Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LgkOFWZbqsHk3q-gDeJl31mNrDg.roa
File: LgkOFWZbqsHk3q-gDeJl31mNrDg.roa (raw, json)
Hash identifier: 4JNb/TJz7knTFbnu5QprUDNgEB64eigbQwhDEhX2zms=
Subject key identifier: 2E:09:0E:15:66:5B:AA:C1:E4:DE:AF:A0:0D:E2:65:DF:59:8D:AC:38
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186853BD01B8397A52637931961A124784D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LgkOFWZbqsHk3q-gDeJl31mNrDg.roa
Signing time: Fri 24 Feb 2023 21:02:15 +0000
ROA not before: Fri 24 Feb 2023 21:02:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.186.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.15.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 21:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:85:3b:d0:1b:83:97:a5:26:37:93:19:61:a1:24:78:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 24 21:02:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e090e15665baac1e4deafa00de265df598dac38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:94:29:47:91:b0:13:23:6b:f8:3e:fb:d2:
3f:f4:31:11:1b:eb:20:54:82:f8:5a:4e:f5:e4:cc:
ce:48:88:4c:ca:4b:7d:4c:00:85:e5:e1:01:4c:6e:
f1:87:61:62:52:0d:b5:81:e5:aa:31:f0:0a:61:4a:
01:29:fd:8f:21:77:cf:d8:70:c4:a1:53:65:3b:98:
c2:3f:6b:5e:84:79:d7:2d:8c:12:de:dd:e0:34:4d:
93:bd:3d:4c:38:7f:c9:ae:eb:5f:d9:b8:7f:8c:31:
0f:db:82:5c:b0:d7:b4:d7:11:25:0b:d7:92:c3:8d:
f4:bb:9e:43:0f:c0:d8:24:f0:45:fa:9d:7b:b5:a8:
38:4f:1f:b7:7e:21:24:67:b8:b8:59:de:e9:e5:18:
17:d8:53:6d:80:8c:98:64:7c:20:8d:18:b2:9c:65:
25:12:d7:08:84:58:a4:3b:55:1b:73:f4:a2:ec:21:
29:8f:3b:a5:82:0e:06:0f:d1:12:ac:44:3a:b0:97:
8c:5d:50:bc:37:d9:d4:b3:39:8f:2f:47:5f:a9:f3:
62:ac:76:f3:52:93:59:90:ef:e0:01:de:df:61:f1:
ea:ab:eb:2a:93:ab:c5:63:d0:d4:bd:11:5b:1f:11:
84:67:db:77:3b:1d:7a:33:f6:fe:71:ba:33:b2:88:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:09:0E:15:66:5B:AA:C1:E4:DE:AF:A0:0D:E2:65:DF:59:8D:AC:38
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LgkOFWZbqsHk3q-gDeJl31mNrDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.15.0/24
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.71.0/24
84.32.76.0/23
84.32.79.0/24
84.32.88.0/24
84.32.150.0/23
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0-84.32.222.255
84.32.229.0/24
84.32.232.0/24
84.32.239.0-84.32.240.255
84.32.242.0/23
84.32.245.0/24
84.32.252.0/23
88.216.3.0/24
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.92.0/23
88.216.128.0/24
88.216.132.0-88.216.134.255
88.216.186.0/24
88.216.189.0-88.216.190.255
88.216.199.0/24
88.216.215.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
73:90:7b:9d:c8:ce:e3:8c:13:39:28:c7:6e:2e:86:1a:d1:a9:
60:f4:e9:57:1f:7b:fa:ca:be:73:5a:ad:65:a6:bc:18:68:8c:
88:fc:81:f7:6e:70:6c:8e:5f:40:75:19:54:09:a7:b7:15:f9:
85:77:51:e3:74:62:24:99:55:f3:a2:c8:19:e7:75:0e:f7:81:
18:43:89:d3:0c:ae:d2:b4:23:26:b8:da:cc:10:c6:26:62:88:
26:67:df:6f:96:6a:bf:78:9d:7d:d8:13:27:82:11:0a:33:6f:
62:49:37:03:04:99:4e:6c:b4:ec:8b:0e:54:10:ed:df:dd:bc:
f5:7c:31:f3:af:0e:bc:2d:0d:59:ec:87:5d:9d:d0:14:1e:2e:
8e:46:7a:b4:c8:83:f2:89:33:cb:a0:6d:6c:3b:f5:5d:83:74:
22:90:04:58:47:a0:95:a2:81:08:da:65:8e:c1:fb:c7:92:ca:
ca:e4:54:da:62:39:60:23:77:d0:45:25:d1:50:eb:50:3b:df:
18:9c:8f:12:0f:3c:7e:78:06:33:04:47:64:bb:bf:75:83:bf:
6a:84:e2:d1:de:32:18:24:24:b6:fe:e9:83:36:b4:b6:f5:49:
5b:4e:77:09:4c:e3:7f:b8:74:cf:00:a7:63:09:5a:91:7d:b4:
e2:54:a9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org