Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/01EIpZ-JSGmWhl5STTl2sp3HovM.roa
File: 01EIpZ-JSGmWhl5STTl2sp3HovM.roa (raw, json)
Hash identifier: xnjqyzQSNT23uBgh41BFS+c2Iwajc1URY1hQD/aLOIw=
Subject key identifier: D3:51:08:A5:9F:89:48:69:96:86:5E:52:4D:39:76:B2:9D:C7:A2:F3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018D9EE2854C8250FC2C88DB397522D7DBE6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/01EIpZ-JSGmWhl5STTl2sp3HovM.roa
Signing time: Mon 12 Feb 2024 19:54:21 +0000
ROA not before: Mon 12 Feb 2024 19:54:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 06:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9e:e2:85:4c:82:50:fc:2c:88:db:39:75:22:d7:db:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 12 19:54:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d35108a59f89486996865e524d3976b29dc7a2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:74:e0:c8:bb:ab:32:05:78:69:8b:fe:c4:49:
56:46:36:5e:63:f6:bf:44:80:a3:bd:2c:f1:0f:26:
e0:f0:58:60:c4:77:7c:52:b7:6e:49:8d:95:4f:2c:
80:ac:b4:dc:b4:9a:44:42:1c:73:7c:b5:85:cf:a2:
3e:85:d9:0b:99:e0:fd:28:5e:b9:9c:01:4e:30:df:
50:ef:72:12:09:9e:ec:84:31:a7:12:3f:ec:c5:1d:
98:56:19:50:b3:41:bc:4d:48:7b:56:93:4a:57:ba:
2e:f3:55:30:ab:2a:dc:91:53:d8:11:84:6f:b2:1d:
76:a9:94:ea:f5:79:1e:d6:e0:01:1e:ba:8d:bd:00:
5a:9b:23:9b:58:00:1e:72:d8:84:f5:2c:22:5a:f2:
4f:21:cc:a5:e4:ca:65:ee:07:58:7f:f0:ad:87:16:
df:66:33:4f:90:8d:34:e9:fb:9a:24:94:c5:26:97:
3c:16:7d:09:54:bf:44:2e:6a:4e:18:62:2b:f0:eb:
43:b5:04:81:38:f1:9d:b8:f7:f5:27:08:ac:75:b4:
8d:cf:7e:41:9e:1b:65:e5:ff:3e:85:6a:74:ee:8c:
bd:76:4c:49:9c:dc:c1:0c:40:ad:7e:a0:f9:83:65:
94:21:cd:9c:36:34:1f:e0:d4:a9:94:41:72:b5:81:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:51:08:A5:9F:89:48:69:96:86:5E:52:4D:39:76:B2:9D:C7:A2:F3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/01EIpZ-JSGmWhl5STTl2sp3HovM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.210.0/24
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.187.0-88.216.191.255
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
80:76:04:1d:cb:2c:35:43:59:27:8b:86:c0:3e:2d:9c:da:2c:
5c:1a:96:e2:36:96:b6:dc:4f:ce:e4:44:ee:68:ea:3c:f8:35:
87:df:94:be:d9:94:94:a5:5a:9e:79:a5:4d:98:4a:ed:23:3d:
e1:87:19:6f:72:7b:97:ae:60:99:88:b0:da:71:ec:2a:2b:44:
31:84:1a:96:df:fc:33:97:90:ae:58:5f:c0:a9:32:3a:36:3c:
2b:b2:59:be:d5:93:da:09:9b:27:aa:32:82:ef:82:1e:cf:6e:
f5:91:20:44:35:36:f3:1a:05:03:6a:c1:59:7d:6d:ea:95:c6:
a7:04:2e:21:d9:16:72:4b:4a:b8:ad:54:ba:4b:9f:ea:06:d0:
c4:ce:12:f7:02:6a:b7:41:61:7b:e3:96:78:c1:ca:bd:42:11:
e6:d5:be:5a:73:93:cc:56:80:0b:28:0d:fd:86:d9:66:34:46:
58:04:79:63:e6:7e:7e:19:31:9c:24:1d:1b:08:fc:c5:68:5f:
df:ad:07:08:0f:e4:8c:12:b4:c1:54:aa:b7:a6:3b:bc:5e:74:
5c:60:e6:24:f0:64:0e:78:50:62:ba:07:c8:83:3e:04:50:44:
8b:b8:e0:06:34:de:d3:ab:41:0d:e0:b1:ae:62:ae:a4:5a:53:
42:17:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org