Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/D62MzjzwMoKDKjAW-ZDht9UyaXg.roa
File: D62MzjzwMoKDKjAW-ZDht9UyaXg.roa (raw, json)
Hash identifier: l1kzzZDk1nwDiMwtzwz7hpG7qJVotH+ig+KZPOLgSvU=
Subject key identifier: 0F:AD:8C:CE:3C:F0:32:82:83:2A:30:16:F9:90:E1:B7:D5:32:69:78
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185716936390619BFE884FC183AD5756D38
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/D62MzjzwMoKDKjAW-ZDht9UyaXg.roa
Signing time: Mon 02 Jan 2023 07:36:38 +0000
ROA not before: Mon 02 Jan 2023 07:36:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.178.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.90.0/23 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
88.216.135.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 07:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:36:39:06:19:bf:e8:84:fc:18:3a:d5:75:6d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 07:36:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fad8cce3cf03282832a3016f990e1b7d5326978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:ab:e2:b9:a5:be:e3:59:ce:56:3c:43:73:
95:4d:d5:2c:d5:bf:b6:1d:34:10:65:82:a1:57:66:
cb:6a:c7:80:9d:a9:83:b1:d3:d6:86:ad:4f:4a:e1:
90:bc:5b:0a:0f:4d:80:ef:ab:75:a4:59:8d:93:6b:
b9:c4:75:b6:be:a3:fb:6b:ac:4e:e5:16:87:ce:e5:
1e:a4:8b:7e:6a:8f:0e:79:29:d8:e1:ae:f1:f3:02:
d7:16:d7:98:d9:41:cd:f1:07:40:45:b5:2b:a7:f3:
13:e1:86:ea:c5:30:d3:fb:a5:8c:88:8c:53:6c:9e:
0f:a4:0b:fa:9f:d3:e5:87:76:5f:fe:32:22:5c:f4:
8a:78:05:dc:b4:82:2e:33:30:9c:64:f7:51:fd:3d:
3f:c2:c9:ea:15:98:58:78:e3:60:bc:4b:21:da:25:
4f:fa:e3:1b:11:0b:17:1e:8e:9a:1b:f0:f8:69:61:
b4:56:62:83:ee:f7:7d:75:2d:39:0a:d2:0b:bf:90:
6a:34:34:89:47:4b:21:f2:d5:cd:b4:bb:1f:09:80:
53:30:36:51:8b:3b:e0:5c:78:ce:e8:22:f2:62:2b:
f1:2f:be:c3:ad:5c:9a:7e:39:aa:35:06:ac:f7:bd:
3d:1d:f3:e2:92:69:8c:f0:dc:85:01:22:1e:93:21:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AD:8C:CE:3C:F0:32:82:83:2A:30:16:F9:90:E1:B7:D5:32:69:78
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/D62MzjzwMoKDKjAW-ZDht9UyaXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.90.0/23
84.32.178.0/23
84.32.212.0/24
84.32.220.0/24
84.32.222.0/24
88.216.42.0/24
88.216.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:92:35:c4:bd:cf:46:6f:a4:cc:07:e2:9e:6b:51:c7:b3:54:
b8:25:63:7e:15:bd:bf:92:67:05:56:90:49:68:84:67:e9:ef:
f8:89:8b:bf:3a:6f:36:3d:8e:78:66:28:f4:01:1a:22:09:7b:
46:85:cb:c4:c7:5a:9b:57:f3:78:95:54:1f:63:6d:82:02:3f:
e7:1d:f0:35:dd:c6:bf:5c:fa:42:40:0b:ff:66:82:bc:a1:27:
f6:30:51:ce:11:2f:6a:dc:5c:98:32:f4:99:44:02:71:eb:41:
12:20:5d:9e:3d:a7:04:a5:3c:59:e6:94:56:b4:c8:48:21:eb:
6c:9c:a5:f2:c2:8e:9e:5d:75:57:8c:fa:b0:bb:a4:26:89:5c:
ed:5b:2c:77:8b:13:a7:df:e7:a4:73:45:56:d6:72:f8:49:40:
bd:5b:b7:f3:97:b6:bf:b5:c6:28:d2:87:cd:36:9e:ee:d7:91:
38:19:ab:db:b9:b0:47:e4:1a:ce:f0:8f:8f:a4:6f:9d:67:29:
55:2a:f9:9e:af:9d:8c:f1:6d:ca:20:ea:8f:37:4f:b5:cf:c1:
be:bc:76:9c:da:7d:d8:35:fe:3c:01:7f:8a:0f:22:c2:bd:c4:
3f:47:81:00:74:e7:0b:71:b3:f3:79:7e:b1:f3:35:e2:0e:38:
1c:c7:a9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org