Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Bvq-qeq9-3rOxbPioSID2aLQqqk.roa
File: Bvq-qeq9-3rOxbPioSID2aLQqqk.roa (raw, json)
Hash identifier: t8aq4WHMwMBjMJO11GCBtm5VG10Nts9v4OC5CDTUzxg=
Subject key identifier: 06:FA:BE:A9:EA:BD:FB:7A:CE:C5:B3:E2:A1:22:03:D9:A2:D0:AA:A9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01862FDB58403211FEEA1DA7CE6C24C2CB7A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Bvq-qeq9-3rOxbPioSID2aLQqqk.roa
Signing time: Wed 08 Feb 2023 07:09:09 +0000
ROA not before: Wed 08 Feb 2023 07:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.190.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.78.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2f:db:58:40:32:11:fe:ea:1d:a7:ce:6c:24:c2:cb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 8 07:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06fabea9eabdfb7acec5b3e2a12203d9a2d0aaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:75:32:e7:2d:5d:a4:4a:21:fd:74:7c:4a:
2a:f8:02:89:30:19:0d:b8:17:6e:47:40:47:f4:b4:
67:0a:27:d1:32:f3:a1:a4:0b:38:ce:5a:45:1c:e7:
9b:ab:3b:be:9e:84:c6:35:d1:41:27:55:39:08:04:
05:1a:dd:89:ad:a1:f2:2a:26:3d:5d:4a:71:54:e4:
5b:18:0d:eb:8b:04:c7:19:ea:c4:a3:1d:c1:15:c1:
7c:8a:7b:b8:b2:0a:fb:64:e4:dc:bc:04:41:a3:bc:
b8:fc:ca:f6:75:21:bc:42:af:41:95:38:70:bb:75:
b7:b7:3b:3e:7b:e5:e5:47:5f:2d:bf:be:4c:d5:65:
04:6d:e0:44:29:fa:ab:ab:62:23:67:68:55:0e:37:
22:f2:57:6b:a9:b6:12:9b:6a:77:52:15:9f:3e:64:
d5:06:89:97:58:23:fd:c2:2d:52:fb:b6:93:4b:9a:
79:b1:1f:b5:10:62:87:4b:8e:c9:e8:17:4a:b8:df:
eb:7a:71:48:06:f2:71:8a:77:a5:ee:70:7a:cf:8e:
55:ac:52:02:e3:d5:b1:77:f7:4c:4a:2c:ac:94:32:
6b:cc:ce:d7:4b:de:f1:c0:fc:79:8e:78:8b:c9:a7:
43:77:d5:76:03:4b:43:ba:c3:b4:f0:c1:4b:ba:29:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FA:BE:A9:EA:BD:FB:7A:CE:C5:B3:E2:A1:22:03:D9:A2:D0:AA:A9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Bvq-qeq9-3rOxbPioSID2aLQqqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0-84.32.28.255
84.32.30.0/24
84.32.46.0/24
84.32.76.0/22
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.220.0-84.32.222.255
84.32.240.0/24
84.32.243.0/24
84.32.252.0/23
88.216.17.0/24
88.216.93.0/24
88.216.128.0/23
88.216.132.0-88.216.134.255
88.216.190.0/24
88.216.213.0/24
88.216.215.0/24
88.216.220.0/24
88.216.228.0-88.216.239.255
Signature Algorithm: sha256WithRSAEncryption
9b:42:4c:1d:97:99:49:1b:21:29:cf:2a:ed:55:80:9e:2a:fb:
68:35:10:c8:d2:f0:df:87:03:7c:7a:5b:f2:43:f7:54:94:69:
16:e9:f5:50:91:dc:25:75:d1:22:ab:ec:c0:bb:bf:0d:37:ee:
ce:83:66:f0:05:2a:f6:a1:42:26:55:e4:c8:61:52:39:f4:78:
1d:78:e0:de:4f:df:04:f9:83:44:b6:5e:95:d6:44:fd:97:0a:
ed:44:ac:a2:0b:7f:63:1e:ca:37:9d:19:25:01:75:d8:bb:0b:
6a:53:f1:3c:be:a3:75:f8:c2:68:28:51:3c:0a:ef:e2:eb:c0:
35:5b:23:65:b1:28:13:c1:15:f6:d5:1b:ad:47:c0:32:9e:97:
21:1d:32:d2:95:5a:07:08:ae:6a:25:3b:7b:78:c7:d8:e9:81:
76:08:29:36:03:73:38:12:81:ac:93:fe:53:21:f8:86:7e:a7:
ef:af:42:ba:74:be:ac:ed:28:8b:f8:c7:93:c5:9d:21:59:d1:
8d:3b:b4:f1:2f:59:dd:80:2c:0a:e4:e9:19:ce:4c:68:ff:95:
8e:7e:b7:8d:6c:14:ef:82:23:12:6c:da:6a:cf:b3:a9:11:4b:
b0:22:89:12:ef:88:72:a1:0a:09:b3:03:e2:90:3e:b8:bf:36:
f3:e2:c9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org