Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8CUAsrq39H-5cMX-tgbVd5MyILU.roa
File: 8CUAsrq39H-5cMX-tgbVd5MyILU.roa (raw, json)
Hash identifier: Myhr+qUnw6s6WrVjmzwIHsYtUmujHwHIL9Mm5LUrdiw=
Subject key identifier: F0:25:00:B2:BA:B7:F4:7F:B9:70:C5:FE:B6:06:D5:77:93:32:20:B5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187E89CF1B1244E0D7648977D4ACC45D00A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8CUAsrq39H-5cMX-tgbVd5MyILU.roa
Signing time: Thu 04 May 2023 21:13:32 +0000
ROA not before: Thu 04 May 2023 21:13:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16125
IP address blocks: 84.32.176.0/24 maxlen: 24
84.32.215.0/24 maxlen: 24
84.32.214.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 18:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e8:9c:f1:b1:24:4e:0d:76:48:97:7d:4a:cc:45:d0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 4 21:13:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f02500b2bab7f47fb970c5feb606d577933220b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1a:39:cc:71:b6:cd:52:7a:01:d5:31:dc:b6:
dd:1c:68:22:74:d4:d6:98:5c:12:16:53:15:2d:32:
1e:b4:d4:76:de:a9:79:25:aa:e8:6e:04:2e:03:2a:
f2:83:ee:3f:41:c7:49:bb:62:2c:e7:34:0f:48:12:
e7:7e:98:98:b8:31:77:c8:73:42:0f:4c:f7:4e:54:
ea:ea:63:c7:d0:8a:fd:94:74:5b:bc:f6:94:2f:29:
9a:55:81:c6:5b:63:83:80:67:92:8e:9d:c6:f2:7d:
e5:7a:16:48:e3:aa:b4:d5:75:c2:a8:92:e8:db:08:
fd:98:3c:40:8c:41:ce:e1:06:c6:6c:f1:fb:14:b2:
ac:1f:11:a1:11:a4:c9:c6:58:4a:a2:2b:9b:2c:59:
21:43:0d:33:2d:48:0d:32:ef:f7:13:6e:cc:9b:2a:
37:9f:03:f1:d6:09:cb:95:b7:ec:1e:4d:45:11:6e:
d2:c0:7c:16:a6:04:69:25:ea:a5:51:e3:99:41:8f:
16:25:c8:b6:5b:bf:13:d2:66:e2:56:d1:96:85:07:
12:14:7a:c6:cb:6b:f4:1e:fc:49:82:0f:9f:dc:8f:
d1:62:3b:83:e3:22:11:70:ef:12:6c:9e:7a:4c:f8:
11:cd:e1:06:63:db:08:5b:81:e8:b4:8e:92:10:f5:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:25:00:B2:BA:B7:F4:7F:B9:70:C5:FE:B6:06:D5:77:93:32:20:B5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8CUAsrq39H-5cMX-tgbVd5MyILU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.176.0/24
84.32.214.0/23
84.32.248.0/24
88.216.32.0/24
88.216.129.0/24
Signature Algorithm: sha256WithRSAEncryption
57:87:13:a5:08:57:3a:8c:90:3a:60:9c:d0:1d:33:b3:6d:8d:
26:02:12:45:51:89:35:c1:e7:10:0a:e5:b5:2d:98:fd:f1:d3:
0f:0d:fd:de:4e:d2:20:08:a3:e7:bc:d1:9e:f4:d3:cc:73:b7:
74:2c:37:da:fd:3a:36:80:c0:f6:95:01:90:a5:c2:7d:14:87:
06:4a:fd:e0:14:ba:34:eb:36:de:95:0c:94:17:ad:56:3c:b8:
cc:32:c1:ad:6b:1e:5c:bc:db:ad:01:ea:ba:22:31:0d:76:5d:
55:84:4d:f6:5f:be:66:a3:1c:d2:67:fd:90:45:0c:4a:62:61:
cf:77:30:74:d0:77:71:8f:35:80:1d:16:a2:b7:49:1b:a9:87:
43:93:82:3b:ae:cd:65:93:ec:d3:4e:5c:ed:59:29:68:90:00:
0c:0c:62:6c:80:28:f4:46:95:6f:49:e7:a7:8a:04:cd:f0:95:
87:95:92:f4:f2:ab:c2:06:84:a3:d2:36:13:3b:15:c2:b0:e6:
8b:d3:db:a6:58:af:f6:e1:2e:d3:df:59:e0:90:bb:43:1b:80:
b0:4a:22:18:e0:84:49:77:18:bd:a3:39:91:51:e6:2c:0e:92:
48:d7:86:12:73:57:b5:d0:a5:04:f7:8f:33:eb:65:ac:ba:ef:
45:45:80:cd
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYfonPGxJE4NdkiXfUrMRdAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNTA0MjExMzMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDI1MDBiMmJhYjdmNDdmYjk3MGM1ZmViNjA2ZDU3NzkzMzIyMGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRo5zHG2zVJ6AdUx3LbdHGgidNTW
mFwSFlMVLTIetNR23ql5JarobgQuAyryg+4/QcdJu2Is5zQPSBLnfpiYuDF3yHNC
D0z3TlTq6mPH0Ir9lHRbvPaULymaVYHGW2ODgGeSjp3G8n3lehZI46q01XXCqJLo
2wj9mDxAjEHO4QbGbPH7FLKsHxGhEaTJxlhKoiubLFkhQw0zLUgNMu/3E27Mmyo3
nwPx1gnLlbfsHk1FEW7SwHwWpgRpJeqlUeOZQY8WJci2W78T0mbiVtGWhQcSFHrG
y2v0HvxJgg+f3I/RYjuD4yIRcO8SbJ56TPgRzeEGY9sIW4HotI6SEPVY6wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPAlALK6t/R/uXDF/rYG1XeTMiC1MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvOENVQXNycTM5SC01Y01YLXRnYlZkNU15SUxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVCCwAwQB
VCDWAwQAVCD4AwQAWNggAwQAWNiBMA0GCSqGSIb3DQEBCwUAA4IBAQBXhxOlCFc6
jJA6YJzQHTOzbY0mAhJFUYk1wecQCuW1LZj98dMPDf3eTtIgCKPnvNGe9NPMc7d0
LDfa/To2gMD2lQGQpcJ9FIcGSv3gFLo06zbelQyUF61WPLjMMsGtax5cvNutAeq6
IjENdl1VhE32X75moxzSZ/2QRQxKYmHPdzB00HdxjzWAHRait0kbqYdDk4I7rs1l
k+zTTlztWSlokAAMDGJsgCj0RpVvSeenigTN8JWHlZL08qvCBoSj0jYTOxXCsOaL
09umWK/24S7T31ngkLtDG4CwSiIY4IRJdxi9ozmRUeYsDpJI14YSc1e10KUE948z
62Wsuu9FRYDN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org