Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vB_-MSiGHw2InGmLMuMSMrEA-AU.roa
File: vB_-MSiGHw2InGmLMuMSMrEA-AU.roa (raw, json)
Hash identifier: l7JypuvHL0iPzELKXoCagq/nvCcwaYCO4syEXeavrpo=
Subject key identifier: BC:1F:FE:31:28:86:1F:0D:88:9C:69:8B:32:E3:12:32:B1:00:F8:05
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A82D4DD6F037E808CBA4B88D4B6784BDF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vB_-MSiGHw2InGmLMuMSMrEA-AU.roa
Signing time: Mon 11 Sep 2023 06:01:42 +0000
ROA not before: Mon 11 Sep 2023 06:01:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13830
IP address blocks: 84.32.56.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:82:d4:dd:6f:03:7e:80:8c:ba:4b:88:d4:b6:78:4b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 11 06:01:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc1ffe3128861f0d889c698b32e31232b100f805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7c:66:37:0d:ca:80:0b:1b:ab:12:05:b5:5d:
d2:e6:a2:46:17:4b:a5:c0:6f:14:aa:c0:4b:35:c9:
14:fd:fa:88:7a:7f:10:43:ba:99:88:6e:1b:45:35:
d5:5d:e1:de:d4:9f:96:fe:89:5f:ff:1c:d9:88:6b:
b8:fd:c9:3c:4d:3e:f4:fc:78:0a:a5:3e:e2:84:cd:
63:48:10:08:4a:af:0d:5d:89:dd:45:93:94:a1:b4:
7b:84:9f:2f:44:f1:16:6d:b7:b5:3a:93:10:f8:92:
f5:46:a2:b5:86:c8:08:74:84:da:15:ad:90:e4:0e:
7f:30:67:b2:6c:73:1b:88:5a:88:ee:84:02:d4:94:
5a:b9:da:41:8f:7c:a5:4b:49:d1:00:35:62:41:f0:
68:4e:00:9a:31:52:cd:15:53:df:60:53:d0:30:9b:
63:61:20:45:dc:5f:c1:5f:48:8d:59:3f:ec:63:05:
e7:e8:6c:49:56:d1:37:76:3c:39:06:96:4c:91:0f:
ea:35:b4:6b:70:0c:ea:71:f9:9a:d4:b8:a5:8d:74:
17:b0:60:d9:1d:f8:56:d2:f2:f9:14:a2:47:67:33:
4e:f1:29:66:20:eb:78:6d:a1:62:49:da:8f:72:d5:
b2:d3:ca:19:0c:b7:77:19:bf:15:66:61:45:82:04:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1F:FE:31:28:86:1F:0D:88:9C:69:8B:32:E3:12:32:B1:00:F8:05
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vB_-MSiGHw2InGmLMuMSMrEA-AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.42.0/24
84.32.56.0/24
Signature Algorithm: sha256WithRSAEncryption
03:cc:b4:40:be:ab:4f:87:59:0b:ab:4a:e7:dc:a9:74:c5:60:
1c:57:36:20:ba:ef:90:98:df:fd:33:a1:10:e2:ac:0b:bc:60:
23:36:6c:b8:24:81:7a:a7:20:d8:96:3f:e4:21:2a:c0:32:c4:
b9:29:a5:08:77:07:a2:ca:58:9f:60:40:8b:65:ba:98:ec:3d:
95:9e:f9:bb:21:74:5a:58:d5:39:64:7a:72:82:78:f1:ac:23:
ad:74:04:0f:f4:95:75:61:68:8e:5b:90:f6:0a:5e:45:72:c9:
93:4c:1b:71:aa:c5:7c:e9:65:ff:50:5b:3d:1f:1d:d8:83:8d:
df:aa:75:b8:5f:45:b7:a2:2f:3d:cc:ed:29:f8:71:ab:36:6e:
53:79:a2:97:45:65:69:8d:9d:a0:cd:ef:7f:e7:d7:f8:06:4c:
c9:e4:ac:26:b6:fc:da:a2:95:c7:df:db:44:d6:56:6c:bd:bc:
fa:5f:59:05:cf:70:20:2d:a3:8e:9d:a1:23:2c:46:f3:61:d4:
5e:fe:d7:80:98:4e:cc:e0:c2:ed:58:5e:68:ca:ef:5f:3b:1d:
0d:6c:2a:54:dc:16:97:2d:dc:6a:16:fc:21:cc:2a:8e:e8:0e:
99:a8:b5:f8:a1:02:a2:8b:63:d4:95:42:fd:b4:68:4c:28:37:
35:47:39:e3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqC1N1vA36AjLpLiNS2eEvfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwOTExMDYwMTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzFmZmUzMTI4ODYxZjBkODg5YzY5OGIzMmUzMTIzMmIxMDBmODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHxmNw3KgAsbqxIFtV3S5qJGF0ul
wG8UqsBLNckU/fqIen8QQ7qZiG4bRTXVXeHe1J+W/olf/xzZiGu4/ck8TT70/HgK
pT7ihM1jSBAISq8NXYndRZOUobR7hJ8vRPEWbbe1OpMQ+JL1RqK1hsgIdITaFa2Q
5A5/MGeybHMbiFqI7oQC1JRaudpBj3ylS0nRADViQfBoTgCaMVLNFVPfYFPQMJtj
YSBF3F/BX0iNWT/sYwXn6GxJVtE3djw5BpZMkQ/qNbRrcAzqcfma1LiljXQXsGDZ
HfhW0vL5FKJHZzNO8SlmIOt4baFiSdqPctWy08oZDLd3Gb8VZmFFggRl0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLwf/jEohh8NiJxpizLjEjKxAPgFMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvdkJfLU1TaUdIdzJJbkdtTE11TVNNckVBLUFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCAqAwQA
VCA4MA0GCSqGSIb3DQEBCwUAA4IBAQADzLRAvqtPh1kLq0rn3Kl0xWAcVzYguu+Q
mN/9M6EQ4qwLvGAjNmy4JIF6pyDYlj/kISrAMsS5KaUIdweiylifYECLZbqY7D2V
nvm7IXRaWNU5ZHpygnjxrCOtdAQP9JV1YWiOW5D2Cl5FcsmTTBtxqsV86WX/UFs9
Hx3Yg43fqnW4X0W3oi89zO0p+HGrNm5TeaKXRWVpjZ2gze9/59f4BkzJ5Kwmtvza
opXH39tE1lZsvbz6X1kFz3AgLaOOnaEjLEbzYdRe/teAmE7M4MLtWF5oyu9fOx0N
bCpU3BaXLdxqFvwhzCqO6A6ZqLX4oQKii2PUlUL9tGhMKDc1Rznj
-----END CERTIFICATE-----
Generated at Mon Sep 11 11:40:43 2023 by rpki-client on console-ams.rpki-client.org