Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7vVhAkeSO6A9q7C-qF0grrbQubU.roa
File: 7vVhAkeSO6A9q7C-qF0grrbQubU.roa (raw, json)
Hash identifier: 7fM3CLlg9C4N/gCzH2w6fg5M1Vx5XqlZGq0l+TgVcKU=
Subject key identifier: EE:F5:61:02:47:92:3B:A0:3D:AB:B0:BE:A8:5D:20:AE:B6:D0:B9:B5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185B0D15C387E01C1D2E0CC00AFA938A983
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7vVhAkeSO6A9q7C-qF0grrbQubU.roa
Signing time: Sat 14 Jan 2023 15:06:28 +0000
ROA not before: Sat 14 Jan 2023 15:06:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 84.32.57.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.91.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.130.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jan 2023 15:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b0:d1:5c:38:7e:01:c1:d2:e0:cc:00:af:a9:38:a9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 14 15:06:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eef5610247923ba03dabb0bea85d20aeb6d0b9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:57:43:e8:de:21:b6:fb:f7:e2:46:ae:c3:
64:3c:2f:d5:ad:06:03:d4:28:a5:c6:57:83:30:f2:
c2:3e:e7:aa:e3:6b:ff:44:6d:70:4c:f5:cd:17:f3:
fc:97:6b:10:72:ed:7d:bd:b6:a9:a7:60:6f:d9:e3:
45:a4:a2:e0:48:a4:6f:f5:20:a7:eb:92:3f:97:d3:
81:04:a5:82:26:7b:e7:8c:2b:af:6d:a0:13:42:71:
7c:35:74:54:13:a1:12:a6:10:98:23:62:bf:1e:45:
79:7a:7f:31:68:2e:3f:68:89:da:fe:91:fe:ea:1f:
11:8d:2e:4a:08:b3:fb:89:c7:44:83:ee:e5:2a:10:
d7:98:97:da:d2:ae:2c:f3:dd:3a:99:c0:e3:00:6a:
9d:8a:8f:af:b2:85:a7:86:a2:e8:b8:4b:df:dd:1a:
81:cc:ac:8f:41:3f:95:b3:38:59:e1:c6:3e:ee:cd:
94:b2:56:c9:f5:8b:c0:8a:b5:d9:c5:13:c4:3c:dd:
94:0f:1a:1a:e1:30:c3:a8:44:07:32:81:4f:de:3c:
eb:3a:9d:19:c2:0d:31:65:75:f0:d2:a3:09:87:81:
98:28:09:40:da:00:ec:73:a5:36:40:2b:d6:d6:47:
8f:53:18:7a:14:81:fb:b3:6b:83:df:1b:52:02:3e:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:61:02:47:92:3B:A0:3D:AB:B0:BE:A8:5D:20:AE:B6:D0:B9:B5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7vVhAkeSO6A9q7C-qF0grrbQubU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.57.0/24
84.32.67.0/24
84.32.91.0/24
88.216.38.0/23
88.216.93.0/24
88.216.101.0/24
88.216.104.0/24
88.216.130.0/24
Signature Algorithm: sha256WithRSAEncryption
93:0d:e5:c2:dc:b1:54:c0:9d:09:74:12:bb:ee:3f:81:33:8b:
58:82:a8:e1:16:12:19:78:54:96:72:8d:4c:46:9d:22:84:d3:
cc:c2:4a:69:47:5b:be:76:e5:bb:a1:9b:a0:66:7b:3d:a2:94:
14:56:04:94:86:73:5b:e9:68:14:ee:a9:6d:2f:bc:b0:76:58:
0d:c1:2c:9a:07:5d:6d:4a:cf:73:03:80:2e:1a:ae:60:23:d6:
5d:8b:68:6f:30:4a:fa:97:d0:0b:45:06:e3:70:99:db:88:e4:
29:0d:c4:24:ee:74:dc:26:c3:b8:29:07:25:a6:f4:92:a3:67:
6a:e5:86:ac:c7:19:a7:d9:b5:0a:ee:a9:16:ea:ea:dd:cb:6f:
a3:66:66:ae:8e:85:6d:c6:7b:fb:66:c4:3a:64:f1:9d:0a:ea:
93:47:f3:a1:16:02:8f:3f:95:50:b1:35:6a:bc:a4:d5:62:51:
cc:e7:8f:31:d2:78:c4:2d:ae:dc:be:2b:29:73:7d:f9:fa:e6:
43:9a:67:1d:35:ff:a9:a7:17:c8:3a:fa:55:fa:3e:3e:fa:75:
df:3e:5e:df:66:10:fb:8b:d4:1f:21:a4:9f:ef:e1:75:68:f9:
12:13:a6:2e:5a:e8:d6:f3:b7:50:ed:45:56:9e:4c:4f:2d:8a:
55:12:db:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org