Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CdrJmgIHs8LKU6ykLLSgES0qC0s.roa
File: CdrJmgIHs8LKU6ykLLSgES0qC0s.roa (raw, json)
Hash identifier: 0B5eNXfB6xRI/OvXN3mHN8NtaOqXb+i0QIXBx8khGqw=
Subject key identifier: 09:DA:C9:9A:02:07:B3:C2:CA:53:AC:A4:2C:B4:A0:11:2D:2A:0B:4B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187EC216A911187E2DD3C24D5206A00015B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CdrJmgIHs8LKU6ykLLSgES0qC0s.roa
Signing time: Fri 05 May 2023 13:37:05 +0000
ROA not before: Fri 05 May 2023 13:37:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.63.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.32.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:21:6a:91:11:87:e2:dd:3c:24:d5:20:6a:00:01:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 5 13:37:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09dac99a0207b3c2ca53aca42cb4a0112d2a0b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:a8:89:40:5d:2f:b5:15:ad:ea:a5:d8:67:
86:34:de:22:f0:8d:10:88:00:fb:12:0c:8c:cf:22:
30:bd:60:29:3a:0c:0e:b6:2f:53:1d:8a:77:61:0d:
7b:f5:df:43:38:ff:2c:d3:00:7d:3c:e3:f7:90:fb:
ae:49:0f:a7:8d:10:e0:41:8f:fe:00:b6:fe:9d:73:
74:2e:16:34:16:f2:fe:4a:f9:01:1c:8b:c7:12:4c:
dc:a0:92:21:98:4d:76:e6:9c:f7:eb:61:3a:db:68:
50:02:7b:1c:f3:f2:dc:b4:a8:6d:75:63:09:2c:bd:
10:93:67:a9:99:16:cf:ff:c2:12:ab:d4:ca:75:52:
33:f0:5a:dc:b1:88:eb:2a:23:72:38:69:ff:e6:28:
c0:d7:0b:0d:8b:ed:b4:40:78:e2:e3:b6:76:f4:f4:
5d:71:c3:c8:70:1a:c8:85:e7:7e:06:32:73:7c:a1:
87:cb:ae:e6:ac:33:05:6d:60:4b:18:47:e2:51:17:
4d:91:81:31:ea:50:60:d4:25:10:7c:34:22:df:00:
da:a2:08:91:0c:6f:10:0c:a5:95:58:ce:9b:f5:23:
0a:34:0e:6a:27:b2:ef:95:97:cc:c2:f8:10:45:56:
11:ee:a8:ed:04:e1:a7:68:a0:f8:f3:85:d9:3d:d6:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DA:C9:9A:02:07:B3:C2:CA:53:AC:A4:2C:B4:A0:11:2D:2A:0B:4B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CdrJmgIHs8LKU6ykLLSgES0qC0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.32.0/24
84.32.63.0/24
84.32.95.0/24
84.32.149.0/24
88.216.2.0/24
88.216.34.0/24
88.216.181.0/24
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
31:96:08:20:78:0d:da:d2:5c:38:8b:5d:19:66:6d:d4:99:d2:
c7:4f:e3:78:12:ea:fc:d5:17:e6:7b:b9:58:29:0d:8e:ca:4b:
bb:83:15:1e:14:8e:84:1e:3c:b2:30:61:dc:5c:9b:90:0d:14:
39:75:1f:f3:d0:4e:57:0b:56:9b:7d:10:a3:8d:48:4b:ae:b7:
56:e7:d9:ae:2b:52:96:bb:50:0d:8e:42:15:75:6b:55:41:48:
66:02:e1:44:86:b9:df:fa:e3:69:3c:58:f6:1a:1a:9a:b3:9d:
d3:91:c5:c1:23:5e:d1:f6:68:c0:d0:75:8b:b3:e8:f4:61:41:
ce:9b:25:75:cb:cf:a8:5b:a2:2e:f8:e1:16:c7:6c:52:0b:6c:
d8:1c:6f:21:5e:4e:3d:2f:06:e3:e6:77:c3:d1:a4:54:4b:cc:
df:12:e5:50:37:f0:51:5b:af:dd:28:8c:95:15:10:38:0b:23:
f3:35:5e:fe:ff:39:f7:b3:41:69:ba:68:d3:77:4a:22:3f:c7:
ae:6e:6a:b9:84:c3:ff:3e:b5:48:5d:38:14:55:b6:55:a6:8c:
2e:bc:cc:d4:07:11:e2:43:b7:91:4c:f1:af:02:b3:62:fb:02:
64:cb:7c:87:19:04:cb:60:16:f0:e7:37:a6:f5:b5:18:37:bb:
b8:c7:4b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:28 2023 by rpki-client on console-ams.rpki-client.org