Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4Kw_A7gNOiX7f0gtYCId9h6Lg94.roa
File: 4Kw_A7gNOiX7f0gtYCId9h6Lg94.roa (raw, json)
Hash identifier: ra8xdEzfzljuNAeeFmCUqpCzi/HgAkp36NZMptEX85o=
Subject key identifier: E0:AC:3F:03:B8:0D:3A:25:FB:7F:48:2D:60:22:1D:F6:1E:8B:83:DE
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018C7BAE8DA3A604C9E07E89407B313561E1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4Kw_A7gNOiX7f0gtYCId9h6Lg94.roa
Signing time: Mon 18 Dec 2023 06:48:06 +0000
ROA not before: Mon 18 Dec 2023 06:48:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.180.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
84.32.236.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
88.216.93.0/24 maxlen: 24
84.32.210.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.43.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 16:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:ae:8d:a3:a6:04:c9:e0:7e:89:40:7b:31:35:61:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 18 06:48:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0ac3f03b80d3a25fb7f482d60221df61e8b83de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7d:b0:f9:5d:0b:d5:9a:f0:e3:d3:a1:78:b3:
66:79:c1:7b:4d:b7:83:38:7d:8a:e5:89:c5:c8:8e:
14:47:e5:7d:84:d2:ff:3a:0d:2e:e4:5a:d1:8d:12:
17:a6:24:8f:70:c2:42:e0:d1:fa:9a:8b:af:72:5e:
24:a6:b8:6b:d3:32:a7:35:38:06:fe:e4:63:55:23:
e5:ad:3d:9d:09:76:c1:86:87:de:0e:19:4b:80:8c:
c8:5b:43:79:cc:4a:bd:9d:d2:47:68:c5:3b:5a:c6:
58:7b:65:66:79:6f:59:07:7b:fa:72:20:b6:ad:68:
f7:2d:88:1d:ac:97:18:11:f3:3e:8f:df:c7:40:db:
86:e6:7a:47:1e:9e:02:aa:d8:cd:38:cd:5e:27:e6:
52:9a:34:6d:68:61:89:a7:3b:dc:0b:81:d4:03:40:
f6:64:bc:fe:11:53:82:a4:34:36:ad:21:2b:5c:ae:
4a:a0:4f:6a:29:e0:e8:b6:43:3d:7e:c7:42:7c:76:
2a:da:40:e2:f5:86:7c:ce:fd:d7:59:cf:7e:4a:2f:
25:4f:5e:02:9b:97:0f:91:a7:47:92:b7:bf:d6:21:
2c:6b:4a:8e:82:01:58:52:a8:dc:e0:74:f5:23:90:
85:60:9a:3d:4b:99:fa:55:f7:34:28:ec:bf:eb:57:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AC:3F:03:B8:0D:3A:25:FB:7F:48:2D:60:22:1D:F6:1E:8B:83:DE
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4Kw_A7gNOiX7f0gtYCId9h6Lg94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.66.0/24
84.32.83.0/24
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.178.0/23
84.32.210.0/24
84.32.214.0/23
84.32.236.0/24
84.32.244.0/22
84.32.249.0/24
88.216.22.0/23
88.216.43.0-88.216.45.255
88.216.93.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
Signature Algorithm: sha256WithRSAEncryption
87:b1:a7:f3:bd:97:b3:e0:3a:50:40:ad:14:84:6c:a6:2b:e7:
a7:42:f0:43:4c:73:72:65:ac:4e:7c:4c:f2:1b:f0:6d:68:eb:
37:50:4c:d5:86:d5:5f:05:d3:4a:e8:31:04:15:96:95:28:dc:
8c:e3:b0:29:c1:7b:af:4b:34:4b:3b:57:77:8c:32:ae:45:18:
1e:95:98:40:c8:68:44:a8:82:4f:5a:38:e9:4b:69:93:d5:8c:
fb:9a:18:e4:bb:ea:b9:9a:fc:ae:52:82:50:9a:c1:6c:ad:2c:
de:9e:95:6a:2e:b9:50:e0:ea:13:ae:ee:9f:39:26:7b:f4:8d:
5f:38:f4:9c:2f:ba:3b:d8:1e:ee:14:b1:5c:ed:a7:35:86:68:
cb:5d:d6:25:96:22:97:48:98:a7:de:b6:5d:d5:e9:af:e9:24:
02:72:c2:08:ce:5c:c3:37:fe:cf:d6:f5:07:6e:bb:7c:e6:ee:
64:4a:5a:5e:d3:02:30:60:43:f4:dd:fc:7b:e2:4a:c4:24:75:
24:a0:16:2a:4f:c5:a4:2e:f2:0b:a1:8e:b3:b9:2d:e6:61:8f:
ae:fe:33:5f:e1:39:28:0c:b8:77:13:06:04:42:12:6d:91:78:
2e:11:03:71:24:cd:e7:38:77:c6:64:a8:37:07:fa:79:6c:fb:
41:7d:5f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org