Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2YxJ59AKuucgJCApFabPknd8TYo.roa
File: 2YxJ59AKuucgJCApFabPknd8TYo.roa (raw, json)
Hash identifier: x783g6k858X4uMq80Qka8mHqfAKCqPYbWko2jSHya1I=
Subject key identifier: D9:8C:49:E7:D0:0A:BA:E7:20:24:20:29:15:A6:CF:92:77:7C:4D:8A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018617846376935789781F815E31D3167B9C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2YxJ59AKuucgJCApFabPknd8TYo.roa
Signing time: Fri 03 Feb 2023 13:43:17 +0000
ROA not before: Fri 03 Feb 2023 13:43:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.190.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:84:63:76:93:57:89:78:1f:81:5e:31:d3:16:7b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 3 13:43:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d98c49e7d00abae72024202915a6cf92777c4d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ae:88:d9:4a:ba:8b:5b:0b:a8:dd:a5:84:75:
01:10:cc:da:d4:fa:25:d5:2e:31:f1:70:94:a7:0c:
61:74:d8:a2:17:9a:a3:b8:40:5e:2f:e6:5b:0d:53:
f0:e3:f8:44:4c:21:ba:4b:33:7d:20:b1:07:77:f8:
c3:70:37:a8:06:73:03:69:1d:7a:c1:8e:75:73:39:
b4:b8:9b:15:1d:ba:4b:2b:ea:c5:50:1f:d2:ae:75:
51:cb:e4:77:d3:24:18:3b:02:cf:0b:85:88:80:80:
74:45:d4:64:68:ca:ad:24:ed:1c:40:1b:8e:9d:9f:
78:c4:0a:c1:20:e7:55:cb:e6:15:85:ad:4a:e9:5a:
5c:d5:06:06:09:cc:45:54:96:5d:22:56:0d:e5:62:
e5:3f:56:df:b5:32:e7:6d:3c:f4:a2:8d:f5:13:e9:
97:6f:ce:5a:73:e3:c3:a7:a2:8a:30:4a:06:cc:a3:
1c:dd:b6:02:1a:bb:1e:24:3f:a4:1b:b4:cc:f0:a1:
a4:dd:2b:3a:09:19:00:02:a0:dd:06:68:f9:d3:a0:
ae:71:b5:76:dd:f0:86:c6:64:f4:e7:68:42:b5:75:
71:14:87:d2:5a:e1:c6:e7:02:34:32:4e:f9:84:71:
c6:25:04:e1:25:8e:2c:13:39:43:43:af:d2:cf:16:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8C:49:E7:D0:0A:BA:E7:20:24:20:29:15:A6:CF:92:77:7C:4D:8A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2YxJ59AKuucgJCApFabPknd8TYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.76.0/23
84.32.79.0/24
84.32.179.0/24
84.32.212.0/24
84.32.220.0-84.32.222.255
84.32.240.0/24
84.32.243.0/24
84.32.252.0/23
88.216.17.0/24
88.216.128.0/23
88.216.132.0/23
88.216.190.0/24
88.216.215.0/24
88.216.220.0/24
88.216.228.0-88.216.239.255
Signature Algorithm: sha256WithRSAEncryption
18:c5:b9:74:6e:e8:d0:04:da:a0:8f:b0:cf:e8:66:4f:f1:76:
5f:ff:28:ab:31:5f:e7:13:f6:06:87:4a:8d:f0:39:6a:91:59:
e8:81:b4:a3:7e:29:3d:03:e1:c6:89:03:82:b9:08:22:55:ac:
51:f9:ac:68:79:b0:2e:79:7c:b4:6a:33:0c:7d:1a:93:42:33:
93:e9:95:8d:74:41:6a:9a:37:59:e3:2d:98:7b:47:10:0a:f9:
5f:47:0b:03:e2:23:09:0c:cb:be:e1:4f:06:f6:6c:fb:33:80:
ac:aa:d2:cf:c7:2d:4d:2e:c5:43:ea:32:79:dd:be:5f:7f:c0:
f3:43:64:48:70:7b:ed:70:7a:eb:c8:d9:97:a7:06:48:b8:32:
d9:c1:4d:89:e5:a7:eb:2c:76:6a:dd:04:32:c8:3e:d5:94:39:
b6:00:ee:35:96:d2:19:9e:b6:fc:24:12:0a:5f:b5:49:0f:12:
19:45:1e:dc:28:7d:d5:7a:0b:5a:82:ab:dc:05:a0:a1:7f:21:
de:dd:8c:d5:c2:00:7a:67:8e:38:60:81:a1:11:55:d6:bb:32:
64:6f:34:d1:f0:57:04:54:94:67:68:b4:1a:7d:aa:b5:e3:db:
19:b6:0e:2e:1b:3e:69:14:cf:d8:a0:73:45:ec:63:a4:b0:4d:
28:0c:0c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:44 2023 by rpki-client on console-fra.rpki-client.org