Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4QhGX2TbLCcDNqbxy23kW01wjkY.roa
File: 4QhGX2TbLCcDNqbxy23kW01wjkY.roa (raw, json)
Hash identifier: 0tcMVlHYMUbFixtvlp/lLmXIxg0xzfQiZQYG9i0VJ8Q=
Subject key identifier: E1:08:46:5F:64:DB:2C:27:03:36:A6:F1:CB:6D:E4:5B:4D:70:8E:46
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186E9AF560C1AA42C80811C85381DCF6249
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4QhGX2TbLCcDNqbxy23kW01wjkY.roa
Signing time: Thu 16 Mar 2023 09:10:27 +0000
ROA not before: Thu 16 Mar 2023 09:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:af:56:0c:1a:a4:2c:80:81:1c:85:38:1d:cf:62:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 16 09:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e108465f64db2c270336a6f1cb6de45b4d708e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:a2:dc:eb:b7:9d:9d:95:1d:88:f5:45:01:
38:a8:c5:ac:62:32:ff:01:2c:af:88:5f:c1:e4:e2:
2b:57:c9:72:e0:a2:54:df:bb:26:85:6a:81:8e:bb:
a2:e3:5a:da:1a:f0:f7:2b:c7:01:85:62:d7:c9:eb:
8f:95:4c:bf:28:0a:fc:d4:0f:01:eb:fe:2a:75:e3:
34:be:b9:3d:ba:ed:61:92:2a:7a:1f:92:bf:03:38:
32:74:9f:6d:c6:bd:44:4d:60:b0:6a:db:55:09:ea:
16:89:a8:86:f1:22:47:7e:6e:d6:de:42:ff:bf:61:
a2:0f:1c:9e:78:c6:71:fd:9a:9d:24:86:28:61:52:
96:77:e4:25:89:90:95:2c:14:36:4f:d4:36:2d:b6:
a9:4d:1d:d7:be:bc:cc:c6:e9:76:f2:4f:67:46:ff:
9b:47:29:4c:e9:09:1c:a3:e0:8f:0a:ec:70:b2:8e:
46:81:df:47:69:3c:18:95:66:94:06:15:bc:25:e8:
0a:ad:07:49:5e:c6:19:7e:d2:ae:8f:11:79:79:12:
40:06:19:5f:c8:0e:23:a6:af:95:8d:7d:76:bc:36:
0c:a0:6e:33:ea:07:a9:50:34:2c:db:2a:7c:a9:34:
1e:73:a1:86:8b:5e:4e:5c:19:38:4c:8a:c3:c9:6d:
e3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:08:46:5F:64:DB:2C:27:03:36:A6:F1:CB:6D:E4:5B:4D:70:8E:46
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4QhGX2TbLCcDNqbxy23kW01wjkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.152.0-84.32.154.255
84.32.156.0/22
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.132.0/24
88.216.185.0/24
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
64:84:2f:3b:4b:ba:25:4d:36:e9:16:f1:ad:4a:d3:9c:2f:01:
49:56:e4:76:14:a5:56:80:c5:70:73:d9:d8:69:ff:a9:2e:6a:
69:8a:5b:13:cf:ea:4d:73:1d:7a:82:66:2c:e7:5a:1f:9b:d8:
76:ff:39:a0:25:a4:85:51:36:ef:b7:5b:2d:67:a8:78:c4:aa:
de:5f:61:be:0a:63:da:06:16:a5:8e:88:94:20:da:8f:47:a7:
9a:b4:45:f1:5f:ed:ea:ff:d9:5e:55:51:36:72:09:d4:4a:74:
14:7a:81:2c:58:33:86:99:b9:3e:a3:70:3c:59:f5:94:64:8e:
ff:8f:20:79:92:8d:f7:35:2a:a1:aa:78:a8:df:09:2a:9e:f5:
6f:18:76:4c:14:7b:ed:b5:97:90:9f:72:ee:f3:c6:1d:dd:6a:
10:89:9d:ff:ab:59:21:99:50:15:91:b9:85:7e:c6:01:2c:7c:
d3:9b:e8:22:f1:69:9f:eb:02:97:24:27:e8:f9:ed:44:ad:39:
9e:94:3d:16:a8:a3:9b:f9:d0:ed:1c:ea:86:50:b0:ce:70:9e:
97:65:10:d8:39:b5:c3:d8:d5:50:6c:5e:24:e1:3b:1d:ef:78:
99:88:75:90:a2:d1:6f:2b:cb:cc:f6:2c:e6:74:cc:7e:a1:9c:
cb:8d:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:27 2023 by rpki-client on console-ams.rpki-client.org