Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lxQR8yC3c3r0h4WpX5bw8qnIFR4.roa
File: lxQR8yC3c3r0h4WpX5bw8qnIFR4.roa (raw, json)
Hash identifier: n+wYABs2367WWw13+tgUfhOCGrnEat7JdtW1WVwRRqg=
Subject key identifier: 97:14:11:F3:20:B7:73:7A:F4:87:85:A9:5F:96:F0:F2:A9:C8:15:1E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185DE949588470401AD71E7492CEC2BC0AB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lxQR8yC3c3r0h4WpX5bw8qnIFR4.roa
Signing time: Mon 23 Jan 2023 12:22:37 +0000
ROA not before: Mon 23 Jan 2023 12:22:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16125
IP address blocks: 84.32.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Feb 2023 07:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:94:95:88:47:04:01:ad:71:e7:49:2c:ec:2b:c0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 23 12:22:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=971411f320b7737af48785a95f96f0f2a9c8151e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:ca:e2:8f:55:14:75:91:12:a8:94:c8:5b:
46:ed:31:0a:68:21:8e:35:cb:00:f0:5c:73:1a:ca:
74:5c:43:24:c2:8b:45:3f:ce:63:7a:c0:b0:1e:68:
a0:06:5c:2c:04:8e:9e:da:93:c5:66:f7:68:09:18:
63:03:af:cb:25:0e:18:d8:2d:6f:6c:4b:08:f3:5f:
f6:e8:9d:a2:84:16:58:dc:00:aa:bd:c8:60:f2:cd:
76:68:67:53:10:90:60:8f:3f:a9:9e:f2:2b:7d:9f:
ee:4c:04:fb:11:d4:04:d9:86:18:5a:0d:05:61:0c:
75:49:e7:f8:1f:0b:93:8c:2b:50:e5:ef:2c:9b:fb:
15:40:85:cc:d9:41:0c:0f:33:9a:a5:2c:84:13:4b:
85:4a:b3:01:08:1c:49:1d:c4:df:8b:10:12:45:97:
c2:f9:9d:51:53:94:02:2f:96:61:77:83:c1:3d:3d:
03:03:9f:8a:52:32:10:51:fe:67:ed:2f:7a:ff:9d:
98:34:0b:c2:dd:15:04:a7:d8:30:06:c4:af:29:e3:
91:69:91:d5:07:5d:07:86:b3:d4:32:84:ce:50:c4:
84:81:8d:1b:f5:9e:08:9f:f0:0f:17:8c:dc:d2:f8:
c0:d1:8d:82:a3:f3:18:86:d2:1f:b9:e8:37:34:22:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:14:11:F3:20:B7:73:7A:F4:87:85:A9:5F:96:F0:F2:A9:C8:15:1E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lxQR8yC3c3r0h4WpX5bw8qnIFR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:0d:dc:86:8e:09:d4:dc:98:7f:b9:ad:65:d7:48:18:a3:33:
6b:1d:88:b8:75:a7:a2:86:2d:7c:62:d4:e7:b1:ec:30:5c:55:
ed:62:88:b9:06:e6:aa:63:2a:8e:22:26:1d:f4:54:a6:88:3c:
65:58:e0:66:b9:aa:65:14:56:21:b5:1c:00:74:49:7b:02:42:
be:83:77:b3:a3:55:81:ce:59:f0:c8:0b:04:1f:08:f1:8c:dc:
08:f1:f3:50:5f:51:2e:d7:36:b0:87:84:d5:4d:86:39:e6:8b:
97:f6:fe:fc:b6:7b:0b:57:dd:8c:41:93:36:6c:40:56:aa:39:
9c:6d:73:3b:05:b3:c8:9e:70:a4:8f:5c:f9:9e:03:a6:f3:38:
e6:d4:0d:d8:d4:eb:c2:43:b1:21:e2:1f:4c:fe:b7:52:3b:72:
61:56:f9:b5:8e:69:7b:0c:0f:f9:5f:2d:e4:5a:1f:60:84:9f:
cf:9e:b7:26:cd:11:dd:bb:f6:fb:71:17:f6:8b:b4:c0:f8:e1:
26:db:56:d5:99:a6:84:79:3b:f6:05:84:f1:d6:fd:63:6a:5e:
04:48:e7:b5:ff:ac:34:c1:b5:08:b7:d5:0f:5e:45:a4:52:7c:
45:f9:d1:52:e5:d2:dc:b2:3a:2e:c7:9c:ac:81:03:50:7c:7f:
43:9a:43:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXelJWIRwQBrXHnSSzsK8CrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTIzMTIyMjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzE0MTFmMzIwYjc3MzdhZjQ4Nzg1YTk1Zjk2ZjBmMmE5YzgxNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7bK4o9VFHWREqiUyFtG7TEKaCGO
NcsA8FxzGsp0XEMkwotFP85jesCwHmigBlwsBI6e2pPFZvdoCRhjA6/LJQ4Y2C1v
bEsI81/26J2ihBZY3ACqvchg8s12aGdTEJBgjz+pnvIrfZ/uTAT7EdQE2YYYWg0F
YQx1Sef4HwuTjCtQ5e8sm/sVQIXM2UEMDzOapSyEE0uFSrMBCBxJHcTfixASRZfC
+Z1RU5QCL5Zhd4PBPT0DA5+KUjIQUf5n7S96/52YNAvC3RUEp9gwBsSvKeORaZHV
B10HhrPUMoTOUMSEgY0b9Z4In/APF4zc0vjA0Y2Co/MYhtIfueg3NCID8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJcUEfMgt3N69IeFqV+W8PKpyBUeMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvbHhRUjh5QzNjM3IwaDRXcFg1Ync4cW5JRlI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCD4MA0G
CSqGSIb3DQEBCwUAA4IBAQAuDdyGjgnU3Jh/ua1l10gYozNrHYi4daeihi18YtTn
sewwXFXtYoi5BuaqYyqOIiYd9FSmiDxlWOBmuaplFFYhtRwAdEl7AkK+g3ezo1WB
zlnwyAsEHwjxjNwI8fNQX1Eu1zawh4TVTYY55ouX9v78tnsLV92MQZM2bEBWqjmc
bXM7BbPInnCkj1z5ngOm8zjm1A3Y1OvCQ7Eh4h9M/rdSO3JhVvm1jml7DA/5Xy3k
Wh9ghJ/PnrcmzRHdu/b7cRf2i7TA+OEm21bVmaaEeTv2BYTx1v1jal4ESOe1/6w0
wbUIt9UPXkWkUnxF+dFS5dLcsjoux5ysgQNQfH9DmkPU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:31 2024 by rpki-client on console-ams.rpki-client.org