Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IEbnRTh7hJweCdVyuINArvzllS8.roa
File: IEbnRTh7hJweCdVyuINArvzllS8.roa (raw, json)
Hash identifier: DC3zsIqZO1MjvwGxOXBXputkrHvdeea4J2tbuwUULEs=
Subject key identifier: 20:46:E7:45:38:7B:84:9C:1E:09:D5:72:B8:83:40:AE:FC:E5:95:2F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185AB08F47D6856F67E2A15B84143908040
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IEbnRTh7hJweCdVyuINArvzllS8.roa
Signing time: Fri 13 Jan 2023 12:09:28 +0000
ROA not before: Fri 13 Jan 2023 12:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.108.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
84.32.172.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Jan 2023 13:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ab:08:f4:7d:68:56:f6:7e:2a:15:b8:41:43:90:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 13 12:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2046e745387b849c1e09d572b88340aefce5952f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:33:61:f7:5b:4e:29:01:a8:52:45:5a:b4:
92:31:91:aa:8a:90:a6:5d:ca:98:a4:21:06:47:9c:
e6:0c:6b:91:b9:d9:2f:c4:70:34:4f:55:5a:6c:2c:
9f:0f:7c:87:25:1b:da:1d:5a:6a:47:d2:77:a1:c7:
51:c7:cf:e5:92:ea:cf:b0:34:cd:5d:19:e2:27:9f:
24:f6:52:1e:23:1c:20:47:93:19:77:5e:72:ef:4d:
72:07:e3:31:55:aa:47:c1:3d:e4:70:29:e6:e0:78:
21:57:1c:38:30:61:e5:5b:21:e6:ab:d4:e6:a9:4b:
24:4d:fe:17:e2:3c:fa:40:87:f1:2a:91:73:b0:60:
64:e8:04:dd:37:22:1f:54:68:49:9a:cd:7b:f9:3c:
29:b3:d8:f8:c5:46:9d:22:83:9b:ee:92:18:71:18:
18:c6:70:04:f9:5f:01:43:57:ed:b0:96:6c:10:e7:
40:41:a8:98:d6:9a:c8:de:49:fa:69:b7:c0:ca:c7:
e0:3e:90:12:10:cf:93:10:2c:cf:9b:29:1d:1c:15:
48:ab:50:63:9d:1d:85:cb:18:45:c6:8d:79:48:79:
6a:5b:ee:c3:52:3a:59:31:e7:55:d6:62:f1:0d:65:
25:e4:64:b2:13:fc:65:6f:6c:ef:0d:09:83:cd:8c:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:46:E7:45:38:7B:84:9C:1E:09:D5:72:B8:83:40:AE:FC:E5:95:2F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IEbnRTh7hJweCdVyuINArvzllS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.31.0/24
84.32.64.0/24
84.32.148.0/23
84.32.152.0-84.32.154.255
84.32.156.0/22
84.32.172.0/24
84.32.175.0-84.32.176.255
84.32.250.0/24
88.216.20.0/24
88.216.23.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.108.0/24
88.216.111.0/24
88.216.131.0/24
88.216.185.0/24
88.216.213.0/24
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:cc:92:04:36:06:77:e3:f9:50:fe:f6:d2:99:d6:19:5c:f2:
ab:f9:a1:db:38:ea:40:11:2f:f6:31:07:19:0f:3c:5c:a7:eb:
36:f5:5c:b8:02:66:a7:68:68:f0:f7:46:ae:bd:51:7e:3e:de:
a4:4e:ae:af:be:da:8f:8c:b3:2d:59:f3:ad:27:f8:e1:27:89:
b5:45:fb:1b:cb:31:f7:6e:1f:ce:27:fb:17:ce:07:92:2b:75:
29:b5:7b:92:a7:88:02:4d:3e:94:c6:57:84:2a:4b:c6:75:7b:
e6:66:a3:68:e7:9e:d6:c2:cd:f4:44:39:e1:67:6d:3a:cf:ce:
17:88:55:d0:51:c8:4f:bf:e1:82:76:b0:cf:88:5b:dc:26:a8:
a6:0b:a9:17:5f:0d:6d:e5:9a:7b:27:49:51:47:14:39:6b:f9:
29:7d:ac:76:53:d4:62:6d:22:f7:81:25:b3:b6:71:35:06:c7:
e9:fd:c7:66:79:55:ee:2f:12:33:ec:f5:59:e2:93:3d:0f:76:
e9:c8:89:4b:04:d5:9c:0a:51:5c:a2:b7:76:2a:7d:08:9e:e6:
6e:a8:7d:2f:4e:82:4e:01:42:23:49:64:5c:9a:69:44:bf:90:
2b:f4:31:d0:cd:45:14:45:f9:8d:ff:76:47:85:c5:ee:94:8a:
01:7e:01:39
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAYWrCPR9aFb2fioVuEFDkIBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTEzMTIwOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDQ2ZTc0NTM4N2I4NDljMWUwOWQ1NzJiODgzNDBhZWZjZTU5NTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst8zYfdbTikBqFJFWrSSMZGqipCm
XcqYpCEGR5zmDGuRudkvxHA0T1VabCyfD3yHJRvaHVpqR9J3ocdRx8/lkurPsDTN
XRniJ58k9lIeIxwgR5MZd15y701yB+MxVapHwT3kcCnm4HghVxw4MGHlWyHmq9Tm
qUskTf4X4jz6QIfxKpFzsGBk6ATdNyIfVGhJms17+Twps9j4xUadIoOb7pIYcRgY
xnAE+V8BQ1ftsJZsEOdAQaiY1prI3kn6abfAysfgPpASEM+TECzPmykdHBVIq1Bj
nR2FyxhFxo15SHlqW+7DUjpZMedV1mLxDWUl5GSyE/xlb2zvDQmDzYySowIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFCBG50U4e4ScHgnVcriDQK785ZUvMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvSUViblJUaDdoSndlQ2RWeXVJTkFydnpsbFM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBABU
IB8DBABUIEADBAFUIJQwDAMEA1QgmAMEAFQgmgMEAlQgnAMEAFQgrDAMAwQAVCCv
AwQAVCCwAwQAVCD6AwQAWNgUAwQAWNgXAwQBWNgsMAwDBANY2DgDBAFY2EADBABY
2GwDBABY2G8DBABY2IMDBABY2LkDBABY2NUDBABY2NcwDQYJKoZIhvcNAQELBQAD
ggEBAG7MkgQ2Bnfj+VD+9tKZ1hlc8qv5ods46kARL/YxBxkPPFyn6zb1XLgCZqdo
aPD3Rq69UX4+3qROrq++2o+Msy1Z860n+OEnibVF+xvLMfduH84n+xfOB5IrdSm1
e5KniAJNPpTGV4QqS8Z1e+Zmo2jnntbCzfREOeFnbTrPzheIVdBRyE+/4YJ2sM+I
W9wmqKYLqRdfDW3lmnsnSVFHFDlr+Sl9rHZT1GJtIveBJbO2cTUGx+n9x2Z5Ve4v
EjPs9Vnikz0PdunIiUsE1ZwKUVyit3YqfQie5m6ofS9Ogk4BQiNJZFyaaUS/kCv0
MdDNRRRF+Y3/dkeFxe6UigF+ATk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org