Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f1Utjy9fq1X8hL1bGZwv4hmWyLA.roa
File: f1Utjy9fq1X8hL1bGZwv4hmWyLA.roa (raw, json)
Hash identifier: H+fGRf/jAWEy5AbDA+6vvdqG8MKAYbVNBq/l45rbGYU=
Subject key identifier: 7F:55:2D:8F:2F:5F:AB:55:FC:84:BD:5B:19:9C:2F:E2:19:96:C8:B0
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186261D731DF59572DCA1BDC608865B44A9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f1Utjy9fq1X8hL1bGZwv4hmWyLA.roa
Signing time: Mon 06 Feb 2023 09:45:09 +0000
ROA not before: Mon 06 Feb 2023 09:45:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43043
IP address blocks: 84.32.56.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.11.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:1d:73:1d:f5:95:72:dc:a1:bd:c6:08:86:5b:44:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 6 09:45:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f552d8f2f5fab55fc84bd5b199c2fe21996c8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:d0:98:f2:4b:af:1e:68:59:97:55:dd:4c:
6a:47:e7:6c:12:d4:20:13:4c:97:d1:ad:92:53:51:
4c:2f:b4:7b:6a:80:a0:08:58:6a:fa:90:d8:73:e6:
bb:bd:05:81:65:24:2e:83:95:3a:ab:9b:fb:f6:ba:
1e:35:a8:8b:ab:0a:54:a2:92:1a:c3:7a:68:25:09:
77:e5:a4:2d:d9:0f:d8:db:5e:28:9d:cc:43:3f:06:
90:42:00:ac:5a:39:8f:df:ca:e9:83:ab:d0:41:be:
87:61:37:5a:53:a0:bb:a7:79:27:8e:98:20:07:16:
ed:e8:b3:ba:98:81:db:db:e5:ad:e4:e6:a4:08:43:
90:68:a8:2e:5d:d2:8f:cc:58:27:f2:ae:21:b4:e7:
08:db:6d:8c:50:e8:70:ef:e9:42:b8:2b:46:01:60:
16:f0:05:ad:da:46:c8:51:63:c4:b0:1b:cd:d6:ca:
69:61:20:45:01:4a:b6:81:b7:be:b1:b8:65:71:fa:
f7:45:5d:c6:70:aa:b7:8e:27:99:28:42:0f:4c:93:
66:98:34:10:33:f6:b6:f9:71:cc:18:98:f5:e8:24:
ff:f2:92:4f:97:7b:69:ec:1b:e1:06:16:9e:6a:dd:
d0:4c:85:9e:39:e8:bd:bd:c5:ff:0b:97:9e:7c:5b:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:55:2D:8F:2F:5F:AB:55:FC:84:BD:5B:19:9C:2F:E2:19:96:C8:B0
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/f1Utjy9fq1X8hL1bGZwv4hmWyLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.11.0/24
84.32.31.0/24
84.32.46.0/24
84.32.56.0/24
84.32.61.0/24
84.32.67.0/24
84.32.83.0/24
84.32.107.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1b:b2:56:5c:83:4f:81:be:0b:3a:53:71:78:60:7d:c8:04:
60:d6:2a:08:8c:1a:cc:62:b7:54:d4:09:30:15:ff:ff:16:8d:
ed:84:c1:55:c0:00:b4:31:ce:39:29:14:1e:1f:5b:63:fe:b1:
e3:d9:fa:47:d2:25:1a:4f:0f:0c:62:b9:2b:34:f2:5e:a0:52:
fc:bf:6a:06:6e:f2:5e:ce:e2:f7:96:28:cc:c4:07:dc:7d:66:
c8:1b:08:16:e1:8b:10:6c:eb:a5:9f:9b:66:1c:8d:24:00:cf:
a6:3f:a5:44:75:ab:58:7d:33:d5:98:fd:87:01:12:99:d3:ec:
2d:e8:e3:96:fa:e8:93:a1:0e:f1:23:cc:64:d9:d4:93:91:84:
81:df:44:b0:e7:fa:04:e2:44:f1:82:2f:8e:3c:e1:29:40:91:
c9:86:02:6c:56:c2:d6:ea:e4:d8:3d:ea:8a:dc:6e:8c:61:fb:
3f:0e:c0:34:e7:b3:f2:1d:f8:96:ea:63:7f:cb:de:d6:b4:e4:
b3:a6:f8:04:36:8b:94:00:01:3e:0b:32:3c:5b:8b:b1:20:15:
6d:bd:54:ea:39:8c:24:ad:55:7d:d0:89:f7:fa:31:32:ba:52:
55:22:6e:43:0c:1d:b0:55:81:b6:b0:5a:9f:f8:48:78:c7:b6:
64:99:02:20
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYYmHXMd9ZVy3KG9xgiGW0SpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMjA2MDk0NTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjU1MmQ4ZjJmNWZhYjU1ZmM4NGJkNWIxOTljMmZlMjE5OTZjOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SrQmPJLrx5oWZdV3UxqR+dsEtQg
E0yX0a2SU1FML7R7aoCgCFhq+pDYc+a7vQWBZSQug5U6q5v79roeNaiLqwpUopIa
w3poJQl35aQt2Q/Y214oncxDPwaQQgCsWjmP38rpg6vQQb6HYTdaU6C7p3knjpgg
Bxbt6LO6mIHb2+Wt5OakCEOQaKguXdKPzFgn8q4htOcI222MUOhw7+lCuCtGAWAW
8AWt2kbIUWPEsBvN1sppYSBFAUq2gbe+sbhlcfr3RV3GcKq3jieZKEIPTJNmmDQQ
M/a2+XHMGJj16CT/8pJPl3tp7BvhBhaeat3QTIWeOei9vcX/C5eefFv9nwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFH9VLY8vX6tV/IS9WxmcL+IZlsiwMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvZjFVdGp5OWZxMVg4aEwxYkdad3Y0aG1XeUxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAVCALAwQA
VCAfAwQAVCAuAwQAVCA4AwQAVCA9AwQAVCBDAwQAVCBTAwQAVCBrMA0GCSqGSIb3
DQEBCwUAA4IBAQBHG7JWXINPgb4LOlNxeGB9yARg1ioIjBrMYrdU1AkwFf//Fo3t
hMFVwAC0Mc45KRQeH1tj/rHj2fpH0iUaTw8MYrkrNPJeoFL8v2oGbvJezuL3lijM
xAfcfWbIGwgW4YsQbOuln5tmHI0kAM+mP6VEdatYfTPVmP2HARKZ0+wt6OOW+uiT
oQ7xI8xk2dSTkYSB30Sw5/oE4kTxgi+OPOEpQJHJhgJsVsLW6uTYPeqK3G6MYfs/
DsA057PyHfiW6mN/y97WtOSzpvgENouUAAE+CzI8W4uxIBVtvVTqOYwkrVV90In3
+jEyulJVIm5DDB2wVYG2sFqf+Eh4x7ZkmQIg
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:31 2023 by rpki-client on console-ams.rpki-client.org