Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/II81UOSFXORDhaZTz55HuiMnWtE.roa
File: II81UOSFXORDhaZTz55HuiMnWtE.roa (raw, json)
Hash identifier: KbDn06jfoV5tkRMHVmo8tYCVjQpW+GUZ4ZDE1qqMkRc=
Subject key identifier: 20:8F:35:50:E4:85:5C:E4:43:85:A6:53:CF:9E:47:BA:23:27:5A:D1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018742D6F00252C07478756FA8D7E863816A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/II81UOSFXORDhaZTz55HuiMnWtE.roa
Signing time: Sun 02 Apr 2023 16:39:55 +0000
ROA not before: Sun 02 Apr 2023 16:39:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 84.32.58.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
84.32.216.0/24 maxlen: 24
84.32.219.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
88.216.67.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 07:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:42:d6:f0:02:52:c0:74:78:75:6f:a8:d7:e8:63:81:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 2 16:39:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=208f3550e4855ce44385a653cf9e47ba23275ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:4b:61:de:8b:04:dd:5f:27:64:55:3d:34:
3a:75:6f:07:f8:09:76:0e:14:cf:ea:60:ce:ec:e9:
a7:f0:a3:3f:5a:fd:dd:c9:d0:27:25:58:8d:43:b9:
bb:ef:bf:00:5e:b7:69:d0:64:9f:bc:4c:e8:95:34:
79:32:7c:8d:91:7c:37:9c:71:7f:74:f2:24:1b:bf:
f8:46:b1:6f:86:44:58:1e:87:59:35:eb:84:b1:84:
56:1c:96:91:cf:96:27:e5:f1:bb:58:a6:a9:e7:d8:
e6:87:8a:ff:11:43:7e:18:2b:a3:c9:67:5e:38:e3:
ff:cd:b8:6a:64:5e:dc:96:64:58:05:5c:ce:ed:3a:
ce:61:ed:8e:ca:22:ff:fe:12:28:c8:a7:65:87:1a:
43:8d:45:b0:7a:52:01:54:29:e8:21:35:0e:2d:88:
fe:98:d5:bc:78:5d:8d:3a:d3:5b:74:d2:ad:af:11:
11:6e:d4:54:f4:c5:97:05:85:72:a8:36:3b:be:02:
a8:08:07:a7:fd:b4:f5:d2:d9:5e:cb:28:6b:4c:bc:
5c:22:8e:fa:57:f5:0d:75:ad:82:bf:7d:27:38:53:
54:e6:2d:c3:65:bc:71:6a:7f:f3:fb:ed:12:11:7f:
3f:18:df:05:74:89:99:4e:6e:43:48:a2:df:50:24:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8F:35:50:E4:85:5C:E4:43:85:A6:53:CF:9E:47:BA:23:27:5A:D1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/II81UOSFXORDhaZTz55HuiMnWtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.9.0/24
84.32.25.0/24
84.32.28.0/24
84.32.49.0/24
84.32.51.0/24
84.32.58.0/24
84.32.213.0/24
84.32.216.0/24
84.32.219.0/24
84.32.226.0/24
84.32.234.0/24
88.216.66.0/23
88.216.100.0/24
88.216.106.0/23
88.216.109.0-88.216.110.255
88.216.128.0/24
88.216.188.0/24
88.216.222.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:4d:ba:aa:0b:00:43:70:df:d1:c0:a6:2a:34:c8:6e:f0:5b:
3c:b0:ac:88:da:ef:a5:3e:f9:5d:24:00:76:54:ba:38:6f:c8:
05:de:87:be:d6:88:5c:04:dc:19:0b:e3:5e:f0:ed:83:d7:28:
3b:72:eb:27:c4:69:96:87:0e:ea:ed:4b:a0:b2:78:d6:e1:d7:
d2:b7:c8:9b:1b:a4:f9:e7:75:6d:c1:ee:51:7f:46:45:25:e7:
17:75:4b:f8:ee:c6:90:31:1f:aa:9f:b5:3e:10:43:8f:d8:57:
03:44:d7:c2:cf:69:d7:70:e6:61:a8:43:23:dc:eb:ec:e4:c1:
2f:fd:41:93:95:65:a1:6c:78:bf:d6:1e:cb:70:07:62:a0:c2:
08:b9:e9:11:2f:90:66:b7:f9:63:be:34:82:5d:0b:12:44:54:
06:9f:98:1a:c6:37:f5:e6:1e:0a:59:42:4d:8d:86:d3:3c:25:
f9:81:6e:18:9d:af:85:d4:5c:3a:24:74:52:7c:6f:83:9d:1b:
b0:1a:ab:6d:e8:ec:93:c8:e4:ae:46:24:48:97:70:30:d2:47:
28:6e:5d:f4:05:4d:89:af:fc:a9:2c:8c:45:c1:66:fb:b8:74:
50:09:46:96:6b:44:c2:5b:22:a7:ea:4a:27:dc:9a:b8:b7:af:
ec:22:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org