Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2obI19gdk84vi1BTFPFBgBIHBpM.roa
File: 2obI19gdk84vi1BTFPFBgBIHBpM.roa (raw, json)
Hash identifier: mGBouWEyawAcwqFuYtz084s65H72rj68jf1n2UQM95I=
Subject key identifier: DA:86:C8:D7:D8:1D:93:CE:2F:8B:50:53:14:F1:41:80:12:07:06:93
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185AB589CD64501802B64BDAF2C752E4263
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2obI19gdk84vi1BTFPFBgBIHBpM.roa
Signing time: Fri 13 Jan 2023 13:36:29 +0000
ROA not before: Fri 13 Jan 2023 13:36:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.108.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
84.32.172.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ab:58:9c:d6:45:01:80:2b:64:bd:af:2c:75:2e:42:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 13 13:36:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da86c8d7d81d93ce2f8b505314f1418012070693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ef:d4:26:b7:5d:25:be:d8:40:54:4d:ac:68:
ce:1c:26:da:3a:37:58:1b:ab:48:bf:d2:fa:cc:b6:
35:a7:b4:d2:34:4c:d3:45:c1:fb:2b:03:0e:95:83:
ab:6b:e4:6d:75:12:3d:3f:01:29:b3:eb:06:4c:3b:
ce:02:8c:0a:6a:1f:4c:a8:06:03:a9:ea:39:c9:3f:
a5:65:da:c8:0b:c0:7e:78:8b:b1:fa:2f:25:43:a1:
cc:11:c8:12:41:91:9b:15:bc:98:7b:67:1c:7f:af:
e1:38:93:19:ec:6b:b9:42:96:ea:4b:38:87:c4:c7:
79:16:10:e0:27:c0:1b:84:82:b9:f5:db:06:56:b4:
f2:78:14:66:bb:44:91:9d:ca:6d:92:0a:54:6f:df:
6a:fb:4d:f7:af:0d:66:e6:87:82:7d:71:ad:49:dc:
23:1e:84:ef:15:b3:f8:73:80:19:d2:6a:03:00:d3:
87:8b:84:29:a3:cb:14:ec:3c:26:b4:dd:06:26:4d:
52:14:99:f2:0b:4a:7c:72:5b:ac:45:c5:7c:dd:4c:
dc:40:d9:2f:5f:b2:a9:fe:d9:74:20:48:5e:ae:cf:
a3:10:f2:a5:39:ec:26:55:d5:a6:f5:06:9e:5d:60:
c1:dd:49:a9:ff:61:cd:d8:71:54:92:ff:c2:37:b0:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:C8:D7:D8:1D:93:CE:2F:8B:50:53:14:F1:41:80:12:07:06:93
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2obI19gdk84vi1BTFPFBgBIHBpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.25.0/24
84.32.31.0/24
84.32.64.0/24
84.32.148.0/23
84.32.152.0-84.32.154.255
84.32.156.0/22
84.32.172.0/24
84.32.175.0-84.32.176.255
84.32.250.0/24
88.216.20.0/24
88.216.23.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.108.0/24
88.216.111.0/24
88.216.131.0/24
88.216.185.0/24
88.216.213.0/24
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ff:e6:28:48:ba:6b:d6:42:63:03:57:20:96:ea:3d:0f:eb:
18:14:4c:5e:f2:21:b4:24:1f:b4:a3:ce:19:ee:b5:06:9a:aa:
8a:c4:33:e3:6a:5b:a8:71:1c:63:e8:c1:99:3f:7c:4c:fd:2b:
20:fa:e7:4f:fa:8f:7f:47:3e:1d:cf:15:a6:6f:d4:58:59:07:
a3:cf:bb:61:e1:86:af:ed:7f:2c:ab:bc:13:09:cc:3a:1a:b3:
ee:54:fe:59:21:ee:bd:45:e0:07:c3:80:a7:6c:c1:83:45:fc:
df:39:b5:a1:10:08:52:ac:81:72:75:0b:0d:8d:09:f4:1a:34:
57:72:1a:58:99:a6:94:0c:b3:c2:af:59:f9:26:93:61:f2:96:
17:70:8f:d3:e0:9d:98:c5:e6:1b:87:99:53:02:85:b1:6e:7f:
61:1a:51:7f:02:39:70:23:99:1d:54:b4:60:23:04:8c:dd:ef:
28:e3:66:f9:62:a8:cc:d3:9f:ca:b7:98:0b:3e:09:3e:af:db:
e0:21:ae:85:66:bf:90:ac:50:80:b5:d2:7e:68:c2:2b:05:b1:
9e:80:9f:69:d0:dd:83:89:e6:5e:a7:af:2b:7b:06:53:4b:47:
ad:f9:ef:fd:5f:e6:2b:60:f1:6f:12:18:5c:0e:45:93:9a:a7:
8c:cb:ad:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:44 2023 by rpki-client on console-fra.rpki-client.org