Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_YQgXppF2-B8cD8_D5t9tPixqQM.roa
File: _YQgXppF2-B8cD8_D5t9tPixqQM.roa (raw, json)
Hash identifier: rfFY9U3M2KIooPmoxv6EBkLkT92bXz6eNzXvvdsbgTw=
Subject key identifier: FD:84:20:5E:9A:45:DB:E0:7C:70:3F:3F:0F:9B:7D:B4:F8:B1:A9:03
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189181024543014B2C4F5FF8A7A3D0FDB95
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_YQgXppF2-B8cD8_D5t9tPixqQM.roa
Signing time: Sun 02 Jul 2023 19:24:18 +0000
ROA not before: Sun 02 Jul 2023 19:24:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 84.32.208.0/23 maxlen: 24
84.32.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 05:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:18:10:24:54:30:14:b2:c4:f5:ff:8a:7a:3d:0f:db:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 2 19:24:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd84205e9a45dbe07c703f3f0f9b7db4f8b1a903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:16:e8:a1:c9:72:db:8c:7d:42:16:e1:47:
39:00:bb:62:30:d0:bd:dd:2d:ef:37:4c:e3:6c:93:
a5:ce:fe:dd:65:6e:35:22:b4:8d:86:26:40:84:10:
5a:45:2d:64:08:46:1e:c7:ce:5f:ce:82:f9:cf:d9:
d3:9a:78:bb:77:d1:b9:4c:b6:b8:df:fe:ca:9f:39:
fe:c0:96:60:08:f1:2a:2b:cc:3a:6e:94:5d:30:2d:
f3:69:2d:92:cf:83:41:51:b1:87:96:d5:23:1e:ea:
3b:d5:03:8c:06:aa:ca:f2:d5:5e:34:9f:b2:a6:5f:
ea:b6:8f:40:ab:ec:97:f8:49:40:d7:10:24:ff:a4:
ea:c2:3d:f8:de:8d:54:e6:2d:19:39:1e:0d:bd:d8:
49:bb:16:f5:e7:ad:38:c6:ea:0d:a4:3b:d8:38:bd:
9c:30:45:0e:91:4f:51:61:4b:93:db:2e:e7:b6:da:
7c:f4:fd:1a:13:ed:a2:49:bc:65:8a:2e:d6:2b:b2:
d3:55:80:8c:10:44:55:f2:dd:ba:6d:f6:83:03:d6:
22:24:c2:a6:3f:19:c4:77:87:7a:06:81:35:e8:43:
79:63:1c:3d:b7:bb:9f:f5:1e:f0:7b:b7:5f:ba:ad:
ee:bd:04:b7:f8:7f:86:54:d0:f7:a5:9c:04:23:13:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:84:20:5E:9A:45:DB:E0:7C:70:3F:3F:0F:9B:7D:B4:F8:B1:A9:03
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_YQgXppF2-B8cD8_D5t9tPixqQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.27.0/24
84.32.208.0/23
Signature Algorithm: sha256WithRSAEncryption
76:6c:f9:52:57:3c:de:07:9e:dc:a1:72:e2:a3:03:24:af:8b:
f2:03:d4:04:69:f8:70:55:93:57:41:52:60:bf:ed:d5:7b:c3:
bd:66:f4:4b:d7:c4:90:37:49:38:d0:29:d9:46:2f:eb:14:52:
2a:10:1a:31:f6:a9:0b:75:22:f3:6b:9b:18:92:0c:53:e4:fe:
e5:ea:66:4e:9b:e8:73:07:7c:a7:01:27:bf:b5:c0:27:c1:04:
0a:05:52:a7:93:39:d0:7c:37:58:ce:60:95:ca:4d:26:bc:f9:
62:2e:e8:33:7e:d8:33:b0:42:c4:50:31:4b:86:d5:40:1d:e8:
b2:50:6b:22:15:73:b9:77:10:7c:f5:0e:6e:7a:0f:df:83:8b:
12:cc:56:46:9c:70:03:8d:f9:7b:6f:8e:86:91:93:f3:2f:de:
dd:1a:98:9a:fa:fb:fe:23:a0:12:58:7b:8c:72:eb:bf:fb:1a:
4c:8f:ee:60:a1:05:a8:5d:85:de:e7:4e:41:e5:14:bf:35:de:
c1:79:5e:df:32:09:4c:d6:cb:57:14:a4:21:bf:d5:6f:b2:76:
36:45:dc:6f:7e:dd:a0:79:92:f5:8d:0d:a7:d0:d3:0f:46:d4:
6f:b2:94:8d:f7:f5:d2:98:9e:6f:6b:82:6e:4b:1f:dd:ff:32:
b7:29:93:89
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkYECRUMBSyxPX/ino9D9uVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNzAyMTkyNDE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDg0MjA1ZTlhNDVkYmUwN2M3MDNmM2YwZjliN2RiNGY4YjFhOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYYW6KHJctuMfUIW4Uc5ALtiMNC9
3S3vN0zjbJOlzv7dZW41IrSNhiZAhBBaRS1kCEYex85fzoL5z9nTmni7d9G5TLa4
3/7Knzn+wJZgCPEqK8w6bpRdMC3zaS2Sz4NBUbGHltUjHuo71QOMBqrK8tVeNJ+y
pl/qto9Aq+yX+ElA1xAk/6Tqwj343o1U5i0ZOR4NvdhJuxb15604xuoNpDvYOL2c
MEUOkU9RYUuT2y7nttp89P0aE+2iSbxlii7WK7LTVYCMEERV8t26bfaDA9YiJMKm
PxnEd4d6BoE16EN5Yxw9t7uf9R7we7dfuq3uvQS3+H+GVND3pZwEIxNebQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP2EIF6aRdvgfHA/Pw+bfbT4sakDMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvX1lRZ1hwcEYyLUI4Y0Q4X0Q1dDl0UGl4cVFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCAbAwQB
VCDQMA0GCSqGSIb3DQEBCwUAA4IBAQB2bPlSVzzeB57coXLiowMkr4vyA9QEafhw
VZNXQVJgv+3Ve8O9ZvRL18SQN0k40CnZRi/rFFIqEBox9qkLdSLza5sYkgxT5P7l
6mZOm+hzB3ynASe/tcAnwQQKBVKnkznQfDdYzmCVyk0mvPliLugzftgzsELEUDFL
htVAHeiyUGsiFXO5dxB89Q5ueg/fg4sSzFZGnHADjfl7b46GkZPzL97dGpia+vv+
I6ASWHuMcuu/+xpMj+5goQWoXYXe505B5RS/Nd7BeV7fMglM1stXFKQhv9VvsnY2
Rdxvft2geZL1jQ2n0NMPRtRvspSN9/XSmJ5va4JuSx/d/zK3KZOJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org