Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9itj6RvawHtFKHH79_0s2vVGAm4.roa
File: 9itj6RvawHtFKHH79_0s2vVGAm4.roa (raw, json)
Hash identifier: rxC22mYcsNDxIe3pFaSOJkVCqjOnlTIHQDHGsVP/lUA=
Subject key identifier: F6:2B:63:E9:1B:DA:C0:7B:45:28:71:FB:F7:FD:2C:DA:F5:46:02:6E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185AA27F9C49CA1331432035D24EB91DA37
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9itj6RvawHtFKHH79_0s2vVGAm4.roa
Signing time: Fri 13 Jan 2023 08:03:44 +0000
ROA not before: Fri 13 Jan 2023 08:03:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
88.216.108.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
84.32.172.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:27:f9:c4:9c:a1:33:14:32:03:5d:24:eb:91:da:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 13 08:03:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f62b63e91bdac07b452871fbf7fd2cdaf546026e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:04:43:d5:80:41:c8:14:f6:f8:88:c3:20:bc:
42:60:e1:33:6a:d2:6d:ad:4b:65:d0:45:66:b7:1c:
83:ee:51:ba:e3:87:fb:4b:19:b0:58:5a:48:b7:ad:
8f:06:04:93:36:6c:98:c7:52:10:b9:7a:aa:2f:8d:
af:d2:ec:17:6a:26:85:90:a6:65:0b:6e:3b:d3:2d:
bc:89:14:c0:3c:23:e5:34:7b:cb:3f:b0:76:ae:7f:
4b:55:c7:28:90:d0:a9:de:b0:c9:cb:98:4a:3e:53:
98:a7:ac:1a:90:c1:8c:18:20:8c:51:20:0c:dc:63:
03:c1:1b:47:a1:d9:09:03:57:f7:ff:ae:9f:b5:15:
c7:d7:38:14:04:b4:4c:df:96:14:eb:49:6b:bd:bb:
37:f8:0d:95:73:f2:c2:ab:44:05:fc:e1:69:3f:40:
29:a9:c9:aa:6d:e4:ea:b6:62:c6:a8:8e:a6:8d:c1:
8e:5b:29:46:c8:8f:cb:26:34:78:75:91:f4:dd:97:
9f:0f:1b:1a:66:08:12:a3:f6:b4:4e:74:2a:7b:44:
6a:8d:33:8e:80:86:54:8a:e6:8c:bb:f5:f9:ee:b0:
37:60:47:54:5e:d6:c7:57:a1:8e:46:03:25:07:bc:
90:00:20:7f:79:17:dd:b4:ab:94:dc:04:72:42:7d:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2B:63:E9:1B:DA:C0:7B:45:28:71:FB:F7:FD:2C:DA:F5:46:02:6E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9itj6RvawHtFKHH79_0s2vVGAm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.31.0/24
84.32.64.0/24
84.32.148.0/23
84.32.152.0-84.32.154.255
84.32.156.0/22
84.32.172.0/24
84.32.175.0-84.32.176.255
84.32.250.0/24
88.216.20.0/24
88.216.23.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.108.0/24
88.216.131.0/24
88.216.185.0/24
88.216.213.0/24
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1f:f4:ee:71:98:43:34:6a:5b:c0:8f:da:92:ce:82:f3:73:
41:c0:ff:c0:cc:5a:f5:56:3e:5c:6a:c9:c0:2f:9e:db:f7:c8:
01:04:f5:94:73:ff:d3:cd:5b:eb:0e:e7:a4:1b:88:8d:7d:ea:
04:17:7f:b8:a9:dc:54:18:b9:45:0d:af:a8:b1:71:ae:76:de:
6c:e6:16:b3:2e:e2:99:e6:5b:4e:98:9b:0d:a6:9c:3e:ed:4a:
ed:49:03:f5:67:02:e0:0b:25:5a:25:e0:ae:98:ef:73:07:a9:
0e:df:a2:1e:94:0d:3d:3e:11:b9:ff:e3:d0:44:83:bd:f2:0b:
b3:9f:e3:2f:97:d8:cf:2b:55:59:9a:52:df:ec:a4:7c:4b:c8:
3e:f6:fd:67:10:5b:d0:de:d9:3a:c3:10:e1:bb:e8:f5:fe:8c:
37:de:14:4b:fc:eb:ea:95:93:74:89:28:65:02:03:f1:55:c4:
dc:c4:15:29:68:dc:4c:62:07:22:58:31:bc:50:e3:15:5c:f7:
f9:cf:11:20:7d:ca:08:f9:82:d8:01:4a:b6:1d:0c:25:9f:85:
5d:cf:8c:2d:1b:46:64:15:9a:e7:56:84:12:25:e8:51:06:f6:
74:0f:d4:8c:67:99:b4:41:51:a0:e0:eb:04:f3:40:59:02:10:
fd:60:74:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org