:32:c5:a1:74:bd:97:3e:ba:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:7D:60:30:75:E1:46:C0:86:77:3E:7A:27:88:B2:09:ED:BF:FF
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Yv99YDB14UbAhnc-eieIsgntv_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ac:51:f2:41:3b:03:44:b7:0f:92:ed:de:8b:10:74:5c:c2:
86:71:48:29:5f:a3:2f:4e:49:35:35:17:51:39:dd:90:e2:ca:
e8:74:67:a9:5c:30:23:0d:ce:e5:de:56:8c:d8:bd:5c:30:6b:
2c:07:1d:db:b8:25:5d:bf:90:92:b1:8a:0d:55:eb:9b:02:60:
ff:cb:d0:e6:77:4d:20:40:fd:cb:22:9d:bd:0e:03:27:80:f5:
ca:0b:61:00:7e:04:61:1b:ed:56:f5:aa:07:cd:77:57:7f:0d:
ee:04:ad:c1:38:dd:f3:19:62:36:71:a3:ee:87:ac:66:42:ae:
cb:31:71:ac:19:4e:eb:dc:77:4b:e6:cc:ed:41:45:30:fd:89:
c8:61:95:b5:af:6d:b6:8e:89:17:fc:fb:2d:ab:fe:9b:6d:37:
8f:8d:1d:6d:2d:59:24:ea:ca:15:d2:db:4d:b7:21:6b:40:d6:
84:56:8a:3f:66:44:62:7a:9a:3f:db:1c:95:47:61:16:ad:78:
0f:31:3d:19:18:7b:bb:79:93:a8:ac:e4:86:bf:cb:2d:81:a0:
40:3a:cf:24:83:86:c6:d4:35:e4:47:23:27:5b:e4:18:ee:0e:
b6:4d:7d:9f:b3:09:49:8c:c9:a6:87:c2:79:42:64:d7:55:ef:
ab:dd:65:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhuVGYnhd3ntVHYTJxeQs6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNTMwMjAyMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmZmN2Q2MDMwNzVlMTQ2YzA4Njc3M2U3YTI3ODhiMjA5ZWRiZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYxiY4eubnASEreMhKB+LHfnIgh/
4eYjgMEFwNPA236WphbQJX/jyFqnomSG4ReVU1mSHpcSp7/U+l+kUPLAMMdT/EFv
97MBdex/qtzECziivIqnV3Ile7vfILKPKn0ZgF84MI2/nNwX9Mx2trrT1jC9EE5r
PErWgfDjk1/o52XFuOFsYEG3hzJevhdqnZZzv9mKTXH7NoxLopYLNsv2dvFBwKxd
mwHLFTwVeysYjwj76X/7llR4Wg0fQ+t3QcMKZ9WT5s1VwEOm8oIE4vBwO2eWXdIe
xoIIEfJMcDZrmyPAgqZAvZHF/IbI/NGGYNTyFL4uSSxDMsWhdL2XPrpwAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGL/fWAwdeFGwIZ3PnoniLIJ7b//MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvWXY5OVlEQjE0VWJBaG5jLWVpZUlzZ250dl84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCAWMA0G
CSqGSIb3DQEBCwUAA4IBAQA+rFHyQTsDRLcPku3eixB0XMKGcUgpX6MvTkk1NRdR
Od2Q4srodGepXDAjDc7l3laM2L1cMGssBx3buCVdv5CSsYoNVeubAmD/y9Dmd00g
QP3LIp29DgMngPXKC2EAfgRhG+1W9aoHzXdXfw3uBK3BON3zGWI2caPuh6xmQq7L
MXGsGU7r3HdL5sztQUUw/YnIYZW1r222jokX/Pstq/6bbTePjR1tLVkk6soV0ttN
tyFrQNaEVoo/ZkRiepo/2xyVR2EWrXgPMT0ZGHu7eZOorOSGv8stgaBAOs8kg4bG
1DXkRyMnW+QY7g62TX2fswlJjMmmh8J5QmTXVe+r3WVW
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org