Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Du0kcypoTWAoQQfoXsHasvUGEC8.roa
File: Du0kcypoTWAoQQfoXsHasvUGEC8.roa (raw, json)
Hash identifier: TFfmUvXq+YDvJGQwNO3NQzXi4OB+JoBLEliDwx52GQM=
Subject key identifier: 0E:ED:24:73:2A:68:4D:60:28:41:07:E8:5E:C1:DA:B2:F5:06:10:2F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185AA27F925019D2D33D178D3B6D8593F7C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Du0kcypoTWAoQQfoXsHasvUGEC8.roa
Signing time: Fri 13 Jan 2023 08:03:44 +0000
ROA not before: Fri 13 Jan 2023 08:03:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
88.216.209.0/24 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.178.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Jan 2023 15:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:27:f9:25:01:9d:2d:33:d1:78:d3:b6:d8:59:3f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 13 08:03:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0eed24732a684d60284107e85ec1dab2f506102f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:18:88:d4:b0:36:fc:a6:d3:e4:24:76:61:12:
7d:a5:b4:e7:75:1d:58:c5:c9:d5:b5:23:5f:68:21:
52:61:11:49:db:45:38:98:72:65:ed:e4:30:e3:07:
11:f0:a2:c2:79:2b:8f:75:b1:34:18:b6:27:9c:10:
4d:2c:af:03:87:c6:1e:fe:48:43:3d:18:b0:0b:2d:
9f:4e:1d:1e:ce:21:12:55:18:21:98:b2:39:dd:21:
ad:3f:10:57:ce:7e:bf:45:76:f4:5b:fb:89:1b:1a:
c1:29:5b:93:4f:d0:7f:1b:76:6b:c0:4d:a0:df:d9:
80:a8:3f:88:3c:43:77:90:ff:1d:0c:f3:2c:4f:7c:
ac:6c:cb:07:0b:4e:40:2b:67:14:7e:b8:97:72:6a:
71:38:32:80:56:6d:98:71:0c:12:5d:9b:20:e6:d4:
e0:b1:21:61:74:fd:d0:e7:af:60:6d:87:e3:27:be:
4e:81:29:6a:cf:7a:a4:79:c3:76:9f:c3:40:1d:eb:
15:95:fa:79:d9:8a:4d:a8:e6:e5:0c:f3:af:b2:bc:
3c:72:01:50:94:82:83:90:45:aa:87:0a:db:52:ec:
47:80:fc:f9:f8:4c:3f:d9:f8:a8:c2:bb:af:18:b6:
8a:bc:c1:47:a2:2c:3b:bf:2f:9a:a5:d2:be:72:b1:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:ED:24:73:2A:68:4D:60:28:41:07:E8:5E:C1:DA:B2:F5:06:10:2F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Du0kcypoTWAoQQfoXsHasvUGEC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.28.0/24
84.32.44.0/24
84.32.46.0/23
84.32.59.0-84.32.60.255
84.32.66.0/24
84.32.68.0/24
84.32.90.0/24
84.32.178.0/24
84.32.219.0/24
84.32.225.0/24
84.32.227.0/24
84.32.255.0/24
88.216.95.0/24
88.216.103.0/24
88.216.188.0/24
88.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:85:85:3d:db:0d:63:63:c4:16:7e:4a:2a:97:bb:fb:36:78:
0c:fc:c4:91:ac:d6:36:34:06:eb:6a:76:1b:05:fe:6b:1e:d9:
7c:87:25:fa:bb:00:48:42:f3:c8:ae:ec:86:c4:57:9e:17:4d:
cc:0d:61:66:56:b4:be:c0:6b:9a:30:46:f8:ee:a3:fa:8f:1e:
c6:62:02:1e:46:e0:41:52:3c:1a:09:4d:23:03:73:0e:9d:63:
24:29:38:66:eb:18:e4:0f:a9:82:58:2d:47:5e:f7:d1:96:25:
eb:7d:f5:b8:25:f8:95:41:71:92:82:62:da:81:34:fc:fd:47:
24:c9:64:6a:91:e4:58:bf:61:a8:c4:72:a8:bf:2c:bb:6b:e0:
d1:58:bb:a0:68:af:ba:d0:1e:ee:98:8b:ba:7f:0d:56:94:a5:
eb:f3:be:ef:22:a9:59:47:89:7a:cb:ef:78:cf:73:b2:11:c6:
d9:89:c1:9d:96:02:b9:db:79:f8:0d:cd:80:2d:88:a8:d1:2f:
5b:ec:64:7b:6b:e7:95:32:35:cc:aa:d9:f5:34:3b:e7:78:7a:
10:48:ca:de:7f:8b:85:f9:2d:31:a5:00:13:1c:34:bb:5b:45:
34:48:0d:2a:41:bb:9f:a8:f6:b4:17:cc:7b:9c:fd:56:98:f8:
75:e0:e7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org