Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vm5SxYhImMgOK1ZdzwQLptbtHZw.roa
File: vm5SxYhImMgOK1ZdzwQLptbtHZw.roa (raw, json)
Hash identifier: ztHqrAjei4XtI2nCA64oArMqxIP7vSVTpzG0CJeT9ik=
Subject key identifier: BE:6E:52:C5:88:48:98:C8:0E:2B:56:5D:CF:04:0B:A6:D6:ED:1D:9C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01866B05F2C995BF247BF53C4A0C7A28D506
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vm5SxYhImMgOK1ZdzwQLptbtHZw.roa
Signing time: Sun 19 Feb 2023 18:53:17 +0000
ROA not before: Sun 19 Feb 2023 18:53:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 84.32.218.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Feb 2023 11:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6b:05:f2:c9:95:bf:24:7b:f5:3c:4a:0c:7a:28:d5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 19 18:53:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be6e52c5884898c80e2b565dcf040ba6d6ed1d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:a7:37:06:6a:6c:b3:e2:51:f7:60:e2:69:
f1:9f:99:16:56:60:ba:13:58:28:d5:ee:e9:94:06:
8f:ec:cf:bc:c4:5d:ad:57:99:0b:cb:ac:cb:66:7c:
a6:80:25:f3:1a:86:ca:9a:fa:3b:1f:c0:ad:3f:84:
86:ff:d5:f0:22:b7:12:8d:92:df:03:2c:c0:ed:ba:
f2:9f:5b:4b:12:9b:9b:64:f1:15:1d:0f:ae:e0:10:
60:4b:e3:64:a0:8f:d2:21:9a:b2:da:67:3e:f2:a1:
5c:7b:99:e1:1f:43:b6:29:48:74:3e:c7:63:8f:5d:
c9:2f:69:06:48:a2:08:d0:21:7b:c2:94:48:b8:b7:
ee:2e:e3:92:dd:77:b1:5b:d9:fc:69:88:82:e7:66:
f7:dc:37:9b:d8:bc:3f:90:87:16:06:6b:c8:00:45:
bc:85:2f:fb:ec:f5:53:68:ea:ac:68:e5:01:8a:0b:
86:47:3b:c4:fd:ec:11:87:3e:55:00:86:99:6e:e4:
38:85:8c:bb:be:92:1e:99:7b:cd:f4:19:aa:5d:89:
b6:6d:0b:cc:75:cb:80:33:72:3e:86:e1:41:ff:c5:
ad:ab:ec:e3:28:0c:2e:c8:48:46:9b:05:bc:18:fa:
eb:82:8e:ad:f2:74:5e:69:f0:5c:72:85:e0:1d:d9:
c2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6E:52:C5:88:48:98:C8:0E:2B:56:5D:CF:04:0B:A6:D6:ED:1D:9C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vm5SxYhImMgOK1ZdzwQLptbtHZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.218.0/24
84.32.229.0/24
Signature Algorithm: sha256WithRSAEncryption
90:07:0f:31:56:4e:e9:5f:f9:18:9a:71:76:2c:38:e4:d6:c3:
44:44:a2:7f:89:ef:72:85:13:d7:6b:a0:65:78:a3:f1:92:b6:
25:f9:db:ff:c9:8e:52:3d:08:49:ef:d7:8f:82:aa:c3:cf:d1:
7b:16:3c:06:1a:a6:8e:13:fa:a6:53:a8:ac:f0:60:9a:08:2d:
cf:5a:57:4d:79:cb:6a:b7:ae:7b:b1:2a:32:f3:d6:11:dc:b7:
bc:d1:71:72:1e:68:c5:65:6a:98:40:2a:18:7f:6a:79:07:66:
c8:14:e8:92:ed:33:ff:77:b0:71:41:71:9a:eb:23:cc:86:79:
13:aa:c8:b4:67:86:60:7d:04:cc:73:20:34:ab:80:e5:ce:ac:
da:95:aa:43:37:a5:40:60:b0:31:2a:a1:95:b6:1f:2a:32:4b:
e6:fb:ca:7b:61:c7:74:4f:0a:3a:96:37:59:b3:ed:04:dc:df:
c1:aa:e9:cd:e4:08:75:e1:bf:fd:0a:0f:da:5d:d0:e6:9e:42:
89:84:07:f4:2c:ae:2a:3f:d7:01:42:1a:13:79:d8:f3:ff:2a:
2e:d1:cd:9f:9a:16:57:3d:60:54:b2:17:82:ad:c0:4a:00:5f:
8f:46:45:c0:95:3f:2f:76:f9:be:05:43:55:2f:5e:29:c3:99:
a0:f0:6f:cd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZrBfLJlb8ke/U8Sgx6KNUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMjE5MTg1MzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTZlNTJjNTg4NDg5OGM4MGUyYjU2NWRjZjA0MGJhNmQ2ZWQxZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFmnNwZqbLPiUfdg4mnxn5kWVmC6
E1go1e7plAaP7M+8xF2tV5kLy6zLZnymgCXzGobKmvo7H8CtP4SG/9XwIrcSjZLf
AyzA7bryn1tLEpubZPEVHQ+u4BBgS+NkoI/SIZqy2mc+8qFce5nhH0O2KUh0Psdj
j13JL2kGSKII0CF7wpRIuLfuLuOS3XexW9n8aYiC52b33Deb2Lw/kIcWBmvIAEW8
hS/77PVTaOqsaOUBiguGRzvE/ewRhz5VAIaZbuQ4hYy7vpIemXvN9BmqXYm2bQvM
dcuAM3I+huFB/8Wtq+zjKAwuyEhGmwW8GPrrgo6t8nReafBccoXgHdnC2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL5uUsWISJjIDitWXc8EC6bW7R2cMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvdm01U3hZaEltTWdPSzFaZHp3UUxwdGJ0SFp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCDaAwQA
VCDlMA0GCSqGSIb3DQEBCwUAA4IBAQCQBw8xVk7pX/kYmnF2LDjk1sNERKJ/ie9y
hRPXa6BleKPxkrYl+dv/yY5SPQhJ79ePgqrDz9F7FjwGGqaOE/qmU6is8GCaCC3P
WldNectqt657sSoy89YR3Le80XFyHmjFZWqYQCoYf2p5B2bIFOiS7TP/d7BxQXGa
6yPMhnkTqsi0Z4ZgfQTMcyA0q4DlzqzalapDN6VAYLAxKqGVth8qMkvm+8p7Ycd0
Two6ljdZs+0E3N/BqunN5Ah14b/9Cg/aXdDmnkKJhAf0LK4qP9cBQhoTedjz/you
0c2fmhZXPWBUsheCrcBKAF+PRkXAlT8vdvm+BUNVL14pw5mg8G/N
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org