Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I5dKuNvn6VPSac8QKAxXzhvYYBQ.roa
File: I5dKuNvn6VPSac8QKAxXzhvYYBQ.roa (raw, json)
Hash identifier: 8oqZ31LG7MaXUmwma1VYlF60tKGoSpT/ehUEcDo4NBs=
Subject key identifier: 23:97:4A:B8:DB:E7:E9:53:D2:69:CF:10:28:0C:57:CE:1B:D8:60:14
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018C578E6CC9FDD0816BAA10B1EE733DF8CF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I5dKuNvn6VPSac8QKAxXzhvYYBQ.roa
Signing time: Mon 11 Dec 2023 06:26:40 +0000
ROA not before: Mon 11 Dec 2023 06:26:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.182.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
84.32.236.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
88.216.93.0/24 maxlen: 24
84.32.208.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.43.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Dec 2023 11:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:8e:6c:c9:fd:d0:81:6b:aa:10:b1:ee:73:3d:f8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 11 06:26:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23974ab8dbe7e953d269cf10280c57ce1bd86014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:33:aa:b9:6e:50:bb:ee:a8:c9:38:e6:35:
09:7e:10:3b:05:03:59:4f:38:4e:4a:af:12:74:9c:
b3:2e:aa:9b:73:83:12:41:49:a0:1f:2d:05:1d:d1:
23:39:17:b9:68:e3:ed:82:8a:d7:c8:aa:e8:3c:e7:
bf:02:b4:65:a0:da:cb:1a:2f:d6:56:32:af:43:a8:
3c:99:77:7c:dc:f0:87:ee:81:5e:fb:f7:95:08:1c:
79:2e:38:d3:4e:42:77:83:49:19:b7:e7:6f:45:50:
15:25:2f:3b:cd:23:f1:ed:56:db:10:7f:fb:6b:80:
cc:5d:51:49:de:0c:33:e5:a9:9e:59:c4:07:33:30:
9f:64:93:42:e1:f3:4b:24:13:f6:b0:15:2d:e4:7c:
b3:a8:61:db:2d:0b:68:58:91:48:25:77:7e:05:96:
ab:07:0f:0d:b8:6b:db:76:c5:8f:3f:fd:1b:09:8f:
6f:0f:07:ac:b4:6a:2a:a0:fe:d2:92:6e:26:d3:b2:
d0:35:aa:7a:1d:be:54:78:ad:bf:7a:ad:79:2e:95:
47:4e:62:fc:2b:64:4f:0d:2c:62:15:bc:bf:8b:26:
b3:8c:10:94:fa:50:62:0a:d8:f3:c1:86:da:71:e5:
98:41:82:b5:4c:25:36:ea:f1:d8:53:fe:9a:3d:c9:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:97:4A:B8:DB:E7:E9:53:D2:69:CF:10:28:0C:57:CE:1B:D8:60:14
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/I5dKuNvn6VPSac8QKAxXzhvYYBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.66.0/24
84.32.83.0/24
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.178.0/23
84.32.208.0-84.32.210.255
84.32.214.0/23
84.32.236.0/24
84.32.244.0/22
84.32.249.0/24
88.216.22.0/23
88.216.43.0-88.216.45.255
88.216.93.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.182.0/23
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
Signature Algorithm: sha256WithRSAEncryption
44:d7:06:2d:5d:b6:2a:0f:3a:93:24:cb:27:2e:58:0c:dd:f5:
70:02:48:50:b1:be:27:6d:a5:70:a9:a9:25:06:9f:94:9d:24:
7e:91:6e:e9:90:2f:57:c5:b9:2f:33:09:b0:e3:b8:71:d0:3e:
11:2b:0e:8a:de:4c:3c:f2:d7:98:b9:66:e1:c7:42:4f:eb:af:
22:f6:46:05:34:6c:c5:be:57:99:99:9d:24:5d:b6:3a:13:23:
ae:67:d0:2a:e5:73:68:d3:99:19:13:9b:8c:7f:65:bb:2c:88:
10:f1:4a:98:90:f9:fc:01:36:9f:56:c1:43:3d:88:96:84:cb:
a2:b2:f7:05:a6:9c:a1:c4:74:34:8d:a7:c3:a1:7e:89:90:20:
72:ad:12:fa:c1:bb:9e:53:6a:13:2d:78:3d:a1:3b:83:ac:2b:
2b:77:65:e1:de:ed:0e:70:1b:d6:5e:d8:5b:2e:a5:b8:e7:3a:
5a:ca:48:fe:29:c8:0b:f8:2e:8e:ed:76:aa:f8:21:c2:dd:ce:
a7:ed:f6:97:14:fc:71:2e:48:f5:b8:f3:e5:19:c3:89:21:9d:
83:07:56:be:e1:e9:5a:54:12:a8:c3:5d:52:d1:c1:b9:ce:f3:
99:39:40:58:c1:93:08:d9:28:43:12:78:b1:32:9d:ab:04:56:
46:5b:1d:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org