Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8XBOYyMW9jV9zZ4NGo1KVoaJULw.roa
File: 8XBOYyMW9jV9zZ4NGo1KVoaJULw.roa (raw, json)
Hash identifier: x44ubefqMF9AKjhqraUpuMyp2Jl9c51ONJdYpa6JpfM=
Subject key identifier: F1:70:4E:63:23:16:F6:35:7D:CD:9E:0D:1A:8D:4A:56:86:89:50:BC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01865B4D4CC3E0F1C05CB060ED133243CE90
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8XBOYyMW9jV9zZ4NGo1KVoaJULw.roa
Signing time: Thu 16 Feb 2023 17:37:17 +0000
ROA not before: Thu 16 Feb 2023 17:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
88.216.209.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.178.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Mar 2023 18:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5b:4d:4c:c3:e0:f1:c0:5c:b0:60:ed:13:32:43:ce:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 16 17:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1704e632316f6357dcd9e0d1a8d4a56868950bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c8:1f:28:15:6b:25:d3:fa:c8:92:b6:4e:c1:
ac:72:99:57:fb:cd:1c:2b:38:7a:0d:6b:d9:02:67:
6c:6b:de:ce:0e:7a:35:05:b1:1b:b9:bd:4d:74:69:
63:71:83:b3:17:f0:9c:dd:17:70:e8:e7:06:7d:ce:
4e:95:89:b0:63:d3:9b:6e:3c:86:d0:ec:fc:f2:54:
58:94:8e:67:8d:3f:1f:49:2a:a1:37:4f:b1:2f:80:
8b:65:63:d9:da:93:22:ca:0f:95:d1:7a:c1:b4:7d:
31:04:84:54:3c:09:0c:96:5e:c3:2d:8a:bd:9d:4d:
ae:ed:2d:8c:3d:28:76:0e:bd:44:04:06:90:06:1a:
40:7d:cd:d5:15:16:b5:67:e2:67:5a:88:f4:3f:7c:
df:68:57:3d:a0:1b:63:48:ab:92:1f:79:9e:74:68:
f9:53:71:cc:38:65:dd:4d:ca:c7:1e:bd:e0:c3:2b:
5b:64:c5:01:5f:35:3e:61:ff:bd:91:a8:73:b2:b8:
8a:16:5e:9e:a1:92:18:25:5d:b9:bb:0c:28:a4:85:
d0:06:ba:f7:71:91:90:f2:13:c6:75:99:27:9b:c5:
12:76:d7:c0:77:f7:a4:c4:e5:3c:49:3a:dd:80:21:
ce:18:4b:67:55:4a:2f:25:b2:00:db:0d:34:2b:77:
cc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:70:4E:63:23:16:F6:35:7D:CD:9E:0D:1A:8D:4A:56:86:89:50:BC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8XBOYyMW9jV9zZ4NGo1KVoaJULw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.44.0/24
84.32.47.0/24
84.32.59.0-84.32.60.255
84.32.66.0/24
84.32.68.0/24
84.32.90.0/24
84.32.178.0/24
84.32.225.0/24
84.32.227.0/24
88.216.95.0/24
88.216.103.0/24
88.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
23:1f:fa:f0:61:2d:bd:0d:3b:e3:d8:f2:36:93:fa:56:f4:7b:
c0:c6:50:f4:2a:06:87:9d:2f:54:ea:ef:94:f3:b6:84:6a:51:
73:e1:8c:a5:c9:f6:5e:60:92:d8:f3:d0:56:87:8f:16:f2:23:
79:e1:10:a6:16:2b:e1:34:87:87:7b:75:fe:2f:1f:5a:39:5f:
ad:3b:4a:0b:ca:64:11:da:7b:ae:7a:08:cd:50:1b:cd:42:c0:
58:e2:b7:1a:a0:d2:b9:5c:d0:fb:7a:d9:be:90:8d:00:ab:df:
ea:77:44:b8:33:44:df:16:3a:ba:29:8e:bf:01:0a:28:9c:28:
1a:ee:4d:59:9a:16:8b:54:77:2a:2c:9a:e7:a0:6d:d2:11:f0:
69:aa:30:67:ff:b9:bc:0c:8b:61:72:2b:12:ed:65:f6:70:6e:
f5:71:68:cf:b5:cc:f9:f0:ac:89:3e:ac:32:ed:a1:2f:e4:b3:
22:7b:fc:49:ea:d2:75:30:a6:37:b4:90:a5:07:47:5c:db:f5:
17:ca:21:43:b5:df:48:97:89:32:fe:ab:c6:ad:72:b9:e5:b7:
74:f5:8a:fb:1f:a0:9e:a7:0c:3b:24:83:6c:54:21:49:3c:81:
46:4e:47:8a:7f:3d:75:b7:2c:b2:83:a0:3b:87:fa:fb:ea:e0:
c3:ba:f2:44
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAYZbTUzD4PHAXLBg7RMyQ86QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMjE2MTczNzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTcwNGU2MzIzMTZmNjM1N2RjZDllMGQxYThkNGE1Njg2ODk1MGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcgfKBVrJdP6yJK2TsGscplX+80c
Kzh6DWvZAmdsa97ODno1BbEbub1NdGljcYOzF/Cc3Rdw6OcGfc5OlYmwY9ObbjyG
0Oz88lRYlI5njT8fSSqhN0+xL4CLZWPZ2pMiyg+V0XrBtH0xBIRUPAkMll7DLYq9
nU2u7S2MPSh2Dr1EBAaQBhpAfc3VFRa1Z+JnWoj0P3zfaFc9oBtjSKuSH3medGj5
U3HMOGXdTcrHHr3gwytbZMUBXzU+Yf+9kahzsriKFl6eoZIYJV25uwwopIXQBrr3
cZGQ8hPGdZknm8USdtfAd/ekxOU8STrdgCHOGEtnVUovJbIA2w00K3fMCwIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFPFwTmMjFvY1fc2eDRqNSlaGiVC8MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvOFhCT1l5TVc5alY5elo0TkdvMUtWb2FKVUx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAVCAsAwQA
VCAvMAwDBABUIDsDBABUIDwDBABUIEIDBABUIEQDBABUIFoDBABUILIDBABUIOED
BABUIOMDBABY2F8DBABY2GcDBABY2NEwDQYJKoZIhvcNAQELBQADggEBACMf+vBh
Lb0NO+PY8jaT+lb0e8DGUPQqBoedL1Tq75TztoRqUXPhjKXJ9l5gktjz0FaHjxby
I3nhEKYWK+E0h4d7df4vH1o5X607SgvKZBHae656CM1QG81CwFjitxqg0rlc0Pt6
2b6QjQCr3+p3RLgzRN8WOropjr8BCiicKBruTVmaFotUdyosmuegbdIR8GmqMGf/
ubwMi2FyKxLtZfZwbvVxaM+1zPnwrIk+rDLtoS/ksyJ7/Enq0nUwpje0kKUHR1zb
9RfKIUO130iXiTL+q8atcrnlt3T1ivsfoJ6nDDskg2xUIUk8gUZOR4p/PXW3LLKD
oDuH+vvq4MO68kQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org