Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/60QuN8_naj3iyXu5HFppV-0tHDk.roa
File: 60QuN8_naj3iyXu5HFppV-0tHDk.roa (raw, json)
Hash identifier: tMoCm6Zbi4jkGjCujcZM1G8pOVap+RbpAq+JUJjWXVc=
Subject key identifier: EB:44:2E:37:CF:E7:6A:3D:E2:C9:7B:B9:1C:5A:69:57:ED:2D:1C:39
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01880E67E4AEEA1D66C360C8EEBE43FA48D0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/60QuN8_naj3iyXu5HFppV-0tHDk.roa
Signing time: Fri 12 May 2023 05:21:09 +0000
ROA not before: Fri 12 May 2023 05:21:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.63.0/24 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
88.216.186.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.32.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 05:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:67:e4:ae:ea:1d:66:c3:60:c8:ee:be:43:fa:48:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 12 05:21:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb442e37cfe76a3de2c97bb91c5a6957ed2d1c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:2d:b2:d7:fd:90:90:9a:09:10:13:86:44:
d6:b3:b9:c4:8e:0f:88:b0:3d:7b:08:7f:14:56:7a:
fa:5d:44:da:58:8b:4a:ee:42:01:02:48:16:ff:90:
ae:00:34:ca:a7:f0:c9:38:ad:6a:f1:3b:0e:89:5a:
c4:0a:c0:9a:97:d5:d2:6f:3f:50:a4:26:f0:c9:3b:
c8:f6:54:17:72:1e:a4:36:a6:af:0a:55:33:9e:20:
60:ac:7e:d1:ce:95:d3:af:dc:2f:5c:9c:74:21:e0:
71:1f:35:e1:b2:a1:ea:42:d8:e0:48:d5:dd:b8:5f:
76:e1:01:f6:2b:4d:b2:a1:c7:03:e4:77:ea:f1:3f:
6a:6e:fb:d8:b8:0d:78:62:3e:49:c6:3e:be:28:97:
6a:49:24:75:7f:8c:c7:82:5e:79:b3:aa:e1:eb:13:
20:a9:aa:eb:78:51:a3:f2:0e:75:65:b1:d4:1a:21:
6a:3e:37:a1:54:2b:fa:9d:d9:4c:1e:12:c2:0d:d9:
1f:78:57:ba:ef:20:91:19:65:57:6a:85:f2:c0:e9:
7e:ae:b4:9c:fc:f2:6a:33:79:80:33:3c:29:6e:6a:
0e:ad:ad:37:3c:81:44:22:92:8f:f5:6f:1d:97:83:
01:c1:5b:fc:2b:1e:37:f8:e2:05:be:65:22:34:f5:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:2E:37:CF:E7:6A:3D:E2:C9:7B:B9:1C:5A:69:57:ED:2D:1C:39
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/60QuN8_naj3iyXu5HFppV-0tHDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.32.0/24
84.32.63.0/24
84.32.95.0/24
84.32.149.0/24
84.32.151.0/24
84.32.174.0/23
84.32.178.0/23
88.216.2.0/24
88.216.34.0/24
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
80:cc:74:72:e1:35:13:ba:c6:b6:2f:d3:57:53:ac:ec:09:f8:
01:a4:69:14:a8:fe:33:b7:e4:b1:52:2b:b8:9e:f3:5c:27:a6:
32:75:84:a4:99:f2:5b:66:73:23:c5:4d:d4:4b:8e:91:d0:fc:
7d:c3:40:32:d4:81:2a:39:25:14:d0:0b:48:b6:65:3f:ba:14:
86:2f:e6:f9:d5:6c:4e:d8:61:1c:a2:3f:b3:d2:bf:0d:75:e6:
cc:36:e1:65:31:63:4e:5d:16:2f:8e:8b:ea:ea:54:ab:76:00:
e3:6a:ea:57:ce:21:ad:be:38:e8:3a:ab:05:6a:2c:c3:de:84:
9a:22:1a:5f:a4:e4:e9:de:73:0b:0e:49:67:53:f3:3a:5c:4b:
5d:3c:bf:d6:17:93:4f:15:d1:65:ac:70:6c:4e:ae:ea:0b:c4:
fa:22:1a:96:ec:f3:c0:e1:1b:75:af:12:32:25:37:bc:e2:34:
b2:4c:4a:a4:ac:40:89:c6:c0:b5:0f:72:f1:23:32:d5:74:ef:
86:a7:75:56:9c:1a:69:d7:11:43:d4:35:83:2a:b6:fc:f7:9a:
2d:ac:3c:7a:9b:32:f5:cd:6e:38:72:1a:50:de:9e:de:e7:89:
09:1e:45:e6:c9:c7:e3:6d:78:0a:3c:4d:9c:dc:75:d1:39:57:
04:1b:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org