Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2O0wA9hs4MnrH6SEINZf9k0SVqM.roa
File: 2O0wA9hs4MnrH6SEINZf9k0SVqM.roa (raw, json)
Hash identifier: 6dJqygDjfzZFGbuIYhmGP4eD8mNRCykwofj455w3CVE=
Subject key identifier: D8:ED:30:03:D8:6C:E0:C9:EB:1F:A4:84:20:D6:5F:F6:4D:12:56:A3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188760C1ACAED880AF13B414CD2E85BB683
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2O0wA9hs4MnrH6SEINZf9k0SVqM.roa
Signing time: Thu 01 Jun 2023 08:21:24 +0000
ROA not before: Thu 01 Jun 2023 08:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 84.32.76.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:0c:1a:ca:ed:88:0a:f1:3b:41:4c:d2:e8:5b:b6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 1 08:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8ed3003d86ce0c9eb1fa48420d65ff64d1256a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:43:9c:a3:ee:aa:1f:43:84:6b:93:9d:a0:fb:
c8:61:41:2e:ce:f4:86:c2:0a:23:4a:6a:6d:71:5d:
0a:c8:38:9e:02:8f:0c:41:58:62:36:2c:2c:22:87:
3c:8d:46:2e:44:e6:0c:d4:9f:ea:c6:25:01:c3:fd:
c3:a2:3b:71:17:1f:40:76:95:66:4d:c9:59:00:7d:
f5:1d:a1:1b:0a:b2:1a:12:7c:0b:85:9d:30:1d:7f:
c8:4f:f4:89:0e:01:ad:4f:16:60:b6:23:bb:54:c2:
f7:9a:69:e7:ad:c4:7d:0c:71:8b:b5:9f:ab:7e:ad:
12:a6:5e:65:c3:fc:04:89:19:13:68:f3:b7:b5:a0:
26:a5:87:eb:fa:c7:cf:44:e3:9c:6a:17:cd:95:23:
30:74:60:bf:8f:3c:00:b2:ff:a1:21:50:55:ae:86:
85:c9:62:b4:f4:b9:e1:b6:eb:a6:92:82:6d:db:71:
ff:a4:26:a9:eb:f4:ce:43:c6:ea:f1:84:d1:a6:b2:
c4:d4:50:17:83:f5:eb:90:45:9e:b3:26:0f:67:b9:
6c:1f:6d:dd:43:5a:31:03:6a:a6:36:be:1e:56:98:
d9:df:8a:c9:4f:df:0a:64:4f:27:3a:c2:ca:04:6b:
70:98:62:e8:8d:06:1f:e3:b6:72:df:e2:62:62:92:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:ED:30:03:D8:6C:E0:C9:EB:1F:A4:84:20:D6:5F:F6:4D:12:56:A3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2O0wA9hs4MnrH6SEINZf9k0SVqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.26.0/24
84.32.29.0-84.32.30.255
84.32.45.0/24
84.32.76.0/24
84.32.79.0/24
84.32.92.0/24
84.32.94.0/24
84.32.155.0/24
84.32.210.0-84.32.212.255
84.32.241.0/24
84.32.243.0/24
84.32.255.0/24
88.216.190.0/23
88.216.198.0/24
88.216.211.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b6:31:8d:f1:15:83:79:7f:45:45:0d:79:8c:b9:91:bd:4e:
c5:94:44:15:a8:b2:5b:9a:b3:c9:22:11:d7:63:e5:4a:b8:d8:
31:86:3c:4c:a1:22:79:03:3d:c8:c6:61:73:f5:6e:32:50:f8:
a2:db:96:d2:9f:e1:4e:86:13:4c:94:26:9f:b2:fb:59:9d:31:
54:e2:eb:65:d1:50:7b:46:5d:77:6e:33:71:40:a6:44:9e:69:
83:12:df:35:d6:14:e6:c2:5b:98:67:f6:cb:b5:ab:95:f0:86:
88:ff:5c:9e:b7:9b:b8:80:fd:54:11:69:b3:f4:bf:04:6f:76:
87:3a:20:82:75:34:e8:61:0b:ae:10:51:46:fb:ff:5f:4b:4f:
6a:5c:05:5c:28:30:9f:b5:40:e4:0f:0e:a7:59:7c:d3:e1:f5:
3e:ac:0f:55:e0:6d:c0:41:0b:87:54:40:b6:db:2c:3f:39:02:
15:f0:c4:fc:02:d7:bc:98:10:40:54:5f:d7:35:1d:59:1d:ff:
65:41:5d:6a:cf:ba:5a:b5:d3:79:29:9e:cb:03:a8:ac:bb:c0:
52:83:82:35:f5:6b:7c:50:e9:81:b2:bb:bf:03:70:bd:dc:ca:
f5:10:58:59:c8:fd:25:40:ae:b7:28:fb:8f:3e:7f:2e:1c:1c:
88:91:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:44 2023 by rpki-client on console-fra.rpki-client.org