Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/12RE_WNc6uY8cEaYJOOpnLstAA0.roa
File: 12RE_WNc6uY8cEaYJOOpnLstAA0.roa (raw, json)
Hash identifier: zul7LjKIpeRs3Gf2DAVOS0/rWp0ukjSoWBXBAHZtMMc=
Subject key identifier: D7:64:44:FD:63:5C:EA:E6:3C:70:46:98:24:E3:A9:9C:BB:2D:00:0D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01865523D88A76E04A6376B13DFDD5577D08
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/12RE_WNc6uY8cEaYJOOpnLstAA0.roa
Signing time: Wed 15 Feb 2023 12:54:17 +0000
ROA not before: Wed 15 Feb 2023 12:54:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 84.32.71.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Feb 2023 18:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:23:d8:8a:76:e0:4a:63:76:b1:3d:fd:d5:57:7d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 15 12:54:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d76444fd635ceae63c70469824e3a99cbb2d000d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a3:57:53:8d:8d:fa:24:77:46:e8:cd:0d:63:
24:11:ee:57:f7:1d:19:2d:6f:cf:49:81:93:6d:06:
2d:bc:fd:75:16:a7:c9:28:78:9b:35:9d:41:eb:48:
f9:d0:a2:c4:0b:2f:ae:f5:bf:37:5c:20:f7:84:6f:
a5:93:81:ec:20:c8:ac:85:0a:8c:a7:c7:65:60:0d:
81:8f:df:fa:de:65:8a:26:cb:90:c1:9d:a4:79:cd:
77:0f:51:e0:74:bb:41:58:62:57:ed:dc:1c:d3:93:
7e:e9:32:b8:e3:dd:c5:56:67:91:48:fe:77:82:22:
e8:02:d8:c0:9a:32:31:fe:78:92:8f:7f:7f:bc:c2:
ad:ad:25:fa:2f:7f:63:ec:87:08:fa:79:ed:09:ea:
4b:2f:a0:12:5e:64:83:2b:b4:fc:d4:3c:1a:19:6f:
60:22:06:7e:46:e4:b0:70:30:56:13:02:bd:26:49:
33:bb:d9:a3:5d:89:1c:6b:68:be:44:4c:5f:85:4a:
01:f0:74:92:3c:07:6c:b9:9a:ca:e9:9f:fc:69:7c:
e1:45:83:84:86:8d:ca:92:de:b5:fd:36:89:9e:52:
01:40:20:9f:3e:a7:a6:85:07:c3:9e:cb:9c:6a:09:
17:4c:77:40:2a:14:bf:7d:6b:02:a4:ec:0e:13:83:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:64:44:FD:63:5C:EA:E6:3C:70:46:98:24:E3:A9:9C:BB:2D:00:0D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/12RE_WNc6uY8cEaYJOOpnLstAA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.50.0/24
84.32.71.0/24
84.32.88.0/24
84.32.108.0/24
84.32.150.0/23
84.32.220.0/24
84.32.232.0/24
84.32.239.0/24
84.32.245.0/24
88.216.3.0/24
88.216.32.0/24
88.216.46.0/24
88.216.92.0/24
88.216.199.0/24
88.216.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:36:ef:63:49:f5:d3:da:d6:d7:d0:58:31:e3:bc:c4:67:00:
74:57:c6:be:b4:e2:33:bb:4c:cc:dc:fd:c4:32:f3:f9:2b:ae:
b1:70:3d:14:32:40:f1:1f:e0:bd:c6:81:3b:7d:f8:45:99:0a:
d1:a1:91:86:a9:14:7f:2c:9f:52:d1:6d:78:94:84:22:51:10:
e2:ef:5d:99:b9:83:b7:c1:12:75:61:15:d0:49:15:e6:03:cf:
48:ac:bf:51:83:41:13:85:c0:64:62:b9:ec:3f:cb:d5:fd:d2:
e4:37:0a:d2:c3:33:91:a5:62:4f:54:32:34:22:f3:fb:f6:0d:
d5:07:b8:40:65:8a:5b:2b:25:43:c5:6a:e9:ad:df:ff:33:51:
a0:ed:de:16:f4:c2:d2:89:36:eb:b1:2c:88:4d:0b:d2:3a:14:
de:ee:66:11:e1:6b:e3:eb:8d:ef:da:e2:96:19:bd:ed:46:6a:
b1:4d:32:af:f3:86:7e:7a:cc:4a:1a:fe:28:d5:2d:4b:5b:fa:
a6:ca:42:80:98:df:a6:e1:d1:d7:36:f2:f1:a0:15:ce:4e:67:
2f:de:25:9d:85:e3:e8:0a:21:85:70:3e:af:8f:e0:c7:b8:e5:
12:20:03:52:ec:44:4c:11:57:07:a7:8d:23:3d:d2:15:a6:51:
6b:ce:41:af
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYZVI9iKduBKY3axPf3VV30IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMjE1MTI1NDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzY0NDRmZDYzNWNlYWU2M2M3MDQ2OTgyNGUzYTk5Y2JiMmQwMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKNXU42N+iR3RujNDWMkEe5X9x0Z
LW/PSYGTbQYtvP11FqfJKHibNZ1B60j50KLECy+u9b83XCD3hG+lk4HsIMishQqM
p8dlYA2Bj9/63mWKJsuQwZ2kec13D1HgdLtBWGJX7dwc05N+6TK4493FVmeRSP53
giLoAtjAmjIx/niSj39/vMKtrSX6L39j7IcI+nntCepLL6ASXmSDK7T81DwaGW9g
IgZ+RuSwcDBWEwK9Jkkzu9mjXYkca2i+RExfhUoB8HSSPAdsuZrK6Z/8aXzhRYOE
ho3Kkt61/TaJnlIBQCCfPqemhQfDnsucagkXTHdAKhS/fWsCpOwOE4N2aQIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFNdkRP1jXOrmPHBGmCTjqZy7LQANMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvMTJSRV9XTmM2dVk4Y0VhWUpPT3BuTHN0QUEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAVCAIAwQA
VCAKAwQAVCAyAwQAVCBHAwQAVCBYAwQAVCBsAwQBVCCWAwQAVCDcAwQAVCDoAwQA
VCDvAwQAVCD1AwQAWNgDAwQAWNggAwQAWNguAwQAWNhcAwQAWNjHAwQAWNjSMA0G
CSqGSIb3DQEBCwUAA4IBAQA8Nu9jSfXT2tbX0Fgx47zEZwB0V8a+tOIzu0zM3P3E
MvP5K66xcD0UMkDxH+C9xoE7ffhFmQrRoZGGqRR/LJ9S0W14lIQiURDi712ZuYO3
wRJ1YRXQSRXmA89IrL9Rg0EThcBkYrnsP8vV/dLkNwrSwzORpWJPVDI0IvP79g3V
B7hAZYpbKyVDxWrprd//M1Gg7d4W9MLSiTbrsSyITQvSOhTe7mYR4Wvj643v2uKW
Gb3tRmqxTTKv84Z+esxKGv4o1S1LW/qmykKAmN+m4dHXNvLxoBXOTmcv3iWdhePo
CiGFcD6vj+DHuOUSIANS7ERMEVcHp40jPdIVplFrzkGv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org