Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BE2zVtwpMd1z9zSQtQLVoP9HeaY.roa
File: BE2zVtwpMd1z9zSQtQLVoP9HeaY.roa (raw, json)
Hash identifier: I2iN5hSSdAYYlCnmyhKtvYEE/jomTMCsfnGId5vV3O8=
Subject key identifier: 04:4D:B3:56:DC:29:31:DD:73:F7:34:90:B5:02:D5:A0:FF:47:79:A6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185BBEBA9A45E99B40B7330648ECCD62295
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BE2zVtwpMd1z9zSQtQLVoP9HeaY.roa
Signing time: Mon 16 Jan 2023 18:51:01 +0000
ROA not before: Mon 16 Jan 2023 18:51:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
88.216.209.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.178.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jan 2023 15:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:eb:a9:a4:5e:99:b4:0b:73:30:64:8e:cc:d6:22:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 16 18:51:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=044db356dc2931dd73f73490b502d5a0ff4779a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:80:bf:fc:01:89:04:ef:86:dc:b4:f3:a7:d4:
58:fb:fb:13:d3:5e:6d:4c:21:7a:da:da:18:58:7f:
0e:c8:3e:ad:33:d3:80:84:3b:31:8b:6e:be:a0:b8:
9b:44:d7:4f:a9:2b:40:d6:16:4b:dc:ac:7f:b3:f0:
b9:b3:42:6c:d8:42:ff:57:d2:7b:d7:f6:a5:ca:df:
a9:dc:56:a0:13:74:54:9a:ca:fa:1f:ce:7f:0a:d3:
2c:ed:1c:6b:0f:8f:97:60:4f:99:54:40:ff:b6:6c:
7c:48:c6:e9:b2:47:f7:54:73:b1:b6:40:b8:82:8d:
81:de:dd:09:39:5d:0d:d3:41:fb:8c:97:73:02:d8:
d2:45:c0:8e:e7:ff:1f:ae:31:82:49:67:b3:79:33:
ba:a0:af:d8:5a:74:e5:71:01:49:f9:19:d1:c3:ae:
41:9f:2d:75:9f:38:3f:db:d9:76:ef:23:64:69:f5:
4c:a2:66:a2:f6:9a:f9:73:77:fb:8b:dc:bb:00:73:
f7:2c:83:e0:3a:4c:c1:7c:9d:3f:d3:e2:92:45:42:
9f:a9:c2:61:11:cf:53:45:8e:ec:2e:7c:e5:0b:a3:
7d:32:44:58:dc:b7:0c:4f:79:ca:e9:bd:fa:06:6c:
77:ca:d0:e0:74:5d:8c:ce:33:4e:9b:ac:4d:4a:8f:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4D:B3:56:DC:29:31:DD:73:F7:34:90:B5:02:D5:A0:FF:47:79:A6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BE2zVtwpMd1z9zSQtQLVoP9HeaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.28.0/24
84.32.44.0/24
84.32.46.0/23
84.32.59.0-84.32.60.255
84.32.66.0/24
84.32.68.0/24
84.32.90.0/24
84.32.178.0/24
84.32.225.0/24
84.32.227.0/24
84.32.255.0/24
88.216.95.0/24
88.216.103.0/24
88.216.129.0/24
88.216.188.0/24
88.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:df:5e:1a:f4:36:e8:70:84:f4:cb:11:71:fb:84:6b:92:e3:
c9:93:e8:60:63:08:2b:5f:22:4a:2d:be:9a:94:ce:86:1d:a3:
b6:8d:97:ed:70:5a:db:ff:f5:ea:64:75:ba:e8:49:49:53:4b:
5d:95:38:b2:32:a3:b8:1f:fc:a0:cb:ff:9d:ec:99:21:75:6f:
c4:d2:4d:ed:69:0f:60:3d:15:9f:45:cb:36:7c:04:d2:be:9e:
80:98:12:8a:e1:d1:b6:94:2d:63:92:f4:a4:80:89:01:c6:6b:
19:c8:2f:d5:6b:39:53:e4:42:00:de:a6:fb:eb:23:2f:7b:b0:
17:f8:a2:85:94:64:31:a4:6b:56:17:17:8f:7a:50:85:4d:4b:
a5:31:c9:6f:7d:80:50:76:b5:8a:2f:d2:81:a0:30:5d:62:3b:
b9:b4:89:44:4e:ff:3e:07:13:19:06:99:97:9a:17:6e:55:e3:
cb:df:e1:96:de:32:a4:1a:f0:d3:8b:a8:10:04:41:e8:18:ad:
cf:4e:b9:ba:3f:ae:2e:66:47:21:0f:b8:c2:b3:a4:11:20:f8:
fb:54:25:e3:5f:4b:36:34:b2:e6:f1:c4:19:89:b4:68:c4:b4:
86:29:c4:ad:df:5d:ef:9c:9f:eb:47:3c:26:5a:80:0a:2e:5e:
18:5c:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:25 2024 by rpki-client on console-ams.rpki-client.org