Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CdtE2qthlG_qVp9vZtCURyoKtwA.roa
File: CdtE2qthlG_qVp9vZtCURyoKtwA.roa (raw, json)
Hash identifier: 7LeW0oLfXLQ5QnmyyGNOu1Oe7qsm1Kdfn3K4ZOsLo9U=
Subject key identifier: 09:DB:44:DA:AB:61:94:6F:EA:56:9F:6F:66:D0:94:47:2A:0A:B7:00
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01861103465408EC91F885B8E5386F0B8AA9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CdtE2qthlG_qVp9vZtCURyoKtwA.roa
Signing time: Thu 02 Feb 2023 07:24:32 +0000
ROA not before: Thu 02 Feb 2023 07:24:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 84.32.57.0/24 maxlen: 24
84.32.67.0/24 maxlen: 24
84.32.91.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.111.0/24 maxlen: 24
88.216.130.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Feb 2023 07:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:03:46:54:08:ec:91:f8:85:b8:e5:38:6f:0b:8a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 2 07:24:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09db44daab61946fea569f6f66d094472a0ab700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:cb:04:b0:b5:49:51:ad:05:b0:bd:4b:0a:
54:1e:49:37:a3:03:25:dc:84:0d:0d:0c:cc:aa:c0:
12:d1:3a:50:06:0b:88:fe:ee:ea:f5:51:d1:5d:5a:
98:ba:00:a0:51:fe:8c:2b:98:4e:f4:51:8f:9e:d4:
b0:f2:71:45:19:0a:0f:64:c0:07:62:5f:d0:70:83:
55:b7:1a:57:a2:f9:dd:3f:59:e6:d3:37:55:40:5b:
d7:75:6c:c7:3b:65:d3:1b:55:71:11:b5:ea:7d:85:
8f:30:7c:80:5d:ee:a5:01:de:db:be:ae:4c:71:85:
3b:0b:ad:52:cb:e8:62:4f:26:35:68:3f:be:42:56:
70:97:8c:9f:c2:51:49:59:7b:e6:06:f9:26:88:e6:
43:58:38:05:a6:0f:3c:4f:b7:8f:ce:58:93:de:dd:
51:6b:31:c6:09:53:a3:cd:f1:b4:03:30:73:fd:86:
9f:2d:9f:1d:de:58:79:c7:2c:12:97:d8:d2:b4:41:
f7:25:37:9a:71:c9:59:cd:9f:a8:c6:85:f8:6f:38:
81:ec:72:43:75:f0:99:b7:b4:78:d3:48:58:ea:e5:
c1:b9:9a:33:24:90:7b:de:3e:80:c6:ba:b2:a8:37:
2f:3a:a3:11:71:ed:04:3a:46:dc:e1:07:73:c9:f2:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DB:44:DA:AB:61:94:6F:EA:56:9F:6F:66:D0:94:47:2A:0A:B7:00
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CdtE2qthlG_qVp9vZtCURyoKtwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.57.0/24
84.32.67.0/24
84.32.91.0/24
84.32.110.0/23
88.216.39.0/24
88.216.93.0/24
88.216.104.0/24
88.216.130.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d3:3c:e3:c7:b7:44:c5:69:ef:db:58:bb:12:a2:4d:4e:94:
81:e4:60:b8:52:2a:e4:4f:f5:97:d4:1f:ea:7f:ea:1b:99:8e:
08:01:21:00:c8:00:ee:30:fb:72:ba:5f:3f:a8:ba:ee:03:91:
03:44:5b:a2:20:52:00:cd:78:c9:7d:d1:f5:78:70:91:99:71:
a0:22:5b:80:d8:55:aa:24:98:77:1f:e0:e5:c1:28:91:24:a9:
16:d7:5f:42:07:f4:2c:00:46:00:70:c9:30:49:12:b6:75:9f:
3c:59:04:0e:45:cf:15:cd:97:86:cd:f5:f7:a9:ea:ae:80:e5:
58:ea:57:96:99:b2:c0:a5:4c:c8:38:c7:5a:d8:c4:57:13:e2:
90:e8:59:91:ea:d0:69:67:50:2a:79:ce:03:19:e4:ea:a0:cf:
71:54:53:58:81:aa:c0:0e:40:5b:c8:8b:b5:f5:0a:a4:06:4e:
f1:5a:ef:ad:81:5d:69:b5:ba:f6:1d:1f:1a:c4:dc:2b:e5:36:
ee:d3:67:ec:e4:e7:08:81:4f:99:fe:18:54:6b:35:2a:fa:03:
cc:30:ec:9b:49:cd:cf:e4:30:51:80:79:37:5e:a8:e1:67:ae:
6d:92:1a:01:af:cf:fc:96:07:f5:65:f3:11:ab:29:0e:c3:77:
a1:cb:80:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org