Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6oXUzXJ046yFJB8CTcCwvX26RHc.roa
File: 6oXUzXJ046yFJB8CTcCwvX26RHc.roa (raw, json)
Hash identifier: DnHWU4jY6PP07L7lCYcRe7L9UhgzCMDuE2Uzy/cpahw=
Subject key identifier: EA:85:D4:CD:72:74:E3:AC:85:24:1F:02:4D:C0:B0:BD:7D:BA:44:77
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018649701A5F82379828010F78D76D3A6CDE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6oXUzXJ046yFJB8CTcCwvX26RHc.roa
Signing time: Mon 13 Feb 2023 06:22:08 +0000
ROA not before: Mon 13 Feb 2023 06:22:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
88.216.221.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Mar 2023 18:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:70:1a:5f:82:37:98:28:01:0f:78:d7:6d:3a:6c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 13 06:22:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea85d4cd7274e3ac85241f024dc0b0bd7dba4477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4b:2f:45:aa:f2:11:88:73:98:0b:3b:ce:90:
31:ea:db:97:e4:65:10:b1:1e:e8:9f:e5:c8:09:48:
c5:07:69:0e:93:37:bc:75:50:69:ef:66:98:8e:ff:
8c:b1:7a:d7:b2:a2:d1:dd:1a:50:b3:e3:8e:95:5f:
7e:e8:82:eb:77:dc:83:25:07:f6:5f:30:e8:fd:d0:
ce:70:97:4d:33:ed:b1:95:f9:b3:47:01:a7:74:47:
33:7a:2e:86:9b:88:82:a0:1f:df:6a:85:cb:19:99:
76:86:98:e5:35:96:60:5e:29:a3:34:5f:44:50:29:
b1:bd:d3:fb:87:98:07:2c:ff:81:b2:af:c5:c4:a2:
46:9d:2b:d5:90:1c:da:30:b7:29:1d:64:6d:a3:0a:
52:94:63:ab:08:d1:6d:33:b8:3c:67:56:fd:28:7d:
25:52:f6:b0:b6:ef:a9:c6:7c:7a:55:a9:68:ca:02:
8b:9e:fb:14:b5:1b:d2:f6:68:bc:10:79:27:32:86:
2f:f0:18:15:4d:18:5a:16:91:bf:eb:58:7d:03:e7:
12:5e:9f:90:0e:af:02:66:5b:b5:f7:14:1e:c9:0d:
c2:6e:11:08:81:a4:a0:17:60:93:45:dc:19:a8:43:
3c:78:1c:2e:01:e1:02:10:f2:9b:c7:5d:18:1c:43:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:D4:CD:72:74:E3:AC:85:24:1F:02:4D:C0:B0:BD:7D:BA:44:77
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6oXUzXJ046yFJB8CTcCwvX26RHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.26.0/24
84.32.29.0-84.32.30.255
84.32.45.0/24
84.32.65.0/24
84.32.76.0/23
84.32.79.0/24
84.32.89.0/24
84.32.92.0/24
84.32.94.0/24
84.32.155.0/24
84.32.177.0/24
84.32.210.0-84.32.212.255
84.32.241.0/24
84.32.243.0/24
84.32.255.0/24
88.216.105.0/24
88.216.131.0/24
88.216.134.0/24
88.216.190.0/23
88.216.198.0/24
88.216.211.0/24
88.216.221.0/24
Signature Algorithm: sha256WithRSAEncryption
52:68:e5:97:b0:fb:a7:1c:20:55:c7:fd:27:e4:39:08:94:9e:
95:9a:00:73:d6:59:bf:cf:29:5e:04:51:1e:d5:1f:ba:f5:8e:
00:3b:b7:3b:8b:e0:0a:35:68:20:f7:bd:15:08:82:ac:3c:8c:
27:1e:6b:df:bc:47:6b:13:a2:5e:04:88:df:4d:07:b6:7a:9f:
69:37:fe:71:c8:0b:98:c5:0e:4d:16:fe:cb:81:f4:0f:22:ed:
33:02:dd:3d:d2:ce:36:3e:d4:65:05:10:61:32:31:b0:75:ee:
a5:71:71:9e:0b:88:4f:6b:f1:78:43:3d:5d:e9:b8:a6:48:0e:
f3:7b:ea:7c:b6:74:8e:5f:12:30:f9:78:af:61:64:8d:0f:d8:
bd:f3:6f:6a:7a:2f:a9:d6:42:c6:ba:55:fd:cb:49:38:28:68:
f8:be:5e:6b:c0:f3:7d:43:1c:27:20:18:61:db:61:5a:be:5d:
18:d0:9a:ee:ea:5e:4b:d1:f0:67:2e:1d:69:a6:63:c0:f7:82:
ed:e8:c1:18:42:93:19:20:74:1b:1e:f0:4f:c5:3d:10:6b:40:
6b:ec:dc:d2:2a:5b:88:98:16:5e:30:b0:dd:68:28:3e:2d:80:
f8:53:1e:eb:12:15:94:55:04:e5:7a:02:a3:4c:6f:04:6b:be:
f5:6b:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org