Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CIlfjkvIiOp83tpolCW2sAQmHks.roa
File: CIlfjkvIiOp83tpolCW2sAQmHks.roa (raw, json)
Hash identifier: p/CcZW6ci9qK5J9+ItxiI0hgYPizU1p4QUVk2kAODao=
Subject key identifier: 08:89:5F:8E:4B:C8:88:EA:7C:DE:DA:68:94:25:B6:B0:04:26:1E:4B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01880E67E4F01EE3D76311089E73E1B40246
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CIlfjkvIiOp83tpolCW2sAQmHks.roa
Signing time: Fri 12 May 2023 05:21:09 +0000
ROA not before: Fri 12 May 2023 05:21:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 84.32.65.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 05:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:67:e4:f0:1e:e3:d7:63:11:08:9e:73:e1:b4:02:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 12 05:21:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08895f8e4bc888ea7cdeda689425b6b004261e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:fd:3e:b1:d3:5b:e0:b7:ca:42:ef:16:c5:
c1:42:16:2f:43:7b:01:f6:0c:92:80:6c:be:42:5b:
0c:77:96:29:1b:f2:77:f0:eb:eb:ee:61:08:42:fb:
68:fc:cf:fe:4f:64:6a:b2:13:e6:61:df:1e:06:bd:
9d:fe:1b:cc:c7:01:54:8a:53:91:f1:62:37:4b:27:
85:4a:5f:f2:cd:ba:b2:ea:dd:56:42:c6:7d:59:cb:
b4:e4:53:90:2b:09:cc:ba:bf:90:40:73:15:3b:4b:
8c:b3:19:42:f3:4b:a0:96:d9:bd:bb:4c:6e:56:a1:
4c:a9:ba:f5:03:c0:72:14:4c:f5:ca:16:62:6f:68:
47:20:29:ca:2d:2a:b7:e4:ed:05:64:f6:f8:b0:66:
4f:58:19:cc:d4:c3:46:a8:55:73:48:aa:3b:e1:66:
46:ea:da:a8:a1:0d:a2:1b:a9:ef:39:e9:9f:67:05:
50:78:21:5d:dc:67:13:1b:da:11:a6:d8:12:ee:58:
17:66:33:28:ae:ee:a2:12:02:0e:9d:86:72:50:b7:
8e:ab:d2:5d:15:c5:d3:f3:0f:5d:37:ea:2a:29:e0:
6a:1e:5c:02:9d:3d:6e:e4:13:41:fc:2f:25:a4:82:
02:90:81:f5:b8:6d:fa:30:8a:14:d6:6c:e7:c8:0b:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:89:5F:8E:4B:C8:88:EA:7C:DE:DA:68:94:25:B6:B0:04:26:1E:4B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CIlfjkvIiOp83tpolCW2sAQmHks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.26.0/24
84.32.29.0-84.32.30.255
84.32.45.0/24
84.32.65.0/24
84.32.76.0/23
84.32.79.0/24
84.32.92.0/24
84.32.94.0/24
84.32.155.0/24
84.32.210.0-84.32.212.255
84.32.241.0/24
84.32.243.0/24
84.32.255.0/24
88.216.105.0/24
88.216.190.0/23
88.216.198.0/24
88.216.211.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5a:03:be:d8:0d:37:cb:61:99:35:22:0b:40:e8:0e:e0:18:
00:65:3b:5d:53:c2:1c:f4:fe:01:a2:19:67:e2:3b:42:ad:6b:
8f:68:db:d1:e6:87:cb:1d:78:81:80:99:2b:7b:b9:b0:db:cc:
4d:5c:3f:e1:6a:97:99:86:a0:d7:3c:58:46:6e:81:d1:83:7b:
79:22:c1:f4:0a:11:45:a8:22:d5:25:a9:31:4d:c2:c9:af:af:
34:29:51:e3:ba:c4:58:14:ab:9b:ff:e9:81:35:a2:2e:49:c2:
c8:06:cc:66:d8:ee:f8:9e:1c:a2:c1:f8:4a:42:92:d6:67:ed:
de:b5:a7:f6:dc:f4:ee:b1:9b:8e:ec:87:c7:04:bb:6e:40:ac:
dc:d5:71:a4:6e:98:40:a6:9d:67:fe:24:f5:3d:5b:7a:90:9e:
0c:aa:c1:0e:cd:9e:0a:09:e6:1b:55:a5:50:90:1c:ac:c6:fb:
02:03:6e:2a:71:69:63:e3:b1:25:ff:e1:c7:cc:6d:d3:de:48:
6c:99:74:2d:b3:dc:74:6b:aa:d7:32:55:36:e8:ed:46:1d:ec:
4b:92:d8:75:b4:44:3e:47:1c:ca:4f:4b:77:c5:51:54:4e:e5:
37:52:12:f5:69:63:35:71:35:5a:76:f7:c0:42:25:89:3f:42:
de:b1:b6:7e
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAYgOZ+TwHuPXYxEInnPhtAJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNTEyMDUyMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODg5NWY4ZTRiYzg4OGVhN2NkZWRhNjg5NDI1YjZiMDA0MjYxZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u39PrHTW+C3ykLvFsXBQhYvQ3sB
9gySgGy+QlsMd5YpG/J38Ovr7mEIQvto/M/+T2RqshPmYd8eBr2d/hvMxwFUilOR
8WI3SyeFSl/yzbqy6t1WQsZ9Wcu05FOQKwnMur+QQHMVO0uMsxlC80ugltm9u0xu
VqFMqbr1A8ByFEz1yhZib2hHICnKLSq35O0FZPb4sGZPWBnM1MNGqFVzSKo74WZG
6tqooQ2iG6nvOemfZwVQeCFd3GcTG9oRptgS7lgXZjMoru6iEgIOnYZyULeOq9Jd
FcXT8w9dN+oqKeBqHlwCnT1u5BNB/C8lpIICkIH1uG36MIoU1mznyAu5jwIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFAiJX45LyIjqfN7aaJQltrAEJh5LMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvQ0lsZmprdklpT3A4M3Rwb2xDVzJzQVFtSGtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBABUIBow
DAMEAFQgHQMEAFQgHgMEAFQgLQMEAFQgQQMEAVQgTAMEAFQgTwMEAFQgXAMEAFQg
XgMEAFQgmzAMAwQBVCDSAwQAVCDUAwQAVCDxAwQAVCDzAwQAVCD/AwQAWNhpAwQB
WNi+AwQAWNjGAwQAWNjTMA0GCSqGSIb3DQEBCwUAA4IBAQAWWgO+2A03y2GZNSIL
QOgO4BgAZTtdU8Ic9P4Bohln4jtCrWuPaNvR5ofLHXiBgJkre7mw28xNXD/hapeZ
hqDXPFhGboHRg3t5IsH0ChFFqCLVJakxTcLJr680KVHjusRYFKub/+mBNaIuScLI
Bsxm2O74nhyiwfhKQpLWZ+3etaf23PTusZuO7IfHBLtuQKzc1XGkbphApp1n/iT1
PVt6kJ4MqsEOzZ4KCeYbVaVQkBysxvsCA24qcWlj47El/+HHzG3T3khsmXQts9x0
a6rXMlU26O1GHexLkth1tEQ+RxzKT0t3xVFUTuU3UhL1aWM1cTVadvfAQiWJP0Le
sbZ+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org