Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jLU5rIlCIbs7U47iyQ0YjpMHvi4.roa
File: jLU5rIlCIbs7U47iyQ0YjpMHvi4.roa (raw, json)
Hash identifier: PIsl+2vwsx5oQ/O271J01rOwMAPsta8VJ6TAc/52D7o=
Subject key identifier: 8C:B5:39:AC:89:42:21:BB:3B:53:8E:E2:C9:0D:18:8E:93:07:BE:2E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186076D0DBD868BB7807D7F972A8B4E401A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jLU5rIlCIbs7U47iyQ0YjpMHvi4.roa
Signing time: Tue 31 Jan 2023 10:43:52 +0000
ROA not before: Tue 31 Jan 2023 10:43:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.184.0/22 maxlen: 24
84.32.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 13 Feb 2023 07:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:6d:0d:bd:86:8b:b7:80:7d:7f:97:2a:8b:4e:40:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 31 10:43:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cb539ac894221bb3b538ee2c90d188e9307be2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:66:19:0d:53:f3:b0:50:22:0f:24:26:2f:
8e:f3:3a:0b:73:57:4d:21:f2:ce:05:d7:c7:b4:7e:
16:76:65:13:bb:5b:0a:4e:6e:36:38:29:16:a7:ff:
9f:b6:a7:55:ee:85:c1:d1:82:24:42:d6:76:71:90:
89:68:2d:ab:18:df:ea:e7:4c:90:36:6a:2c:81:b1:
6f:17:2c:0c:30:0e:dc:2d:25:6f:99:58:c0:2e:e5:
70:1b:d3:25:52:c2:1f:91:b2:c9:8b:be:02:96:09:
71:ae:eb:48:c9:33:ae:4f:75:7d:77:b9:a8:3a:b2:
41:fc:e7:11:5e:a3:3a:b9:26:c9:1b:d9:db:6e:a8:
51:71:e7:ad:b2:e3:f9:fb:7b:da:27:19:22:6f:83:
a5:ee:da:9f:e8:af:64:4d:3b:86:d7:54:3d:ad:e7:
b7:45:2d:b8:d6:32:c1:2a:bb:1f:eb:65:54:38:49:
fe:51:c7:71:42:06:0a:d8:38:16:87:cc:5e:d4:6a:
f1:54:da:fd:7a:d8:28:fe:9f:dd:34:f6:d6:0f:1f:
04:65:e7:23:5b:3d:f6:e4:97:d2:e8:3e:3e:49:59:
81:fd:30:21:02:0f:c9:69:ab:8f:26:76:bd:75:c8:
f8:b1:79:91:30:1c:22:dc:41:2b:37:9e:06:0e:0b:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:39:AC:89:42:21:BB:3B:53:8E:E2:C9:0D:18:8E:93:07:BE:2E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jLU5rIlCIbs7U47iyQ0YjpMHvi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.184.0/21
Signature Algorithm: sha256WithRSAEncryption
04:c9:67:01:c8:d9:33:f2:40:5d:c2:ac:a0:e8:b6:ec:c7:85:
0f:18:53:57:c3:fa:fb:da:05:9d:92:85:54:7d:2a:bf:7d:f7:
27:9b:70:0b:3e:07:e6:ff:4b:51:dd:cd:a1:be:43:7b:94:ee:
5a:da:e0:92:3e:4d:c2:5e:78:06:46:fd:4a:4e:6a:88:af:8e:
aa:c9:3a:4a:0b:33:24:e6:54:07:6e:5d:53:09:51:25:d3:a2:
eb:41:78:3e:c5:57:45:14:5b:40:e7:d4:1c:55:01:34:12:5e:
43:58:0f:62:09:e0:26:e6:21:cf:bb:5e:e7:61:3a:62:1c:b1:
a2:7c:b4:19:39:eb:0f:a8:b4:17:60:6d:44:2b:cb:17:cc:b6:
42:d4:c7:29:44:5d:e9:38:95:44:45:15:4e:8f:8e:91:5a:09:
77:9a:c4:9a:a2:89:3b:4c:4a:c5:e1:e3:d2:d0:83:a1:f3:6e:
3d:09:82:fc:63:61:e8:ba:4c:bd:69:5a:d4:bb:85:13:83:a0:
2f:3c:b7:bb:a0:f7:5b:9c:4b:08:24:9f:8d:b5:33:b9:27:88:
c4:10:05:a7:56:0c:d3:79:6a:0b:cc:03:04:62:a2:00:15:a6:
5a:34:25:e7:85:05:8b:99:d9:07:8a:f8:70:33:10:ca:0d:95:
d8:16:d7:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYHbQ29hou3gH1/lyqLTkAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTMxMTA0MzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2I1MzlhYzg5NDIyMWJiM2I1MzhlZTJjOTBkMTg4ZTkzMDdiZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri1mGQ1T87BQIg8kJi+O8zoLc1dN
IfLOBdfHtH4WdmUTu1sKTm42OCkWp/+ftqdV7oXB0YIkQtZ2cZCJaC2rGN/q50yQ
NmosgbFvFywMMA7cLSVvmVjALuVwG9MlUsIfkbLJi74ClglxrutIyTOuT3V9d7mo
OrJB/OcRXqM6uSbJG9nbbqhRceetsuP5+3vaJxkib4Ol7tqf6K9kTTuG11Q9ree3
RS241jLBKrsf62VUOEn+UcdxQgYK2DgWh8xe1GrxVNr9etgo/p/dNPbWDx8EZecj
Wz325JfS6D4+SVmB/TAhAg/JaauPJna9dcj4sXmRMBwi3EErN54GDguG9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIy1OayJQiG7O1OO4skNGI6TB74uMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvakxVNXJJbENJYnM3VTQ3aXlRMFlqcE1Idmk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVCC4MA0G
CSqGSIb3DQEBCwUAA4IBAQAEyWcByNkz8kBdwqyg6Lbsx4UPGFNXw/r72gWdkoVU
fSq/ffcnm3ALPgfm/0tR3c2hvkN7lO5a2uCSPk3CXngGRv1KTmqIr46qyTpKCzMk
5lQHbl1TCVEl06LrQXg+xVdFFFtA59QcVQE0El5DWA9iCeAm5iHPu17nYTpiHLGi
fLQZOesPqLQXYG1EK8sXzLZC1McpRF3pOJVERRVOj46RWgl3msSaook7TErF4ePS
0IOh8249CYL8Y2Houky9aVrUu4UTg6AvPLe7oPdbnEsIJJ+NtTO5J4jEEAWnVgzT
eWoLzAMEYqIAFaZaNCXnhQWLmdkHivhwMxDKDZXYFtdR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org