Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3ZhDfmYsqzRnrp-mz7Y3hMG7l-Q.roa
File: 3ZhDfmYsqzRnrp-mz7Y3hMG7l-Q.roa (raw, json)
Hash identifier: CrdtE13Pk7/ZctlQoSh+83rjESlRa3Regw8SPmPiZtE=
Subject key identifier: DD:98:43:7E:66:2C:AB:34:67:AE:9F:A6:CF:B6:37:84:C1:BB:97:E4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01867CF1A81F2E2F9356B037E9D7680CD718
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3ZhDfmYsqzRnrp-mz7Y3hMG7l-Q.roa
Signing time: Thu 23 Feb 2023 06:24:17 +0000
ROA not before: Thu 23 Feb 2023 06:24:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.186.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.32.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Feb 2023 12:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:f1:a8:1f:2e:2f:93:56:b0:37:e9:d7:68:0c:d7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 23 06:24:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd98437e662cab3467ae9fa6cfb63784c1bb97e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:df:89:47:a2:9a:36:f4:4d:f2:0b:48:4c:
47:5a:2b:f4:71:15:99:75:2f:61:72:f5:9c:ce:58:
41:3a:8d:96:ba:7e:9b:80:1c:54:29:88:37:35:fa:
03:22:f7:4d:09:e2:e3:e1:71:a4:39:2d:1d:94:3c:
18:88:7f:a2:8d:2c:4a:bf:38:1e:39:44:56:56:96:
08:34:47:e3:6f:a2:25:98:43:e7:7d:0c:2d:73:4a:
f7:fc:35:71:7e:ff:d3:5a:c5:7e:ea:86:75:f0:75:
56:10:7c:df:b4:e2:ef:98:9b:4f:33:05:69:9f:a5:
83:4f:00:9c:3e:c9:e5:76:ed:75:27:26:cb:21:5d:
30:59:8c:26:6c:36:b8:cc:3b:a7:65:34:e3:d8:87:
be:8b:50:3d:6c:38:ca:36:82:b0:14:0b:1a:7d:59:
16:e7:8b:9a:13:bf:97:ba:9c:79:5c:54:65:9f:9f:
b6:7d:ad:e4:f0:0d:17:3c:91:68:66:49:58:07:0d:
f5:ce:64:2b:1a:a7:50:45:1a:0c:0b:5a:aa:4e:78:
68:ea:16:cf:6c:fe:30:17:eb:f8:ba:ec:3f:a6:ee:
3f:6f:1d:c3:98:e7:9b:bd:de:77:48:c2:b0:db:eb:
b5:15:ca:be:12:8f:1e:ac:7a:1c:0f:73:06:91:f8:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:98:43:7E:66:2C:AB:34:67:AE:9F:A6:CF:B6:37:84:C1:BB:97:E4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3ZhDfmYsqzRnrp-mz7Y3hMG7l-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.24.0/22
84.32.30.0/24
84.32.32.0/24
84.32.46.0/24
84.32.71.0/24
84.32.76.0/23
84.32.79.0/24
84.32.88.0/24
84.32.150.0/23
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0-84.32.222.255
84.32.232.0/24
84.32.239.0-84.32.240.255
84.32.242.0/23
84.32.245.0/24
84.32.252.0/23
88.216.3.0/24
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.92.0/23
88.216.128.0/24
88.216.132.0-88.216.134.255
88.216.186.0/24
88.216.189.0-88.216.190.255
88.216.199.0/24
88.216.215.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
78:fb:06:e1:8c:53:4b:e2:2f:fb:7a:b2:d8:f2:8a:2c:e6:81:
af:96:ca:40:3f:82:8e:32:44:35:16:e6:bc:17:b5:08:3d:01:
44:1f:59:2c:5d:e3:63:1c:23:fb:1d:00:76:b1:62:58:5b:c1:
08:ec:e8:ea:c9:12:52:48:1c:6b:2a:3d:09:9a:d2:bd:9e:55:
71:50:c1:47:bc:d0:57:13:ea:10:3a:a3:11:52:4f:22:f2:4f:
f0:29:e6:7b:20:13:5d:c7:f9:d2:ea:f6:02:26:c9:dd:2e:61:
fa:09:ef:94:d9:22:f3:aa:a8:a7:82:9d:37:de:2a:f9:d4:39:
32:8e:4d:ca:4a:56:14:30:7e:62:c9:ec:e0:12:6f:8d:1f:4d:
8c:e6:5e:f8:65:a7:74:6e:67:49:0b:dd:b7:fd:6d:9d:60:72:
9a:79:a5:b3:a1:b5:b1:0e:1e:5f:cb:98:a6:c4:19:a8:8d:2e:
eb:f2:2f:b4:19:79:73:d9:bc:2d:54:48:67:15:1b:59:16:9e:
a4:ba:08:70:dd:95:ba:42:1d:48:bf:4f:e3:51:15:24:0d:a8:
27:a8:22:d2:68:e8:1e:24:08:55:a5:06:68:95:3c:e7:6c:e5:
c4:fb:30:73:65:53:a0:09:09:dd:7f:67:25:14:79:1f:20:5b:
96:03:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org