Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LoQIjeqQNg_TMmkbGo9fiMbuU1E.roa
File: LoQIjeqQNg_TMmkbGo9fiMbuU1E.roa (raw, json)
Hash identifier: NEZzsDC8jKxwaB9pNBOYqOpjbLpLKU+aKRVOxh5fjiQ=
Subject key identifier: 2E:84:08:8D:EA:90:36:0F:D3:32:69:1B:1A:8F:5F:88:C6:EE:53:51
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186FF14055A9F9639BAF9FE22ABA9D4AE68
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LoQIjeqQNg_TMmkbGo9fiMbuU1E.roa
Signing time: Mon 20 Mar 2023 12:52:27 +0000
ROA not before: Mon 20 Mar 2023 12:52:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.184.0/22 maxlen: 24
88.216.189.0/24 maxlen: 24
84.32.188.0/22 maxlen: 22
88.216.93.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
88.216.130.0/23 maxlen: 24
84.32.244.0/23 maxlen: 23
84.32.250.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Mar 2023 06:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:14:05:5a:9f:96:39:ba:f9:fe:22:ab:a9:d4:ae:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 20 12:52:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e84088dea90360fd332691b1a8f5f88c6ee5351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:40:19:19:be:28:2e:f6:04:f3:f8:1b:77:
3d:5f:f5:51:10:f6:f9:6d:b9:b9:21:b4:34:5c:52:
8d:45:08:b6:6d:b3:71:78:6e:61:2f:da:d0:de:eb:
e3:42:99:ed:e3:5d:3a:a9:34:b0:6a:22:4b:97:73:
81:92:a2:33:d7:f3:de:55:3b:8f:0a:e0:fd:c1:20:
06:40:e7:c8:a6:f4:36:bc:ce:47:36:10:94:7b:fe:
93:7c:ec:a5:82:00:6f:83:16:8f:f2:1c:a6:07:7a:
c8:67:66:3d:0c:23:3c:93:0c:d7:55:13:15:4a:e5:
c1:4a:1f:69:3c:33:46:7e:97:57:f9:90:a8:e2:ab:
f4:20:87:7d:f6:88:ab:d7:0e:32:66:7e:f2:f4:a9:
c4:9d:ed:b0:71:49:da:19:bc:69:61:e8:b6:3f:a0:
a1:f5:6c:88:5c:a1:38:d5:6e:a1:04:a9:59:92:6e:
11:3f:01:3e:6b:71:cb:8c:5f:01:55:d2:0c:41:ed:
89:7b:43:97:47:50:e7:10:d4:72:30:df:5b:87:d1:
d8:64:d0:b7:85:68:37:9b:f9:cf:3f:29:2f:51:68:
70:bc:c6:d1:29:47:13:f5:f1:e6:8b:9d:7b:62:32:
e3:7e:c7:e0:d7:7d:84:6b:69:29:80:51:82:7b:9b:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:84:08:8D:EA:90:36:0F:D3:32:69:1B:1A:8F:5F:88:C6:EE:53:51
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LoQIjeqQNg_TMmkbGo9fiMbuU1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.108.0/23
84.32.148.0/22
84.32.184.0/21
84.32.244.0/23
84.32.250.0/24
88.216.93.0/24
88.216.130.0/23
88.216.189.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e6:e7:e2:da:8c:d6:d1:b7:8d:5b:26:cb:d0:4a:62:e4:7c:
31:24:9e:08:e4:77:7b:ee:07:06:3e:9e:b4:e2:06:68:d3:f5:
e8:1c:eb:09:96:ec:22:90:d5:7a:d0:ec:d8:c9:94:c2:94:cb:
8a:2b:fa:05:22:14:89:02:92:20:9d:8d:79:e8:4a:90:ad:89:
0c:73:fe:c7:a1:1d:56:1c:06:f0:1e:64:8d:08:06:7a:35:9e:
fb:fd:6e:d8:cb:01:a4:72:51:ea:e6:1f:84:77:4a:d6:8f:3b:
4a:8a:9d:bf:c3:79:74:c0:91:0b:75:35:e3:3f:60:55:f5:ab:
c3:a0:9e:af:08:21:0b:1b:4d:65:ee:3a:e1:11:2c:63:35:4c:
71:38:25:ad:e2:37:1f:3c:d8:65:29:77:ab:b8:26:9c:20:b6:
3f:79:a6:71:97:50:06:5d:da:0b:f9:e3:9b:e9:0e:20:2d:59:
20:72:42:42:99:b1:49:e9:6d:61:0b:a3:e7:0b:c4:73:9b:12:
89:68:c4:99:c3:7e:a2:a4:bc:35:eb:52:24:a9:9e:59:f4:3f:
ed:8a:b3:0f:cc:13:82:c3:2d:20:99:32:4c:f8:7f:5f:2d:e1:
6c:61:73:88:a3:42:a6:0c:35:5c:61:1c:a6:f1:b0:18:7f:b0:
9b:16:86:68
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYb/FAVan5Y5uvn+Iqup1K5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMzIwMTI1MjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTg0MDg4ZGVhOTAzNjBmZDMzMjY5MWIxYThmNWY4OGM2ZWU1MzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTdAGRm+KC72BPP4G3c9X/VREPb5
bbm5IbQ0XFKNRQi2bbNxeG5hL9rQ3uvjQpnt4106qTSwaiJLl3OBkqIz1/PeVTuP
CuD9wSAGQOfIpvQ2vM5HNhCUe/6TfOylggBvgxaP8hymB3rIZ2Y9DCM8kwzXVRMV
SuXBSh9pPDNGfpdX+ZCo4qv0IId99oir1w4yZn7y9KnEne2wcUnaGbxpYei2P6Ch
9WyIXKE41W6hBKlZkm4RPwE+a3HLjF8BVdIMQe2Je0OXR1DnENRyMN9bh9HYZNC3
hWg3m/nPPykvUWhwvMbRKUcT9fHmi517YjLjfsfg132Ea2kpgFGCe5vLOwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFC6ECI3qkDYP0zJpGxqPX4jG7lNRMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvTG9RSWplcVFOZ19UTW1rYkdvOWZpTWJ1VTFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBVCBsAwQC
VCCUAwQDVCC4AwQBVCD0AwQAVCD6AwQAWNhdAwQBWNiCAwQAWNi9MA0GCSqGSIb3
DQEBCwUAA4IBAQBh5ufi2ozW0beNWybL0Epi5HwxJJ4I5Hd77gcGPp604gZo0/Xo
HOsJluwikNV60OzYyZTClMuKK/oFIhSJApIgnY156EqQrYkMc/7HoR1WHAbwHmSN
CAZ6NZ77/W7YywGkclHq5h+Ed0rWjztKip2/w3l0wJELdTXjP2BV9avDoJ6vCCEL
G01l7jrhESxjNUxxOCWt4jcfPNhlKXeruCacILY/eaZxl1AGXdoL+eOb6Q4gLVkg
ckJCmbFJ6W1hC6PnC8RzmxKJaMSZw36ipLw161IkqZ5Z9D/tirMPzBOCwy0gmTJM
+H9fLeFsYXOIo0KmDDVcYRym8bAYf7CbFoZo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org