Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IaZV27MAcpjP6hv6CSvBn5OfTJ8.roa
File: IaZV27MAcpjP6hv6CSvBn5OfTJ8.roa (raw, json)
Hash identifier: u8XuCRjw4QS1bI6F9KG6rl4Oq4c+5J5Cq0a1COlDXn4=
Subject key identifier: 21:A6:55:DB:B3:00:72:98:CF:EA:1B:FA:09:2B:C1:9F:93:9F:4C:9F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01920FDFF6A6895F5A18D534E46751EFCA02
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IaZV27MAcpjP6hv6CSvBn5OfTJ8.roa
Signing time: Fri 20 Sep 2024 14:39:48 +0000
ROA not before: Fri 20 Sep 2024 14:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.223.0/24 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 05:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0f:df:f6:a6:89:5f:5a:18:d5:34:e4:67:51:ef:ca:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 20 14:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21a655dbb3007298cfea1bfa092bc19f939f4c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:cd:4a:3b:fe:00:0c:a7:28:94:82:27:55:
ae:e9:d6:c3:0b:5b:7e:97:0b:3f:ba:aa:fc:24:02:
30:2a:1d:77:41:15:fa:68:1b:61:8f:58:b8:59:cc:
d0:b8:40:33:30:f1:70:5e:bb:96:b9:94:a6:be:4f:
aa:5e:ec:a1:07:0d:71:d7:50:85:bd:84:be:e2:32:
b9:2d:82:59:3c:e3:07:bf:5d:74:22:4b:05:19:af:
59:66:ad:29:85:3b:b5:a8:54:84:5b:8e:ce:d1:af:
e1:24:98:80:7e:b1:bd:91:1a:27:21:18:c5:ba:da:
79:2d:93:54:e8:b2:b0:0f:15:44:28:50:45:c9:d7:
ab:f8:bd:3b:1e:44:d9:02:a7:0b:06:f8:a7:03:f5:
e0:af:ad:30:c4:a3:4f:49:c6:dc:bc:4f:ef:96:2d:
0f:1b:6d:6a:1e:fe:3b:ab:b9:f1:98:53:27:e2:70:
2e:14:43:e9:e1:6c:18:d9:c7:6b:00:b8:30:d0:dd:
4b:ea:ef:5d:8e:ca:74:00:0b:91:aa:22:f0:93:09:
40:03:60:2b:c8:75:61:2f:ad:e7:17:e8:3b:5f:2d:
e2:94:3e:46:0d:ae:43:f7:f8:cb:c5:8e:5d:d7:73:
7b:c9:6d:19:ec:fc:9f:78:a8:a5:d3:72:16:5d:a8:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A6:55:DB:B3:00:72:98:CF:EA:1B:FA:09:2B:C1:9F:93:9F:4C:9F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IaZV27MAcpjP6hv6CSvBn5OfTJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.70.0/24
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.223.0/24
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0/23
88.216.134.0/23
88.216.197.0/24
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:18:68:92:e6:2f:71:35:5e:62:01:ef:72:a8:5b:41:73:47:
77:a9:d4:2c:30:80:a4:63:7c:3a:b2:99:f0:06:4e:aa:57:e4:
55:87:b7:11:1c:6d:f2:44:8d:01:9b:82:28:83:f6:1a:f1:43:
e1:83:2c:32:f7:1d:f6:13:87:16:79:84:6e:47:90:81:23:d5:
0f:d0:38:b7:f6:f8:44:40:1f:3f:af:1f:64:bf:c2:37:81:1f:
4c:81:00:92:3a:ed:55:71:32:85:0e:96:96:9e:c1:32:6d:bb:
9d:07:09:0d:6f:d9:b6:29:6c:fd:d8:74:ee:76:9e:6a:ea:4e:
27:fd:17:12:0e:72:b7:bc:ea:eb:af:d8:ca:43:1f:eb:4b:e7:
5c:99:c2:6f:ba:7d:9f:3d:a2:d8:d1:b7:b6:86:fa:28:27:6f:
b8:d2:17:a5:d9:b7:37:4d:33:07:b5:8d:07:c1:89:74:1e:03:
c0:1e:92:c5:96:65:87:a9:5d:e7:48:92:2e:8a:49:31:a8:a6:
45:c1:de:eb:24:ad:f1:79:4c:c6:09:7e:9f:72:61:86:9d:2b:
25:8a:0e:de:66:8a:46:c8:39:14:5f:1b:9a:f3:e3:49:7b:9f:
58:bb:3d:9e:4e:23:e8:5a:ae:fc:9e:35:3b:2d:54:90:c7:b4:
ed:15:10:c9
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAZIP3/amiV9aGNU05GdR78oCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjQwOTIwMTQzOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWE2NTVkYmIzMDA3Mjk4Y2ZlYTFiZmEwOTJiYzE5ZjkzOWY0YzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva/NSjv+AAynKJSCJ1Wu6dbDC1t+
lws/uqr8JAIwKh13QRX6aBthj1i4WczQuEAzMPFwXruWuZSmvk+qXuyhBw1x11CF
vYS+4jK5LYJZPOMHv110IksFGa9ZZq0phTu1qFSEW47O0a/hJJiAfrG9kRonIRjF
utp5LZNU6LKwDxVEKFBFyder+L07HkTZAqcLBvinA/Xgr60wxKNPScbcvE/vli0P
G21qHv47q7nxmFMn4nAuFEPp4WwY2cdrALgw0N1L6u9djsp0AAuRqiLwkwlAA2Ar
yHVhL63nF+g7Xy3ilD5GDa5D9/jLxY5d13N7yW0Z7PyfeKil03IWXahtXwIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFCGmVduzAHKYz+ob+gkrwZ+Tn0yfMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvSWFaVjI3TUFjcGpQNmh2NkNTdkJuNU9mVEo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYwDAMEAFQg
BwMEAFQgCDAMAwQCVCAUAwQCVCAYAwQBVCAuAwQAVCBGAwQAVCBfAwQCVCCUAwQB
VCCuAwQBVCDWAwQAVCDfAwQCVCD0AwQBWNgWAwQBWNgsAwQAWNhdAwQBWNiCAwQB
WNiGAwQAWNjFAwQCWNjUMA0GCSqGSIb3DQEBCwUAA4IBAQAuGGiS5i9xNV5iAe9y
qFtBc0d3qdQsMICkY3w6spnwBk6qV+RVh7cRHG3yRI0Bm4Iog/Ya8UPhgywy9x32
E4cWeYRuR5CBI9UP0Di39vhEQB8/rx9kv8I3gR9MgQCSOu1VcTKFDpaWnsEybbud
BwkNb9m2KWz92HTudp5q6k4n/RcSDnK3vOrrr9jKQx/rS+dcmcJvun2fPaLY0be2
hvooJ2+40hel2bc3TTMHtY0HwYl0HgPAHpLFlmWHqV3nSJIuikkxqKZFwd7rJK3x
eUzGCX6fcmGGnSslig7eZopGyDkUXxua8+NJe59Yuz2eTiPoWq78njU7LVSQx7Tt
FRDJ
-----END CERTIFICATE-----
Generated at Mon Sep 30 08:54:03 2024 by rpki-client on console-ams.rpki-client.org