Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Lw6tyZHZ0IE5II-USwUJfiYK-sQ.roa
File: Lw6tyZHZ0IE5II-USwUJfiYK-sQ.roa (raw, json)
Hash identifier: bSQ2M+3zIMqmCIuyoVSgnYw0YBfkXKtHdYprer8TN/8=
Subject key identifier: 2F:0E:AD:C9:91:D9:D0:81:39:20:8F:94:4B:05:09:7E:26:0A:FA:C4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01867A84ED657BFAB16582521EBA39856F2D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Lw6tyZHZ0IE5II-USwUJfiYK-sQ.roa
Signing time: Wed 22 Feb 2023 19:06:17 +0000
ROA not before: Wed 22 Feb 2023 19:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.186.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
88.216.108.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.32.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:84:ed:65:7b:fa:b1:65:82:52:1e:ba:39:85:6f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 22 19:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f0eadc991d9d08139208f944b05097e260afac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:c6:d8:7a:ae:3a:6f:c5:1e:9c:9c:ea:96:
a0:3e:44:e9:94:db:65:cc:2b:17:71:97:9e:d3:d7:
c8:b9:0c:10:80:09:f1:c3:25:82:ad:a8:d9:b7:29:
c2:89:d5:4f:4f:01:9d:19:f4:82:13:18:0f:c9:e0:
48:ca:a5:e6:85:e4:69:f5:c5:53:17:a0:13:8a:1f:
37:03:58:0c:b5:33:54:62:1b:ed:7f:f0:2b:a3:02:
37:47:c5:f0:e1:fa:6a:07:67:a7:ce:50:7a:99:0f:
e4:8c:d8:32:1a:1c:7c:07:f7:95:30:ac:40:a1:46:
90:c1:c1:bf:a2:67:af:2f:56:0c:d0:e8:23:a5:67:
56:5c:40:9f:f2:3d:85:0e:85:aa:d1:f9:b3:19:b2:
1e:dd:29:38:1d:5c:e2:cc:be:33:ec:bf:ad:06:c1:
27:dc:d7:e2:0f:5c:04:fc:29:fa:9c:de:92:2a:10:
26:8b:e2:e3:3b:78:b0:60:1f:c0:55:56:0d:d1:62:
df:d7:f1:8f:6b:ce:b4:1c:66:c5:06:a6:8b:c8:d1:
07:f2:c3:29:5f:cb:b1:7c:8b:4b:d3:53:83:b1:71:
32:b8:a0:2c:c4:a8:f6:64:67:84:d2:6b:3b:c5:2c:
b7:91:f3:87:3b:99:02:b8:ef:49:ee:a9:81:08:d6:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0E:AD:C9:91:D9:D0:81:39:20:8F:94:4B:05:09:7E:26:0A:FA:C4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Lw6tyZHZ0IE5II-USwUJfiYK-sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.24.0/22
84.32.30.0/24
84.32.32.0/24
84.32.46.0/24
84.32.71.0/24
84.32.76.0/23
84.32.79.0/24
84.32.88.0/24
84.32.150.0/23
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0-84.32.222.255
84.32.229.0/24
84.32.232.0/24
84.32.239.0-84.32.240.255
84.32.242.0/23
84.32.245.0/24
84.32.252.0/23
88.216.3.0/24
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.92.0/23
88.216.108.0/24
88.216.128.0/24
88.216.132.0-88.216.134.255
88.216.186.0/24
88.216.189.0-88.216.190.255
88.216.199.0/24
88.216.215.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:8d:65:f4:d5:33:ff:37:ac:b6:be:48:d8:a6:7e:00:07:fe:
08:f3:7a:58:53:5f:71:2b:f9:48:ed:65:8d:96:6f:09:4e:cd:
93:38:df:48:3e:9f:66:a4:25:11:b9:c2:2c:92:6f:89:38:f5:
cf:83:16:bc:63:af:57:16:1e:c2:49:e2:6e:b3:e0:5e:f0:a1:
2b:75:7f:53:56:8f:58:d2:91:a4:b2:65:aa:e3:c0:24:84:f2:
bc:39:01:5d:6f:ad:d8:21:dc:2b:ca:ae:8c:6b:31:d8:97:80:
07:d0:f9:49:e4:df:16:c3:33:66:2d:98:13:94:7b:52:a6:dc:
39:bb:00:c5:ca:bc:48:12:02:02:f0:b1:70:53:a0:20:bd:72:
07:a2:22:f4:14:65:c4:e1:f5:d5:19:f0:d1:c4:68:54:24:18:
9a:81:eb:b0:2f:54:9a:c6:2f:31:6e:93:e2:09:6d:47:b1:5f:
9d:9f:80:7f:70:44:72:95:31:11:25:4a:dd:e4:fc:1f:d7:05:
9d:5d:33:e9:85:a2:f5:93:77:59:0d:5e:26:0c:5a:fe:fe:75:
86:fd:b1:0f:c5:bd:e6:b7:39:68:ba:7e:94:86:75:cb:5f:a8:
69:fd:48:91:09:d4:2f:15:4a:1b:67:2c:9f:96:7d:54:e5:f0:
fe:53:c4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:46 2023 by rpki-client on console-fra.rpki-client.org