Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9SRg-ugTm_bZMqGzJiCE_iCWjBg.roa
File: 9SRg-ugTm_bZMqGzJiCE_iCWjBg.roa (raw, json)
Hash identifier: XavvVqu2vE6E0GqGYnlUSXsF7OQsGhhTtOSiJZO08pM=
Subject key identifier: F5:24:60:FA:E8:13:9B:F6:D9:32:A1:B3:26:20:84:FE:20:96:8C:18
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018595A9F7F203923CBA01D36ECC9A9D374C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9SRg-ugTm_bZMqGzJiCE_iCWjBg.roa
Signing time: Mon 09 Jan 2023 08:33:42 +0000
ROA not before: Mon 09 Jan 2023 08:33:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 88.216.199.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:a9:f7:f2:03:92:3c:ba:01:d3:6e:cc:9a:9d:37:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 9 08:33:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f52460fae8139bf6d932a1b3262084fe20968c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:4d:0a:f2:5c:41:9c:29:29:8c:a1:c2:2e:
9e:a0:15:d2:8d:c6:e5:58:f7:4a:67:e4:43:37:19:
36:a8:e8:4d:92:06:7c:92:5b:d8:c8:b4:f7:17:a0:
66:c1:72:cf:66:a7:cf:15:46:ee:bd:4e:a1:8e:39:
3b:46:b1:c9:0d:d7:f2:eb:ef:b8:aa:8a:4e:c6:a8:
25:4d:e2:20:b9:27:0a:7a:85:cd:74:69:5e:ca:2b:
d5:74:a7:c5:3d:22:47:12:93:20:fc:b9:35:22:5b:
5b:10:a8:d3:47:96:59:7d:84:75:41:2c:fc:0d:ca:
14:4b:7b:1b:90:78:00:33:2a:ee:f4:8c:24:a7:bc:
c5:45:75:9b:67:d7:46:a6:be:34:e5:58:eb:f2:70:
f2:bd:c3:9b:65:87:e1:03:91:41:f0:84:ca:e5:f3:
e1:6b:c4:ad:ad:18:0d:5d:3b:aa:20:5c:04:18:d8:
dc:13:ca:d0:ce:04:08:a8:2d:0b:48:81:e6:5f:94:
32:2a:69:d2:ca:4b:02:e0:50:10:a5:59:58:bc:8d:
f4:45:cc:93:84:32:f1:d4:28:cd:bc:d3:f1:b2:fe:
bf:ae:51:a8:b3:fe:c9:7b:f6:57:61:35:60:e6:bf:
8c:cb:25:d6:91:56:e5:f2:70:ab:bf:9d:89:7e:d3:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:24:60:FA:E8:13:9B:F6:D9:32:A1:B3:26:20:84:FE:20:96:8C:18
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9SRg-ugTm_bZMqGzJiCE_iCWjBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.10.0/24
84.32.48.0/24
84.32.50.0/24
84.32.58.0/24
84.32.71.0/24
84.32.88.0/24
84.32.93.0/24
84.32.108.0/24
84.32.150.0/23
84.32.177.0/24
84.32.218.0/24
84.32.226.0/24
84.32.232.0/24
84.32.239.0/24
84.32.245.0/24
88.216.3.0/24
88.216.21.0-88.216.22.255
88.216.32.0/24
88.216.46.0/24
88.216.92.0/24
88.216.134.0/24
88.216.199.0/24
88.216.210.0/23
Signature Algorithm: sha256WithRSAEncryption
74:03:ae:57:71:9f:81:6c:5d:8c:37:40:dc:ce:15:75:bd:f8:
10:e7:7f:28:c8:1f:87:c7:ed:a0:7e:c3:f3:47:a5:0f:23:3a:
c9:5f:38:17:87:da:5a:c4:db:2a:6d:40:26:9b:2a:7e:d1:1a:
78:5c:b9:cf:c1:05:a3:0d:e1:aa:e2:0f:ca:5b:c7:64:d2:b1:
44:50:97:24:a1:9b:b1:bb:4d:c9:86:a9:07:1b:ad:0a:3d:52:
10:9a:3d:06:60:03:a6:21:62:9a:a5:be:98:e7:d3:fa:87:76:
2a:3c:f1:d7:0a:3e:73:b2:67:a9:42:15:25:b0:41:7c:41:69:
38:6a:ba:8f:28:26:ff:06:dc:61:f4:25:05:06:b8:33:63:6a:
2b:5c:71:64:4b:64:8a:51:65:4f:ab:75:24:68:7d:17:fc:36:
4f:a6:56:28:bf:5d:ea:b0:69:cb:7e:05:09:a5:79:09:27:8e:
64:01:09:59:0f:f0:fa:4d:2f:6a:24:81:35:c9:77:4e:51:6b:
74:52:63:68:2d:3e:c6:46:f3:90:3e:f0:cd:3b:d3:41:ca:87:
db:23:02:a9:56:b7:f1:24:0d:cc:48:fc:38:15:f0:62:03:5d:
4f:1f:35:73:33:f0:70:2d:a6:88:b1:e3:d9:c3:b3:ab:ff:6e:
11:ed:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org