Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ssWIl7PeJNv5T12rvDI6XvGlUsI.roa
File: ssWIl7PeJNv5T12rvDI6XvGlUsI.roa (raw, json)
Hash identifier: t1P9MAlqRdNVY++hXpf1gIeYOeyUgw6ZJcHo61lhHuA=
Subject key identifier: B2:C5:88:97:B3:DE:24:DB:F9:4F:5D:AB:BC:32:3A:5E:F1:A5:52:C2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189CF0D8CB8AB34290ED98FADBD93D60B94
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ssWIl7PeJNv5T12rvDI6XvGlUsI.roa
Signing time: Mon 07 Aug 2023 08:11:58 +0000
ROA not before: Mon 07 Aug 2023 08:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 84.32.85.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:0d:8c:b8:ab:34:29:0e:d9:8f:ad:bd:93:d6:0b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 7 08:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2c58897b3de24dbf94f5dabbc323a5ef1a552c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:1c:34:b4:67:30:77:4e:0c:91:18:c2:fd:
88:bc:d2:cb:c3:44:90:9c:e7:ee:e9:2f:ba:58:91:
e5:43:52:25:0a:57:17:d9:a0:38:1b:11:02:2c:33:
2a:0c:98:8c:b1:65:62:63:01:a4:c3:8a:44:46:f9:
60:97:bf:36:7d:2a:3f:f0:8f:3c:f8:22:f7:1a:97:
32:4c:90:9f:36:3c:3b:6f:c0:f4:29:c9:25:6c:d7:
8f:75:0f:55:7c:77:4a:56:f3:c0:c0:7d:22:a9:a9:
e0:aa:b4:eb:87:95:a0:96:99:88:96:60:a3:a4:a1:
fe:83:97:29:d6:b6:e1:b4:84:65:a3:aa:6f:e1:67:
f3:12:ec:9a:8b:72:76:b1:46:6b:9d:43:00:84:21:
79:fc:c6:6d:af:90:74:ec:4a:0f:e7:af:2e:8c:db:
76:b8:5a:48:4e:04:b5:7d:1b:b9:8c:ae:e4:6f:23:
18:75:bd:a2:e0:01:03:84:32:80:56:b3:13:c9:84:
55:82:7b:34:a9:f1:b1:ac:3c:8b:ef:bd:04:ba:c3:
47:44:2d:d0:a4:4e:f2:cc:ed:e6:56:97:e9:a5:b8:
8d:d7:da:7f:0f:8f:db:6d:15:4e:db:ba:eb:c1:18:
42:a4:85:95:aa:35:de:de:7e:bc:62:0b:8d:f0:74:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C5:88:97:B3:DE:24:DB:F9:4F:5D:AB:BC:32:3A:5E:F1:A5:52:C2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ssWIl7PeJNv5T12rvDI6XvGlUsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.85.0/24
84.32.221.0/24
88.216.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f8:de:7d:09:7b:a5:b1:d3:9b:cb:f9:37:31:d9:8a:aa:a1:
1e:28:fd:45:e1:c4:1b:f6:02:68:e3:3c:60:2e:43:c6:72:22:
39:ac:00:7e:09:0a:49:05:8e:d0:19:4e:4e:27:f9:fc:a5:16:
c1:6b:63:be:67:64:78:90:c9:ad:c0:02:d5:56:5e:32:0b:f8:
68:d7:69:94:2e:72:10:21:15:a7:28:97:cd:f0:1f:2c:a8:53:
46:ee:cf:3f:e3:80:3c:ba:d5:e9:b2:fe:3c:1c:0f:a6:69:60:
54:0e:76:e4:9e:c7:4b:36:c6:06:59:1a:0e:7d:95:e2:d8:37:
e7:9e:97:6c:41:4a:c4:c4:c2:fe:da:54:46:5a:07:fa:af:b7:
e9:a8:ac:a6:d4:b3:0b:6e:e3:ab:85:2f:af:07:8b:49:80:00:
0e:27:84:61:a5:10:ea:d7:97:3e:be:8a:b1:80:04:47:15:0d:
f5:bc:e9:26:1e:84:28:49:47:04:6d:69:98:4f:41:8b:f7:44:
75:46:6a:31:c5:32:9d:f0:b8:3e:4d:a0:18:19:61:08:77:50:
df:fb:0d:bb:66:94:c0:b5:df:4c:e9:f3:e8:05:6f:0d:7d:b8:
90:82:52:55:99:e0:3b:33:82:ff:02:a2:a7:62:9f:20:10:4a:
05:05:30:4d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYnPDYy4qzQpDtmPrb2T1guUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwODA3MDgxMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmM1ODg5N2IzZGUyNGRiZjk0ZjVkYWJiYzMyM2E1ZWYxYTU1MmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnAcNLRnMHdODJEYwv2IvNLLw0SQ
nOfu6S+6WJHlQ1IlClcX2aA4GxECLDMqDJiMsWViYwGkw4pERvlgl782fSo/8I88
+CL3GpcyTJCfNjw7b8D0KcklbNePdQ9VfHdKVvPAwH0iqangqrTrh5WglpmIlmCj
pKH+g5cp1rbhtIRlo6pv4WfzEuyai3J2sUZrnUMAhCF5/MZtr5B07EoP568ujNt2
uFpITgS1fRu5jK7kbyMYdb2i4AEDhDKAVrMTyYRVgns0qfGxrDyL770EusNHRC3Q
pE7yzO3mVpfppbiN19p/D4/bbRVO27rrwRhCpIWVqjXe3n68YguN8HRwOQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLLFiJez3iTb+U9dq7wyOl7xpVLCMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvc3NXSWw3UGVKTnY1VDEycnZESTZYdkdsVXNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCBVAwQA
VCDdAwQAWNgvMA0GCSqGSIb3DQEBCwUAA4IBAQBc+N59CXulsdOby/k3MdmKqqEe
KP1F4cQb9gJo4zxgLkPGciI5rAB+CQpJBY7QGU5OJ/n8pRbBa2O+Z2R4kMmtwALV
Vl4yC/ho12mULnIQIRWnKJfN8B8sqFNG7s8/44A8utXpsv48HA+maWBUDnbknsdL
NsYGWRoOfZXi2DfnnpdsQUrExML+2lRGWgf6r7fpqKym1LMLbuOrhS+vB4tJgAAO
J4RhpRDq15c+voqxgARHFQ31vOkmHoQoSUcEbWmYT0GL90R1RmoxxTKd8Lg+TaAY
GWEId1Df+w27ZpTAtd9M6fPoBW8NfbiQglJVmeA7M4L/AqKnYp8gEEoFBTBN
-----END CERTIFICATE-----
Generated at Mon Sep 25 06:37:23 2023 by rpki-client on console-fra.rpki-client.org