Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3-5BKDKSR3RjuoTnhl8Wqe8IztY.roa
File: 3-5BKDKSR3RjuoTnhl8Wqe8IztY.roa (raw, json)
Hash identifier: Z2vcqTHlhrV9NnTXSK45IP5ztfEJJUKF3ezGCykitAE=
Subject key identifier: DF:EE:41:28:32:92:47:74:63:BA:84:E7:86:5F:16:A9:EF:08:CE:D6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01876500C8A180398301B701748F97770C08
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3-5BKDKSR3RjuoTnhl8Wqe8IztY.roa
Signing time: Sun 09 Apr 2023 07:52:42 +0000
ROA not before: Sun 09 Apr 2023 07:52:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 84.32.65.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.210.0/24 maxlen: 24
88.216.221.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:65:00:c8:a1:80:39:83:01:b7:01:74:8f:97:77:0c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 9 07:52:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfee41283292477463ba84e7865f16a9ef08ced6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:7c:de:d1:e4:1a:fa:a8:37:ab:54:56:41:
20:09:b9:15:17:4e:7a:59:52:ce:2c:f3:8d:f0:15:
a6:27:f3:b3:11:9e:80:b3:fb:42:e5:0e:5e:59:84:
f3:61:b5:c8:dc:fc:8a:f4:a6:f3:b9:b7:d8:cb:fe:
6b:bc:5f:30:5f:bc:04:f9:98:db:4c:c1:63:bc:e1:
0d:52:8f:8b:1c:0f:50:ad:4b:c8:41:50:aa:58:55:
cd:13:dc:fb:1a:53:45:07:db:4a:3c:64:6a:79:2c:
0d:2c:68:b0:de:03:7a:bd:9b:72:d7:49:1f:86:a8:
e6:b6:39:18:89:04:aa:97:6a:de:1e:72:ce:72:d5:
81:55:df:d0:4b:3a:6b:9f:68:b4:15:17:7e:f1:ab:
97:4a:65:b6:87:31:8c:75:e2:07:8c:09:31:dc:01:
b2:81:5d:6d:8e:7e:8f:b9:2f:2b:9c:e9:6e:d0:96:
dd:9f:89:31:61:cb:5b:90:ae:99:f2:ce:85:5c:e3:
ba:35:32:19:3f:36:59:00:8e:42:f8:47:ea:39:4e:
aa:1b:b1:f4:0b:98:76:b9:42:ac:cb:95:e9:30:34:
bd:ba:69:22:c8:93:0e:1f:04:87:cf:c7:60:6e:c1:
c0:e3:c0:aa:8b:a9:d0:62:93:92:ec:a7:27:7d:d9:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EE:41:28:32:92:47:74:63:BA:84:E7:86:5F:16:A9:EF:08:CE:D6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3-5BKDKSR3RjuoTnhl8Wqe8IztY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.26.0/24
84.32.29.0-84.32.30.255
84.32.45.0/24
84.32.65.0/24
84.32.76.0/23
84.32.79.0/24
84.32.92.0/24
84.32.94.0/24
84.32.155.0/24
84.32.210.0-84.32.212.255
84.32.241.0/24
84.32.243.0/24
84.32.255.0/24
88.216.105.0/24
88.216.190.0/23
88.216.198.0/24
88.216.211.0/24
88.216.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:92:eb:f2:8f:a8:c5:86:cf:3f:07:e1:ae:a0:97:f7:79:83:
8f:f6:3a:ed:f7:06:1f:87:66:71:20:10:8a:ba:8f:f4:56:bd:
62:15:25:4b:25:a1:84:b7:57:34:7c:84:9a:8f:e7:b4:e1:5e:
97:2b:2d:d6:9a:fa:e5:40:0b:69:2d:15:5c:2c:5e:e3:63:8b:
71:34:eb:ec:b4:dc:14:7a:bc:be:52:a6:ee:92:16:f8:9a:61:
b3:af:c6:e6:9e:fb:41:ec:88:ce:96:0a:24:c4:ef:2c:ea:01:
92:b8:38:9a:25:0b:4b:7d:d7:79:e5:1e:bf:70:21:48:14:f0:
45:2e:3c:14:91:29:de:8f:2c:07:ae:12:41:bb:7b:53:44:f3:
f5:6f:88:9e:97:0b:51:2d:c1:ba:64:b1:a2:bf:ad:eb:9f:0a:
7d:f4:ea:57:73:66:60:fa:c3:c0:b9:9f:27:c7:dc:7c:d0:39:
50:c3:af:63:c3:63:d1:0e:75:af:aa:f9:78:e4:16:4c:1c:c2:
3d:af:9b:ad:86:71:6a:9e:2f:0f:66:af:a9:59:f8:05:f1:74:
f9:54:be:1f:08:a9:b9:24:60:3d:c9:86:74:79:85:59:78:be:
c7:a3:cf:fc:39:eb:f8:2a:25:08:9c:da:77:10:c5:17:3e:c7:
16:0b:1e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:44 2023 by rpki-client on console-fra.rpki-client.org