Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8UmnXYTiWIwaYd0ZC_gaMG-esSQ.roa
File: 8UmnXYTiWIwaYd0ZC_gaMG-esSQ.roa (raw, json)
Hash identifier: +d8pYCxJVFtZkpy7Zzm6RW0yIKBDhVwYH08My2uVzqA=
Subject key identifier: F1:49:A7:5D:84:E2:58:8C:1A:61:DD:19:0B:F8:1A:30:6F:9E:B1:24
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019310F219176F58BA2797318551601D3F7F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8UmnXYTiWIwaYd0ZC_gaMG-esSQ.roa
Signing time: Sat 09 Nov 2024 12:42:01 +0000
ROA not before: Sat 09 Nov 2024 12:42:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 09:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:f2:19:17:6f:58:ba:27:97:31:85:51:60:1d:3f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 9 12:42:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f149a75d84e2588c1a61dd190bf81a306f9eb124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:df:d2:f3:05:6f:b4:09:1c:14:14:30:1a:
3d:61:a5:32:f9:23:16:ab:d0:fe:67:1a:92:9c:e5:
a3:34:a2:43:8e:cf:1c:40:b3:07:a2:9d:e0:2c:be:
e9:a9:fd:28:a5:74:96:fc:32:64:06:6a:2a:0f:b0:
47:42:16:36:e0:e1:23:76:af:49:7a:71:2c:4a:5a:
3c:24:ca:6a:78:88:47:d8:dc:19:be:60:7b:32:79:
57:86:ce:08:7d:23:8c:3a:fb:5a:21:7b:ba:fa:1c:
c9:98:b3:8b:62:07:b6:ab:7b:25:61:42:ea:52:d5:
46:22:67:46:5f:04:14:14:b8:3e:1a:27:58:47:22:
8a:05:ca:db:a6:df:ac:13:ee:d5:85:b9:75:69:a5:
c5:4b:94:30:28:5c:8f:9f:4f:12:75:b0:25:73:ed:
71:bb:eb:ec:07:f3:50:f6:08:54:a1:b2:ac:1f:05:
ec:24:6c:9b:1c:0d:1e:1f:46:67:af:7f:31:c1:f4:
11:a1:6b:e4:00:8f:10:3c:ce:d7:8a:1f:bb:9f:b6:
f8:74:47:0b:d6:ab:bd:43:7f:8c:c5:37:e1:11:a3:
39:12:e6:1d:30:99:36:27:91:ea:ad:69:b3:fd:41:
8b:8a:bd:2d:20:4b:8f:a0:1b:f6:fe:8f:f4:eb:42:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:49:A7:5D:84:E2:58:8C:1A:61:DD:19:0B:F8:1A:30:6F:9E:B1:24
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8UmnXYTiWIwaYd0ZC_gaMG-esSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.70.0/24
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0/23
88.216.134.0/23
88.216.197.0/24
88.216.220.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f0:95:df:79:6b:45:82:9c:27:43:ae:31:7a:0d:f4:d7:d7:
76:c6:9a:d4:f1:db:b0:02:72:54:27:66:c3:14:f9:c8:17:7c:
3d:f5:ff:29:81:6a:8c:9f:4e:3f:e2:80:23:e3:ba:73:88:e0:
46:2d:69:ab:81:ea:c3:23:ed:8a:91:96:e9:0f:ce:06:6d:69:
65:76:3a:31:99:50:3e:aa:7e:85:f2:4c:dc:a4:2c:76:2e:6d:
67:91:0a:38:3d:32:72:75:48:4e:37:dc:e1:bc:d4:99:f2:2f:
69:6d:9f:e3:c7:87:f3:f9:9e:9a:7e:68:ef:33:6e:8d:4e:67:
de:52:6b:ca:ff:aa:a2:16:0f:e6:a3:9c:18:1c:c6:61:c5:91:
5e:29:49:77:09:57:e2:6c:fa:0b:33:e4:97:a0:f3:97:e1:83:
ea:82:28:b9:05:95:39:f7:da:88:d8:03:df:a2:f4:d9:e6:a6:
77:e6:0f:23:dd:a3:f4:35:96:c3:16:a6:50:b0:65:23:77:0d:
ac:5e:0c:96:43:ec:b9:05:a4:ea:f0:1d:af:05:71:45:b1:66:
25:c1:a4:60:11:22:5d:07:fe:7a:f2:d0:25:5b:6f:11:7e:07:
d2:59:03:51:af:62:ca:fb:0c:d9:08:c9:e9:9c:de:7b:c4:85:
c1:53:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 13:29:12 2024 by rpki-client on console-ams.rpki-client.org