Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C550v_4Mvi-y8ZT7IyAMha_ZSXM.roa
File: C550v_4Mvi-y8ZT7IyAMha_ZSXM.roa (raw, json)
Hash identifier: rckkBo1irr58vyIeUak9DY5bpdhmZpvv06awag76IXI=
Subject key identifier: 0B:9E:74:BF:FE:0C:BE:2F:B2:F1:94:FB:23:20:0C:85:AF:D9:49:73
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0192BE243630CCFAC05F8E4FC7C183DE998C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C550v_4Mvi-y8ZT7IyAMha_ZSXM.roa
Signing time: Thu 24 Oct 2024 10:48:17 +0000
ROA not before: Thu 24 Oct 2024 10:48:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Oct 2024 15:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:24:36:30:cc:fa:c0:5f:8e:4f:c7:c1:83:de:99:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 24 10:48:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b9e74bffe0cbe2fb2f194fb23200c85afd94973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:f1:89:a2:07:d2:66:86:c0:12:c6:fc:e5:
33:88:d6:a8:2f:73:b1:f9:31:9d:b6:cc:d4:61:ce:
7b:13:eb:f3:fe:97:91:f9:00:c3:06:fa:64:19:2a:
ac:7d:98:0d:27:cf:04:b1:cc:1a:1c:c4:9f:30:fd:
07:3e:c0:e2:4c:b4:ff:f3:68:d4:95:64:21:1f:d0:
d8:d3:05:db:9d:88:92:c8:95:39:83:fc:66:a2:a7:
47:27:d1:1f:c4:bf:2a:75:b6:67:58:89:f5:01:ab:
53:53:08:7b:65:a8:e1:73:c4:aa:83:7d:b7:b1:cc:
76:4f:9f:a3:59:e0:cd:f1:aa:0e:17:c6:1f:e4:dd:
57:23:8a:f0:19:01:05:17:0b:2b:61:65:1a:17:78:
9f:a8:d6:a7:e2:eb:1b:2b:b5:60:26:97:16:ce:c7:
de:7d:51:22:97:37:2e:82:af:7d:e6:7f:6d:c7:ed:
ba:d4:22:46:47:bb:0e:40:74:ea:3b:b7:51:19:4b:
78:fd:96:9c:4d:12:06:96:9d:76:a2:50:2b:85:0b:
c4:73:96:92:3d:fa:22:f9:35:db:fd:ed:fa:4e:1c:
c4:01:4e:09:df:8d:e2:34:8c:9a:ed:f3:fc:1c:76:
43:d5:57:78:21:c5:b6:8f:89:63:18:5c:cc:8a:cd:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9E:74:BF:FE:0C:BE:2F:B2:F1:94:FB:23:20:0C:85:AF:D9:49:73
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C550v_4Mvi-y8ZT7IyAMha_ZSXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.70.0/24
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0/23
88.216.134.0/23
88.216.197.0/24
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:8c:39:ab:28:43:1d:94:56:4f:1c:58:57:e9:d0:e5:9f:5f:
e9:71:42:72:8e:f9:dc:c9:9c:cf:17:fe:aa:fb:96:96:bb:09:
ae:55:18:76:11:4f:69:f0:a7:a7:a3:37:39:4c:f7:fd:07:0c:
79:43:df:76:31:c4:25:96:8e:52:25:eb:9f:f2:52:3f:b7:fe:
45:a6:fe:33:df:1f:12:ec:71:59:b7:bb:b0:c9:4e:f5:09:ae:
c2:b7:61:b7:2b:3d:3c:33:fe:6a:5b:d4:4c:ca:30:c4:c6:53:
65:9b:ca:7e:dd:d2:33:da:48:af:e4:3d:66:d0:08:a3:9e:19:
b1:9b:e5:26:13:b6:83:45:4a:89:a7:6d:28:9b:7e:e2:74:da:
50:1c:0a:e3:5c:22:e9:84:2b:3f:e4:57:cd:fd:1c:ac:b6:b5:
55:99:b5:d6:7b:b6:22:15:7e:30:47:73:05:e5:c4:f4:1f:94:
dc:40:a1:a3:17:aa:fb:87:2c:05:18:3e:27:4c:3d:6b:66:a3:
7b:b4:0c:cf:b3:ac:af:e7:ea:3e:ef:c5:8f:1a:0a:cd:34:c0:
f0:96:9d:c8:d4:0e:00:14:c2:db:7b:01:79:1b:a9:6c:ae:ff:
c5:71:f6:e0:7e:9f:69:47:e4:be:cd:a9:71:3a:05:b9:7b:93:
2d:cc:72:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 17:28:45 2024 by rpki-client on console-ams.rpki-client.org