Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-B6vB8kWBeZByLdf2QQtrYq80NU.roa
File: 1-B6vB8kWBeZByLdf2QQtrYq80NU.roa (raw, json)
Hash identifier: LwEyKCW3TT/fsdC6xwxWRPu1xqrZU6GTp+rrG6V7cYk=
Subject key identifier: F8:1E:AF:07:C9:16:05:E6:41:C8:B7:5F:D9:04:2D:AD:8A:BC:D0:D5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFCED1DB69FBCA536461AB4E16C997
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-B6vB8kWBeZByLdf2QQtrYq80NU.roa
Signing time: Sun 01 Jan 2023 18:54:53 +0000
ROA not before: Sun 01 Jan 2023 18:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
84.32.172.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jan 2023 07:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:ce:d1:db:69:fb:ca:53:64:61:ab:4e:16:c9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f81eaf07c91605e641c8b75fd9042dad8abcd0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:23:e4:51:61:39:a5:57:16:05:31:9b:af:
6f:79:00:c6:9c:60:3b:a9:89:55:bd:1d:e1:7b:c7:
da:74:3f:74:6d:e3:27:be:50:90:6c:27:40:62:24:
1e:e4:f4:55:2f:3e:41:19:91:d4:68:d4:1a:3e:27:
e9:60:ed:de:e7:d8:7b:38:0e:1d:b5:59:f5:91:15:
0b:0e:94:b7:8f:73:8e:b5:2d:de:42:42:74:fa:66:
a3:81:4b:b9:3d:89:63:a7:3a:dc:79:96:9b:41:31:
14:12:87:fa:95:a4:02:2e:e6:a4:4e:f1:2c:bf:de:
c0:8f:81:ac:4b:63:77:77:9c:76:89:e4:3d:9b:0e:
6f:ce:48:77:17:8c:8c:f9:32:05:fd:6a:84:9c:55:
4b:ac:75:b4:02:b1:c7:6e:81:20:ae:93:06:fe:3a:
1c:b2:05:ec:31:7c:3f:97:e5:4b:64:7a:52:b3:10:
96:80:36:e2:1a:ca:57:71:76:df:8e:2d:2e:e1:41:
93:9d:54:a2:f1:75:20:47:fc:45:6a:67:1d:0a:7d:
f5:14:c6:1c:7e:0c:80:17:f8:d2:2d:b7:4f:b0:90:
58:5f:9e:dd:46:df:63:58:45:a3:0d:1d:74:5e:c8:
29:17:93:83:8c:8e:35:63:f0:93:94:e6:79:17:84:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1E:AF:07:C9:16:05:E6:41:C8:B7:5F:D9:04:2D:AD:8A:BC:D0:D5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-B6vB8kWBeZByLdf2QQtrYq80NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.31.0/24
84.32.64.0/24
84.32.89.0/24
84.32.148.0/23
84.32.152.0-84.32.154.255
84.32.156.0/22
84.32.172.0/24
84.32.175.0-84.32.176.255
84.32.250.0/24
88.216.20.0/24
88.216.23.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.185.0/24
88.216.213.0/24
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b5:51:0f:7b:39:2a:2d:8b:3c:55:37:0c:70:dd:ea:c9:9a:
3c:c5:34:80:77:e4:ba:da:50:03:99:da:14:a6:99:ef:6a:37:
90:06:a7:76:4e:02:86:33:e1:0e:db:b9:26:9c:a2:34:55:42:
87:48:df:de:61:18:57:43:9e:f8:f3:08:95:20:ea:d5:5e:4b:
5c:2a:1d:c4:4b:32:4c:4e:84:33:d5:df:25:8f:78:e6:60:5b:
69:94:7e:c2:2c:2a:00:10:f9:a5:35:33:f3:fa:62:45:1d:94:
ae:96:c6:e1:e6:dc:d4:4f:92:b7:51:95:da:f4:05:d3:d7:fc:
1b:b7:cb:d3:49:2f:5f:98:aa:81:92:e5:9c:49:fc:cf:77:ee:
21:4c:ce:d1:82:a4:76:12:ac:f5:08:a2:13:07:8b:95:3f:23:
3a:07:31:fb:ce:0d:b2:b0:02:2c:b0:3f:34:31:57:08:79:af:
68:ba:b0:3b:6c:74:9c:0a:0e:d5:c2:a3:4b:26:b1:a3:89:6e:
4e:c8:e7:97:2a:60:84:04:3f:dc:b0:3c:61:f8:ae:35:58:e2:
95:d7:8e:05:c9:63:77:5d:45:43:94:92:47:80:be:08:ab:00:
3f:2b:01:69:f9:ad:51:23:a0:34:5e:08:d4:31:be:1f:fa:25:
0b:27:65:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org