Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8eaIiWX_VVtvMKC1oYVldvT5M_k.roa
File: 8eaIiWX_VVtvMKC1oYVldvT5M_k.roa (raw, json)
Hash identifier: WpqBqQaqxAegjBTcxtE/VZzkAlMwuP+YAKZYFvKHZrs=
Subject key identifier: F1:E6:88:89:65:FF:55:5B:6F:30:A0:B5:A1:85:65:76:F4:F9:33:F9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01861C5666D86A2B3570C5375AB43FA85CBF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8eaIiWX_VVtvMKC1oYVldvT5M_k.roa
Signing time: Sat 04 Feb 2023 12:11:09 +0000
ROA not before: Sat 04 Feb 2023 12:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.108.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
84.32.172.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Feb 2023 06:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1c:56:66:d8:6a:2b:35:70:c5:37:5a:b4:3f:a8:5c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 4 12:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1e6888965ff555b6f30a0b5a1856576f4f933f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:c7:60:16:86:da:76:60:b8:81:98:38:a9:
38:5d:9c:b7:6d:f5:ad:90:71:9f:d7:53:25:c8:b9:
23:df:5d:b5:fd:39:9b:33:74:aa:94:d2:26:ff:82:
32:d1:05:28:ae:ce:89:30:ba:de:e6:88:7f:8c:f8:
5f:0d:3d:9c:58:9f:b3:05:51:dc:f8:e3:43:78:23:
8d:cc:d3:ab:a6:22:4d:00:3c:1f:42:52:73:d5:28:
16:c0:9c:fb:c2:bd:88:86:84:46:44:7e:f1:b6:3d:
40:2f:fe:93:9b:ee:57:2f:7e:35:06:79:d5:73:af:
11:6b:d3:e8:e0:71:25:bc:46:ca:2e:04:53:45:1f:
21:16:a0:70:3c:ca:69:06:2c:28:87:d2:65:b8:87:
ce:34:4e:57:53:49:d5:6b:7f:8e:7d:d4:7e:1e:5c:
81:4f:05:3c:d0:7a:d4:e7:f0:93:9a:73:98:cd:51:
0a:8c:8e:93:6c:7f:ea:df:9d:bc:0c:9c:af:bb:c0:
53:62:bb:f2:08:4d:53:88:47:69:cb:18:7c:10:9a:
41:28:3d:ae:8b:b6:8a:12:d7:55:f3:89:98:af:28:
92:a5:a5:77:25:c8:61:d6:b4:48:75:de:6e:10:8c:
7c:b3:e2:41:b0:af:62:dc:f6:5e:d2:c9:97:e8:11:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E6:88:89:65:FF:55:5B:6F:30:A0:B5:A1:85:65:76:F4:F9:33:F9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8eaIiWX_VVtvMKC1oYVldvT5M_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.31.0/24
84.32.64.0/24
84.32.148.0/23
84.32.152.0-84.32.154.255
84.32.156.0/22
84.32.172.0/24
84.32.175.0-84.32.176.255
84.32.250.0/24
88.216.20.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.108.0/24
88.216.111.0/24
88.216.132.0/24
88.216.185.0/24
88.216.213.0/24
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:da:c5:b1:5d:70:ed:b4:fb:af:9b:6e:14:d9:8e:72:ab:28:
8d:00:79:7a:a8:97:13:ac:f3:86:8e:78:b1:12:20:db:23:1f:
52:6d:22:67:c0:2f:11:27:80:71:78:d4:52:9e:85:04:fc:b8:
4f:5c:44:0a:61:7d:ea:04:be:98:a2:8d:87:95:7b:7d:6b:bc:
62:4c:42:a7:bb:d5:9c:d2:93:82:56:bd:58:fb:3f:35:03:6e:
91:63:f1:e3:f1:b1:b8:71:83:2f:be:1e:58:40:14:9e:e5:c6:
79:2f:47:25:a8:f7:3f:96:49:84:d1:86:0c:74:ac:57:44:cd:
2f:ad:63:34:d8:10:f5:c0:5c:81:dd:e6:e4:11:c7:48:05:b1:
ff:0f:64:2e:d0:f3:50:cb:cc:ff:8a:43:22:18:b6:56:e2:b8:
23:55:57:b8:5a:13:2a:00:41:82:5c:b4:c4:ac:91:a2:da:ad:
2b:9b:67:08:d6:3a:a9:06:e9:8f:c9:26:2a:01:ef:0e:f0:8c:
28:c1:94:24:96:44:66:fc:d9:53:92:26:24:2e:d8:51:f8:97:
03:72:6c:a5:a1:0d:ec:49:e8:4a:b4:16:32:66:b2:41:7e:68:
da:33:25:b1:f9:e7:a2:c6:48:b1:04:ce:e6:13:f5:af:a7:5f:
a2:e8:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org