Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EMip621FWoAGLAKXvBWs68UuX1c.roa
File: EMip621FWoAGLAKXvBWs68UuX1c.roa (raw, json)
Hash identifier: QDnpyW/LquLDN85SCYM2F099Q/qGZIn6pA65OF/OYXM=
Subject key identifier: 10:C8:A9:EB:6D:45:5A:80:06:2C:02:97:BC:15:AC:EB:C5:2E:5F:57
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B105EB547A0C31CC36AE7D94687D9DB02
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EMip621FWoAGLAKXvBWs68UuX1c.roa
Signing time: Sun 08 Oct 2023 17:38:44 +0000
ROA not before: Sun 08 Oct 2023 17:38:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.63.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
84.32.217.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.244.0/24 maxlen: 24
84.32.32.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:5e:b5:47:a0:c3:1c:c3:6a:e7:d9:46:87:d9:db:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 8 17:38:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10c8a9eb6d455a80062c0297bc15acebc52e5f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:6d:ef:b8:1b:d0:a2:96:3b:7a:a5:eb:1e:
62:ff:17:26:9a:d6:cb:83:30:5f:27:c6:76:b1:81:
f8:f3:ac:6f:37:a7:58:e3:5c:35:a2:47:d7:eb:fa:
84:85:f1:0c:ea:5d:91:16:a0:2a:f9:4c:53:ff:1d:
67:c6:bc:0e:a8:00:2a:6a:b9:ec:77:17:78:5c:b4:
48:ee:53:1e:7a:de:25:d1:fc:60:72:72:73:f8:ca:
b3:6f:d0:53:9a:41:c3:64:0b:b1:bd:77:a6:b8:06:
ed:ef:48:dc:f3:38:f0:d8:ac:cc:e8:f9:b7:80:5a:
5c:52:9d:64:a4:4e:53:60:92:1d:c5:82:5b:c0:02:
11:3a:d6:e8:2c:1c:47:23:c3:18:49:05:26:fd:e5:
1d:43:aa:0d:31:3a:3a:13:51:30:97:f9:49:e9:93:
61:3d:4f:cb:a0:c4:cb:2e:ac:09:6a:bb:bb:fb:7a:
20:c2:7a:c4:b6:11:d2:0f:8c:97:ab:29:61:de:6e:
40:f3:75:74:1f:68:a9:2b:ea:6f:83:29:81:05:36:
a9:42:8c:22:08:54:df:a8:ea:be:59:f0:65:d1:32:
c8:ed:00:e7:30:0e:32:2f:d1:b7:f2:57:c1:42:a0:
f2:e8:10:85:df:80:dd:ab:64:26:46:1b:bb:b4:c9:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C8:A9:EB:6D:45:5A:80:06:2C:02:97:BC:15:AC:EB:C5:2E:5F:57
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EMip621FWoAGLAKXvBWs68UuX1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.32.0/24
84.32.39.0/24
84.32.63.0/24
84.32.107.0/24
84.32.149.0/24
84.32.151.0-84.32.152.255
84.32.154.0/24
84.32.156.0/24
84.32.217.0-84.32.218.255
84.32.244.0/24
88.216.34.0/24
88.216.41.0/24
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
63:3c:ea:21:c8:f1:29:94:e2:e0:03:b7:cf:ef:a7:43:46:71:
f6:5b:56:97:a2:01:4e:6a:36:72:bc:ce:f7:05:8a:a6:c8:32:
c3:7d:f2:d8:3b:e9:f7:2e:00:c4:97:30:d7:a4:63:44:9f:9c:
c3:a0:5b:2e:9b:50:80:c6:22:96:5b:62:17:fe:b4:01:a3:10:
e9:49:49:1f:13:e3:95:0d:6e:ae:c0:94:5d:94:f9:c6:f7:1a:
7a:f1:1c:58:98:98:fe:8a:0d:a9:d8:37:cb:76:4e:a3:92:56:
42:ef:20:2a:d1:48:0a:18:cc:3f:7f:bb:c2:2a:7f:5a:6e:1c:
d7:fd:83:61:e5:bb:cb:0b:8a:ec:63:75:1a:89:91:d6:ec:4a:
24:8f:bf:15:ff:2d:f2:a7:de:a2:99:76:a2:2c:55:13:eb:25:
2b:aa:93:70:08:a8:34:ae:d2:3b:f8:ac:03:ed:7c:26:ae:80:
c5:9d:c1:df:e0:21:40:5a:c4:dd:8e:aa:ad:6e:4f:f3:b5:81:
b7:be:a4:ac:43:c0:ba:2c:b2:e0:13:08:96:b4:57:04:41:c8:
03:33:b6:45:88:ba:a1:a3:ec:81:56:f0:94:05:68:da:7b:5d:
e3:6b:78:4d:90:9c:77:ab:fc:ed:46:a7:e0:5d:bb:96:b1:c7:
f1:21:6a:41
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAYsQXrVHoMMcw2rn2UaH2dsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMDA4MTczODQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGM4YTllYjZkNDU1YTgwMDYyYzAyOTdiYzE1YWNlYmM1MmU1ZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUht77gb0KKWO3ql6x5i/xcmmtbL
gzBfJ8Z2sYH486xvN6dY41w1okfX6/qEhfEM6l2RFqAq+UxT/x1nxrwOqAAqarns
dxd4XLRI7lMeet4l0fxgcnJz+Mqzb9BTmkHDZAuxvXemuAbt70jc8zjw2KzM6Pm3
gFpcUp1kpE5TYJIdxYJbwAIROtboLBxHI8MYSQUm/eUdQ6oNMTo6E1Ewl/lJ6ZNh
PU/LoMTLLqwJaru7+3ogwnrEthHSD4yXqylh3m5A83V0H2ipK+pvgymBBTapQowi
CFTfqOq+WfBl0TLI7QDnMA4yL9G38lfBQqDy6BCF34Ddq2QmRhu7tMlSVQIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFBDIqettRVqABiwCl7wVrOvFLl9XMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvRU1pcDYyMUZXb0FHTEFLWHZCV3M2OFV1WDFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAFQgDwME
AFQgGAMEAFQgIAMEAFQgJwMEAFQgPwMEAFQgawMEAFQglTAMAwQAVCCXAwQAVCCY
AwQAVCCaAwQAVCCcMAwDBABUINkDBABUINoDBABUIPQDBABY2CIDBABY2CkDBABY
2LowDQYJKoZIhvcNAQELBQADggEBAGM86iHI8SmU4uADt8/vp0NGcfZbVpeiAU5q
NnK8zvcFiqbIMsN98tg76fcuAMSXMNekY0SfnMOgWy6bUIDGIpZbYhf+tAGjEOlJ
SR8T45UNbq7AlF2U+cb3GnrxHFiYmP6KDanYN8t2TqOSVkLvICrRSAoYzD9/u8Iq
f1puHNf9g2Hlu8sLiuxjdRqJkdbsSiSPvxX/LfKn3qKZdqIsVRPrJSuqk3AIqDSu
0jv4rAPtfCaugMWdwd/gIUBaxN2Oqq1uT/O1gbe+pKxDwLossuATCJa0VwRByAMz
tkWIuqGj7IFW8JQFaNp7XeNreE2QnHer/O1Gp+Bdu5axx/EhakE=
-----END CERTIFICATE-----
Generated at Wed Nov 15 16:09:03 2023 by rpki-client on console-ams.rpki-client.org