Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tCspuV0koGRYT6dK7y_W4WtqqII.roa
File: tCspuV0koGRYT6dK7y_W4WtqqII.roa (raw, json)
Hash identifier: sz5R+M3dSYQkdMyf08zoxgqcuWwDMSSGUzDktM4Q32E=
Subject key identifier: B4:2B:29:B9:5D:24:A0:64:58:4F:A7:4A:EF:2F:D6:E1:6B:6A:A8:82
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187FB0DF92872A889B969F8AED56001D985
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tCspuV0koGRYT6dK7y_W4WtqqII.roa
Signing time: Mon 08 May 2023 11:10:09 +0000
ROA not before: Mon 08 May 2023 11:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12912
IP address blocks: 84.32.57.0/24 maxlen: 24
88.216.19.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 May 2023 19:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:0d:f9:28:72:a8:89:b9:69:f8:ae:d5:60:01:d9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 8 11:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b42b29b95d24a064584fa74aef2fd6e16b6aa882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:f5:f0:5a:61:d2:aa:39:8e:e2:e1:43:ff:
71:6a:44:42:c8:42:ab:94:8d:87:6d:ff:6a:53:05:
97:43:10:f7:f3:a2:db:0e:e4:c8:34:e8:ec:08:a6:
d4:88:dd:00:37:12:29:0f:8b:bf:11:45:9c:2f:5c:
57:78:99:d5:ad:70:2a:5e:02:1e:17:17:25:21:50:
3c:4c:60:d9:5b:80:8f:a2:39:5e:98:71:e8:ec:10:
af:9d:c8:4b:45:7f:6a:8d:33:38:b0:69:6b:dc:33:
9d:22:bf:e2:38:90:65:34:36:40:29:0e:5e:fe:45:
94:82:c8:47:f7:ea:92:09:6e:e5:b2:e4:6e:74:8b:
20:41:50:35:4e:27:57:cb:90:b5:d3:50:a6:26:96:
e2:64:f8:2a:98:75:4b:c6:95:c1:94:9f:4e:0d:63:
d1:cb:df:b9:6e:0d:c5:0e:b1:54:ea:0e:c3:52:74:
aa:34:d5:4c:dc:3f:24:fc:cd:56:11:78:eb:cb:f2:
85:83:c9:3a:82:56:87:d0:09:4c:8e:23:92:d8:65:
6d:9d:db:fe:54:b6:d2:e1:ed:0f:f0:8e:06:05:78:
0e:d5:53:7a:18:0c:af:4c:12:0c:9c:e7:4f:95:73:
fe:b9:3a:08:9f:0e:64:39:07:aa:fa:38:43:44:08:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2B:29:B9:5D:24:A0:64:58:4F:A7:4A:EF:2F:D6:E1:6B:6A:A8:82
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tCspuV0koGRYT6dK7y_W4WtqqII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.39.0/24
84.32.57.0/24
88.216.19.0/24
Signature Algorithm: sha256WithRSAEncryption
80:89:62:de:de:ef:12:92:ce:55:97:cc:93:89:2b:1b:ad:06:
b1:c1:6c:28:a2:34:a2:05:f8:ce:d9:51:b0:45:06:f2:06:71:
7a:fc:2d:8a:75:35:4d:11:46:aa:ca:b3:79:4a:ba:70:2f:1e:
ea:4d:64:4a:95:4b:1c:b5:76:39:df:dd:d4:90:45:d4:64:94:
6e:e0:ff:c1:8a:85:7e:83:4e:a7:09:09:76:7f:1d:2a:3b:c4:
60:f2:b9:70:00:03:7c:7c:70:be:2b:b1:22:95:22:d6:5a:1c:
aa:09:8e:e6:69:9e:8f:c6:f8:83:45:d2:7b:92:2b:c2:bd:0a:
29:e3:99:d0:a7:33:d5:4e:14:4a:81:1a:51:f6:0f:e6:6a:50:
ff:ce:1c:1d:48:58:e5:e5:c0:ef:89:d9:05:6a:3f:6e:1a:8d:
b4:3d:d6:9e:7d:ad:bc:d9:f8:39:61:bb:40:11:14:1c:1d:c5:
07:5d:51:0d:7d:8c:7c:3f:cf:0d:01:34:30:66:37:52:31:58:
0e:f2:82:95:f0:a9:76:cb:47:24:94:36:b1:9e:c6:f4:3d:a5:
99:04:20:4e:7b:08:e7:08:41:65:04:9d:9b:b4:5d:ae:79:92:
d2:e8:ec:47:06:c7:9e:90:fd:37:2e:fb:41:d8:ad:a4:f3:e1:
da:eb:2b:f0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYf7DfkocqiJuWn4rtVgAdmFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNTA4MTExMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDJiMjliOTVkMjRhMDY0NTg0ZmE3NGFlZjJmZDZlMTZiNmFhODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXX18Fph0qo5juLhQ/9xakRCyEKr
lI2Hbf9qUwWXQxD386LbDuTINOjsCKbUiN0ANxIpD4u/EUWcL1xXeJnVrXAqXgIe
FxclIVA8TGDZW4CPojlemHHo7BCvnchLRX9qjTM4sGlr3DOdIr/iOJBlNDZAKQ5e
/kWUgshH9+qSCW7lsuRudIsgQVA1TidXy5C101CmJpbiZPgqmHVLxpXBlJ9ODWPR
y9+5bg3FDrFU6g7DUnSqNNVM3D8k/M1WEXjry/KFg8k6glaH0AlMjiOS2GVtndv+
VLbS4e0P8I4GBXgO1VN6GAyvTBIMnOdPlXP+uToInw5kOQeq+jhDRAgA8wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLQrKbldJKBkWE+nSu8v1uFraqiCMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvdENzcHVWMGtvR1JZVDZkSzd5X1c0V3RxcUlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCAnAwQA
VCA5AwQAWNgTMA0GCSqGSIb3DQEBCwUAA4IBAQCAiWLe3u8Sks5Vl8yTiSsbrQax
wWwoojSiBfjO2VGwRQbyBnF6/C2KdTVNEUaqyrN5SrpwLx7qTWRKlUsctXY5393U
kEXUZJRu4P/BioV+g06nCQl2fx0qO8Rg8rlwAAN8fHC+K7EilSLWWhyqCY7maZ6P
xviDRdJ7kivCvQop45nQpzPVThRKgRpR9g/malD/zhwdSFjl5cDvidkFaj9uGo20
Pdaefa282fg5YbtAERQcHcUHXVENfYx8P88NATQwZjdSMVgO8oKV8Kl2y0cklDax
nsb0PaWZBCBOewjnCEFlBJ2btF2ueZLS6OxHBseekP03LvtB2K2k8+Ha6yvw
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:32 2024 by rpki-client on console-ams.rpki-client.org