Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4T4XW2iblZ3mrEltTHW8HvPSGSU.roa
File: 4T4XW2iblZ3mrEltTHW8HvPSGSU.roa (raw, json)
Hash identifier: +ytaz11I5MnC0f1f742+xo89LCCbTlLZ3uFNvBe+5LY=
Subject key identifier: E1:3E:17:5B:68:9B:95:9D:E6:AC:49:6D:4C:75:BC:1E:F3:D2:19:25
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01859A7862F15E5990727BBD7C4C674D5F7F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4T4XW2iblZ3mrEltTHW8HvPSGSU.roa
Signing time: Tue 10 Jan 2023 06:57:38 +0000
ROA not before: Tue 10 Jan 2023 06:57:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 84.32.52.0/22 maxlen: 24
88.216.190.0/24 maxlen: 24
84.32.6.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.252.0/22 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:78:62:f1:5e:59:90:72:7b:bd:7c:4c:67:4d:5f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 10 06:57:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e13e175b689b959de6ac496d4c75bc1ef3d21925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:f3:bc:80:31:14:78:49:10:79:25:64:d3:
93:6a:85:f9:5f:b9:96:74:0a:25:3e:ac:3c:d8:4f:
24:a7:36:3f:49:fd:c7:62:6b:e1:c0:f1:99:9a:da:
e8:3f:ce:3b:83:f0:70:6c:bf:ac:d8:ba:5e:a6:a7:
46:54:64:6f:91:e1:ea:06:d7:8b:99:15:0d:fb:07:
84:36:65:0e:ed:f5:29:13:ac:b0:8c:67:04:c3:f2:
d0:3c:03:67:90:3c:98:f7:05:e1:12:ce:f0:84:0f:
46:ae:b4:a9:5c:1b:14:d7:98:f0:bd:b8:ea:95:64:
2c:2f:41:30:c9:44:b8:e4:7e:9f:89:51:f5:ce:a9:
b9:ae:04:b2:ad:be:30:ea:27:56:56:a6:83:3d:c1:
42:c7:2f:b0:77:eb:48:3d:40:7c:98:03:ce:e2:a2:
33:08:d8:a1:96:52:ec:60:bd:30:e4:fd:41:fa:8f:
b3:11:2f:cd:7f:60:8a:06:d9:46:68:69:24:5a:49:
0e:85:e2:8d:59:bb:18:41:12:f4:3f:96:6a:95:6a:
4e:94:a5:3d:82:d2:ea:6b:64:71:b0:18:a5:a3:5e:
78:29:7e:71:5d:fc:39:13:b3:f5:e2:e6:58:fe:c6:
ad:17:b4:bc:34:d5:1f:6c:01:cb:f6:d3:6d:c6:e8:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3E:17:5B:68:9B:95:9D:E6:AC:49:6D:4C:75:BC:1E:F3:D2:19:25
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4T4XW2iblZ3mrEltTHW8HvPSGSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
84.32.42.0/24
84.32.52.0/22
84.32.240.0/24
84.32.243.0/24
88.216.17.0/24
88.216.36.0/24
88.216.40.0/24
88.216.43.0/24
88.216.98.0/24
88.216.132.0/23
88.216.190.0/24
88.216.214.0/24
88.216.228.0-88.216.247.255
88.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
94:c2:0a:90:0e:b2:4d:50:e6:f7:e9:2f:d7:07:ac:9c:af:74:
15:ad:3f:b8:94:8f:fc:2a:6a:78:18:a5:6c:d5:9e:dd:51:f2:
47:e8:f2:45:78:be:ae:cb:6e:02:3b:c6:af:f4:57:d9:4d:d3:
a3:64:7d:05:36:14:08:09:65:d3:5c:2d:40:b9:5b:5e:92:f7:
62:a5:46:3a:d2:ab:6c:8e:c2:6a:6d:0e:dc:9e:98:75:63:ef:
af:b1:5a:d6:da:91:ae:dd:a4:65:49:72:a3:c0:40:c4:32:3e:
0d:a4:b7:cb:92:62:18:33:12:9b:3a:dc:7f:7a:dd:d2:cd:5e:
5b:e8:e4:6a:e5:59:da:73:f4:0b:98:3b:1f:3d:77:c8:0f:d8:
5c:ff:bb:82:38:dc:8b:a0:7b:bc:2a:51:95:d6:c4:30:47:0b:
7e:af:b9:9f:fe:6d:e8:bc:e3:bf:48:42:d8:92:6b:2f:a4:d7:
7f:ba:4b:11:57:4c:8a:d5:0e:12:ef:46:85:e2:90:f0:de:44:
e1:ec:08:6c:0f:42:5d:84:b5:36:4a:38:1d:1b:40:2a:e8:2b:
80:54:19:f6:41:73:eb:c1:ef:28:86:64:d0:43:cc:5c:96:38:
2c:45:55:ab:0a:71:71:1e:8e:7d:35:5b:a1:11:fb:90:c9:f7:
e0:3e:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:27 2023 by rpki-client on console-ams.rpki-client.org