Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/4eVYsjNHfdepYmxK7lTDYS5UIU8.roa
File: 4eVYsjNHfdepYmxK7lTDYS5UIU8.roa (raw, json)
Hash identifier: tyQnr1obhvEN82MBUCnxawXw9jFzJI4K47gXcaEbigA=
Subject key identifier: E1:E5:58:B2:33:47:7D:D7:A9:62:6C:4A:EE:54:C3:61:2E:54:21:4F
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01884ADEF14E744545814EA2CA4E79BBEA83
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/4eVYsjNHfdepYmxK7lTDYS5UIU8.roa
Signing time: Tue 23 May 2023 23:08:24 +0000
ROA not before: Tue 23 May 2023 23:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 84.247.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4a:de:f1:4e:74:45:45:81:4e:a2:ca:4e:79:bb:ea:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: May 23 23:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1e558b233477dd7a9626c4aee54c3612e54214f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:9c:b6:c9:92:e5:8b:ee:fa:cd:ab:8a:d3:
ed:68:4e:3f:07:77:f4:b1:bd:9e:d8:a5:8f:1b:d5:
1c:c2:2a:d7:c2:b7:ae:09:27:75:a8:3c:94:a2:3c:
72:85:a1:e5:8e:00:dd:f0:35:f3:cc:bb:58:84:d1:
8c:21:b7:61:ec:6a:2c:ea:8b:11:43:49:4c:59:db:
38:ca:e7:b9:16:7a:ca:87:8e:00:81:02:a6:5c:e3:
a7:14:f4:5c:f0:48:71:c2:8b:0b:1b:1c:24:c4:b6:
1d:8a:e9:92:c0:7c:04:d0:0a:b1:90:e0:e6:2a:db:
a4:e3:71:ca:12:94:88:73:66:2c:43:0d:61:0a:84:
12:5d:5e:23:ba:88:4b:d2:e5:0c:e8:cc:6a:a6:94:
5d:27:87:bd:90:41:ca:1d:a9:9c:c7:cc:8b:37:fe:
a4:a0:1b:aa:3e:b2:69:19:c2:d4:00:26:b3:7d:07:
74:38:86:52:20:11:75:e1:3c:54:d9:2e:3a:33:53:
b1:7f:3c:5a:92:28:c2:79:2a:11:43:6d:7f:b1:e2:
f7:88:10:1f:8c:7e:e0:86:e7:36:d2:d3:22:72:6f:
58:c1:a3:e7:d3:63:7c:05:c5:09:84:b3:f1:1a:54:
6b:44:e6:c9:20:4f:49:36:9f:db:ff:4d:45:a6:6f:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E5:58:B2:33:47:7D:D7:A9:62:6C:4A:EE:54:C3:61:2E:54:21:4F
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/4eVYsjNHfdepYmxK7lTDYS5UIU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.20.0/24
Signature Algorithm: sha256WithRSAEncryption
15:27:98:ce:04:31:8c:b1:da:7d:75:73:e5:e1:aa:bd:6a:5b:
1e:5c:1b:2a:25:74:05:3d:12:0d:8a:ba:0c:cc:7c:2f:a1:cd:
69:0d:9c:b8:8c:b8:d8:43:09:8b:9b:ff:63:81:68:bd:27:51:
07:12:f1:cd:db:bd:b5:1d:41:0d:78:19:2c:aa:cc:35:6a:9d:
b7:c4:ae:e3:15:dc:4b:c4:7e:7b:9a:3a:62:fa:15:ee:cb:17:
cb:99:26:86:aa:01:43:5b:4e:0f:32:de:47:d5:9b:54:8e:22:
e4:b5:d6:26:bd:5b:81:86:21:26:dd:21:ee:4c:95:8a:0e:e5:
be:89:e3:4f:5f:26:cc:a9:68:82:68:ee:2c:3a:77:51:48:a3:
88:13:fa:78:5a:7e:38:6e:42:5e:a4:39:32:72:c3:fc:90:c5:
3b:f2:bc:9a:7a:62:d3:9d:39:d8:c3:40:63:57:80:72:5c:de:
52:ab:47:2f:94:a2:e1:d0:b4:32:65:b0:4e:d4:05:c3:5e:98:
15:d7:87:08:2d:eb:dd:11:46:e8:7e:21:b9:ec:b7:62:8b:a1:
dc:6b:1b:2a:70:ca:0e:f6:d4:76:65:b1:10:c1:73:54:8b:2d:
51:d6:3b:0c:bd:1f:0e:55:d9:b8:bf:79:1b:0a:01:a0:ca:c3:
b4:aa:37:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhK3vFOdEVFgU6iyk55u+qDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMwNTIzMjMwODI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWU1NThiMjMzNDc3ZGQ3YTk2MjZjNGFlZTU0YzM2MTJlNTQyMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb2ctsmS5Yvu+s2ritPtaE4/B3f0
sb2e2KWPG9UcwirXwreuCSd1qDyUojxyhaHljgDd8DXzzLtYhNGMIbdh7Gos6osR
Q0lMWds4yue5FnrKh44AgQKmXOOnFPRc8EhxwosLGxwkxLYdiumSwHwE0AqxkODm
Ktuk43HKEpSIc2YsQw1hCoQSXV4juohL0uUM6MxqppRdJ4e9kEHKHamcx8yLN/6k
oBuqPrJpGcLUACazfQd0OIZSIBF14TxU2S46M1OxfzxakijCeSoRQ21/seL3iBAf
jH7ghuc20tMicm9YwaPn02N8BcUJhLPxGlRrRObJIE9JNp/b/01Fpm9xSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOHlWLIzR33XqWJsSu5Uw2EuVCFPMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvNGVWWXNqTkhmZGVwWW14SzdsVERZUzVVSVU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPcUMA0G
CSqGSIb3DQEBCwUAA4IBAQAVJ5jOBDGMsdp9dXPl4aq9alseXBsqJXQFPRINiroM
zHwvoc1pDZy4jLjYQwmLm/9jgWi9J1EHEvHN2721HUENeBksqsw1ap23xK7jFdxL
xH57mjpi+hXuyxfLmSaGqgFDW04PMt5H1ZtUjiLktdYmvVuBhiEm3SHuTJWKDuW+
ieNPXybMqWiCaO4sOndRSKOIE/p4Wn44bkJepDkycsP8kMU78ryaemLTnTnYw0Bj
V4ByXN5Sq0cvlKLh0LQyZbBO1AXDXpgV14cILevdEUbofiG57Ldii6HcaxsqcMoO
9tR2ZbEQwXNUiy1R1jsMvR8OVdm4v3kbCgGgysO0qjcp
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org