Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/BS1TZmB8o4O1uZyYgl4QnXcbV6w.roa
File: BS1TZmB8o4O1uZyYgl4QnXcbV6w.roa (raw, json)
Hash identifier: 73u1FpRsaZ89kBd+NSNsBAMeQ2ib6vKmXEoZKZ/CI0o=
Subject key identifier: 05:2D:53:66:60:7C:A3:83:B5:B9:9C:98:82:5E:10:9D:77:1B:57:AC
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570306808CA62CCD410F95A6C2553A0BB
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/BS1TZmB8o4O1uZyYgl4QnXcbV6w.roa
Signing time: Mon 02 Jan 2023 01:54:58 +0000
ROA not before: Mon 02 Jan 2023 01:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44247
IP address blocks: 84.1.247.0/24 maxlen: 24
84.1.45.0/24 maxlen: 24
84.1.46.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:68:08:ca:62:cc:d4:10:f9:5a:6c:25:53:a0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=052d5366607ca383b5b99c98825e109d771b57ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:7f:1b:d9:36:07:63:db:40:12:6c:5d:71:
44:e1:a7:96:e8:e6:64:61:d7:18:65:13:2b:09:70:
89:a3:7a:68:38:2d:6f:24:5c:44:fe:b7:d3:12:b5:
f7:2a:da:ab:dd:74:46:97:6c:4a:e6:69:ae:5c:24:
90:72:cd:91:de:96:59:c9:b1:e4:37:12:5b:41:40:
ea:fb:5f:ef:82:b7:c0:86:f8:0c:dd:f6:c5:4b:02:
b2:4f:60:90:54:3f:cc:58:20:be:8d:bf:1d:f7:b7:
b7:63:62:80:64:48:1f:76:30:e2:22:ec:09:e9:a1:
2f:ba:f7:60:60:6b:6f:ee:d6:03:32:5d:a9:e3:d6:
df:ef:5e:de:83:0e:cb:fb:32:30:8f:fc:a4:35:7a:
09:87:db:75:9d:2b:74:25:55:b0:12:e6:d5:85:f0:
01:30:93:f6:e7:b1:03:07:31:30:bb:c9:a0:ce:11:
0b:fa:c5:29:b4:90:83:7e:10:00:93:02:37:84:97:
e1:e8:fa:3f:97:6d:e2:58:66:c4:d2:bd:05:05:10:
a0:92:05:47:0c:df:95:36:f1:76:f7:00:5c:ff:64:
01:61:7d:63:0c:a6:52:9b:c0:47:33:58:af:1f:4f:
34:d9:27:da:80:98:76:bf:bd:f1:6f:e0:ef:42:f0:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2D:53:66:60:7C:A3:83:B5:B9:9C:98:82:5E:10:9D:77:1B:57:AC
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/BS1TZmB8o4O1uZyYgl4QnXcbV6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.45.0-84.1.47.255
84.1.247.0/24
Signature Algorithm: sha256WithRSAEncryption
72:7c:5f:33:8a:b6:e6:73:47:48:f8:34:b9:59:32:bd:86:4f:
db:f5:6d:d6:43:9e:02:f3:f0:70:53:1c:ae:23:06:54:34:21:
0f:ec:7d:c0:62:92:58:c4:b1:d3:a9:69:e6:ae:68:e7:ad:c7:
b3:1b:96:0f:87:f8:5d:86:36:39:e1:1b:4e:ba:7b:2d:45:ee:
01:57:d3:6c:d6:09:9c:3e:b0:c0:79:65:48:01:ba:e4:bf:99:
dc:15:cc:6d:a5:2d:f6:52:53:86:b0:ba:31:ca:cf:a9:6e:6f:
54:ee:f2:10:96:c0:7b:eb:0e:69:2e:a0:2c:0b:8a:c6:0a:6f:
9d:d5:6e:7c:26:98:bd:10:25:62:87:a4:5e:23:60:99:96:d5:
1e:b8:3e:1f:d9:6b:b7:fd:60:fb:1b:a8:a9:a3:fb:df:53:ec:
6e:85:f8:fa:a3:d3:37:86:99:7c:ec:ea:84:c7:46:48:1c:c3:
86:d8:b9:dc:19:ac:04:de:99:7c:1c:c8:9a:4f:2c:26:bb:32:
5f:ab:4c:e8:b4:38:bb:8c:25:6d:a0:d2:20:ce:85:f3:1c:af:
77:a2:74:e7:be:51:e3:17:76:fd:58:dd:4b:24:ca:cc:c8:6e:
68:ea:1d:8e:61:61:74:dd:8a:ac:e0:31:dd:b6:19:ff:90:85:
6a:96:96:e1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVwMGgIymLM1BD5WmwlU6C7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjMwMTAyMDE1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTJkNTM2NjYwN2NhMzgzYjViOTljOTg4MjVlMTA5ZDc3MWI1N2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirl/G9k2B2PbQBJsXXFE4aeW6OZk
YdcYZRMrCXCJo3poOC1vJFxE/rfTErX3Ktqr3XRGl2xK5mmuXCSQcs2R3pZZybHk
NxJbQUDq+1/vgrfAhvgM3fbFSwKyT2CQVD/MWCC+jb8d97e3Y2KAZEgfdjDiIuwJ
6aEvuvdgYGtv7tYDMl2p49bf717egw7L+zIwj/ykNXoJh9t1nSt0JVWwEubVhfAB
MJP257EDBzEwu8mgzhEL+sUptJCDfhAAkwI3hJfh6Po/l23iWGbE0r0FBRCgkgVH
DN+VNvF29wBc/2QBYX1jDKZSm8BHM1ivH0802SfagJh2v73xb+DvQvAHsQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFAUtU2ZgfKODtbmcmIJeEJ13G1esMB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvQlMxVFptQjhvNE8xdVp5WWdsNFFuWGNiVjZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABUAS0D
BARUASADBABUAfcwDQYJKoZIhvcNAQELBQADggEBAHJ8XzOKtuZzR0j4NLlZMr2G
T9v1bdZDngLz8HBTHK4jBlQ0IQ/sfcBikljEsdOpaeauaOetx7Mblg+H+F2GNjnh
G066ey1F7gFX02zWCZw+sMB5ZUgBuuS/mdwVzG2lLfZSU4awujHKz6lub1Tu8hCW
wHvrDmkuoCwLisYKb53VbnwmmL0QJWKHpF4jYJmW1R64Ph/Za7f9YPsbqKmj+99T
7G6F+Pqj0zeGmXzs6oTHRkgcw4bYudwZrATemXwcyJpPLCa7Ml+rTOi0OLuMJW2g
0iDOhfMcr3eidOe+UeMXdv1Y3UskyszIbmjqHY5hYXTdiqzgMd22Gf+QhWqWluE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org