Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uyKCgIbiOxMdtp-VpquCBdSvy0c.roa
File: uyKCgIbiOxMdtp-VpquCBdSvy0c.roa (raw, json)
Hash identifier: YgL7Ur44ydmfj8x/Vqr4bKPiQOP2i11sTAPYDbcgPJ0=
Subject key identifier: BB:22:82:80:86:E2:3B:13:1D:B6:9F:95:A6:AB:82:05:D4:AF:CB:47
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018576CECC028FD3FECF389C23B75938CE74
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uyKCgIbiOxMdtp-VpquCBdSvy0c.roa
Signing time: Tue 03 Jan 2023 08:45:42 +0000
ROA not before: Tue 03 Jan 2023 08:45:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51358
IP address blocks: 84.32.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:ce:cc:02:8f:d3:fe:cf:38:9c:23:b7:59:38:ce:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 3 08:45:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb22828086e23b131db69f95a6ab8205d4afcb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e5:0b:02:cd:f0:b3:c1:7a:e1:cf:ee:af:95:
51:92:7b:3a:17:94:a7:71:ce:27:23:81:c4:3e:07:
e3:0f:ab:bb:51:11:0e:b9:bc:79:96:cb:51:c4:1b:
a0:75:b9:f9:ad:11:fb:49:bd:2a:40:f9:ec:85:e9:
3e:87:91:7b:7b:cc:f2:cf:cd:60:b0:86:c7:d5:aa:
a5:d6:92:c6:ee:26:a7:e9:15:d3:2c:4f:cb:88:dc:
ed:5d:7c:e9:4e:81:0d:81:fc:65:af:af:b7:8c:24:
8e:bf:72:fa:ac:9f:e9:07:ad:f5:14:0b:f6:82:c5:
5f:d4:5f:69:86:53:99:1f:b9:71:05:a0:e3:76:ee:
79:06:4d:31:29:f2:1b:06:c5:c4:5b:e0:04:e5:3f:
09:78:34:8d:b4:97:5e:75:e1:74:50:19:76:d9:61:
0f:ee:18:1c:93:8b:f1:47:24:43:20:e6:a7:1f:15:
71:23:3d:39:37:e3:87:69:0f:7d:cd:37:65:83:d8:
12:30:d9:71:7e:10:92:9d:b6:39:dc:7f:35:9d:1d:
65:de:19:63:56:b3:ab:4e:a8:c8:48:03:74:01:90:
af:ae:bb:aa:5e:d4:b2:d0:4e:05:14:aa:56:2e:55:
54:4a:ad:ee:77:60:ad:bd:98:35:70:32:bd:fe:eb:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:22:82:80:86:E2:3B:13:1D:B6:9F:95:A6:AB:82:05:D4:AF:CB:47
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uyKCgIbiOxMdtp-VpquCBdSvy0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.33.0/24
Signature Algorithm: sha256WithRSAEncryption
50:4e:64:71:7c:88:66:44:21:b5:25:66:ef:ff:d7:29:c3:41:
a6:d5:f8:8e:8e:a3:0b:b1:5e:51:d4:2c:6a:e9:30:18:cc:f2:
0f:9f:ad:81:92:13:6c:69:85:68:0a:c2:34:8a:39:b6:55:6e:
cf:c4:b7:71:af:f0:b7:34:7e:a0:71:1a:31:0e:13:b8:46:eb:
b5:03:20:1d:f6:c9:fd:53:39:83:f3:24:d2:44:e4:c9:54:3b:
6d:bc:61:bf:ec:7e:f5:aa:0f:03:96:bc:98:a1:22:c4:ee:4a:
0d:b3:cf:bb:a2:2e:9b:54:7f:fb:b5:fb:15:0f:b6:f3:c4:87:
2e:bb:b0:25:63:be:93:67:1d:c3:88:3a:57:ca:6f:f6:2f:9b:
2d:a2:5e:5e:91:e1:8e:36:59:dd:8d:54:7b:60:45:8b:40:2f:
dc:a0:99:1c:4b:47:15:02:99:02:c4:a4:05:5f:c2:68:30:cf:
f2:d5:6c:d0:2d:88:0a:3d:c1:ad:3a:8f:6e:2f:c0:6e:07:e2:
23:23:85:96:97:00:0c:2f:5f:45:e9:52:4e:34:9c:b9:d8:73:
2d:22:7d:81:f6:fe:55:4e:fe:27:90:ff:93:93:36:ba:e8:65:
87:58:af:5b:76:8a:90:43:33:74:d4:b1:0d:2f:97:a0:5a:88:
96:a8:db:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYV2zswCj9P+zzicI7dZOM50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTAzMDg0NTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjIyODI4MDg2ZTIzYjEzMWRiNjlmOTVhNmFiODIwNWQ0YWZjYjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieULAs3ws8F64c/ur5VRkns6F5Sn
cc4nI4HEPgfjD6u7UREOubx5lstRxBugdbn5rRH7Sb0qQPnshek+h5F7e8zyz81g
sIbH1aql1pLG7ian6RXTLE/LiNztXXzpToENgfxlr6+3jCSOv3L6rJ/pB631FAv2
gsVf1F9phlOZH7lxBaDjdu55Bk0xKfIbBsXEW+AE5T8JeDSNtJdedeF0UBl22WEP
7hgck4vxRyRDIOanHxVxIz05N+OHaQ99zTdlg9gSMNlxfhCSnbY53H81nR1l3hlj
VrOrTqjISAN0AZCvrruqXtSy0E4FFKpWLlVUSq3ud2CtvZg1cDK9/uvXQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLsigoCG4jsTHbaflaarggXUr8tHMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvdXlLQ2dJYmlPeE1kdHAtVnBxdUNCZFN2eTBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCAhMA0G
CSqGSIb3DQEBCwUAA4IBAQBQTmRxfIhmRCG1JWbv/9cpw0Gm1fiOjqMLsV5R1Cxq
6TAYzPIPn62BkhNsaYVoCsI0ijm2VW7PxLdxr/C3NH6gcRoxDhO4Ruu1AyAd9sn9
UzmD8yTSROTJVDttvGG/7H71qg8DlryYoSLE7koNs8+7oi6bVH/7tfsVD7bzxIcu
u7AlY76TZx3DiDpXym/2L5stol5ekeGONlndjVR7YEWLQC/coJkcS0cVApkCxKQF
X8JoMM/y1WzQLYgKPcGtOo9uL8BuB+IjI4WWlwAML19F6VJONJy52HMtIn2B9v5V
Tv4nkP+Tkza66GWHWK9bdoqQQzN01LENL5egWoiWqNvn
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:41 2024 by rpki-client on console-ams.rpki-client.org