Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MQ6W30YqwcGiDJwSaQSLzQlB0to.roa
File: MQ6W30YqwcGiDJwSaQSLzQlB0to.roa (raw, json)
Hash identifier: /c3rSRjazZgDM1wW0xzPVtTCa9NEO8ezqawDVMalUNw=
Subject key identifier: 31:0E:96:DF:46:2A:C1:C1:A2:0C:9C:12:69:04:8B:CD:09:41:D2:DA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01876500C8158EBE75137C78E642C686921D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MQ6W30YqwcGiDJwSaQSLzQlB0to.roa
Signing time: Sun 09 Apr 2023 07:52:42 +0000
ROA not before: Sun 09 Apr 2023 07:52:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 10:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:65:00:c8:15:8e:be:75:13:7c:78:e6:42:c6:86:92:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 9 07:52:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=310e96df462ac1c1a20c9c1269048bcd0941d2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:42:61:5c:4f:f0:04:46:dc:99:e2:0c:86:
1c:13:5d:28:70:24:86:be:5d:98:e8:e2:24:55:4e:
46:ca:9f:f7:21:b9:51:ae:6a:83:bf:bd:db:bd:a6:
c0:ed:8a:1f:b7:b0:24:88:9a:96:f3:40:84:12:c0:
4e:07:da:51:82:55:58:d0:e3:83:34:52:18:a3:7f:
a4:03:fa:fb:0b:d5:23:57:c5:7e:6d:16:07:46:9e:
51:32:6b:68:50:35:ac:82:3f:f9:cf:d0:ae:48:19:
6c:93:b9:a2:0f:30:cb:80:5d:21:c0:4e:36:60:9a:
51:b0:b7:cf:e4:5e:5b:30:aa:83:e4:49:c7:f1:39:
de:00:25:d2:5e:1f:fb:82:b9:41:f2:99:16:02:53:
d7:0e:f3:f2:04:5e:b9:11:32:41:ac:79:51:0f:1f:
d1:26:27:15:82:a2:a1:15:a1:9d:27:fe:53:1d:e6:
56:81:5e:bf:f9:e6:71:98:81:a0:af:70:55:e4:f7:
5f:4d:82:cb:10:ec:f3:f1:c8:7b:3c:a1:3b:ea:91:
47:2c:69:8b:c5:c9:a1:72:0b:98:70:89:25:0e:db:
3f:86:47:d7:f2:a8:19:bf:3e:77:60:1c:fc:16:51:
21:f1:0e:74:ae:22:ed:ad:18:9a:e0:c1:5c:1f:c1:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:96:DF:46:2A:C1:C1:A2:0C:9C:12:69:04:8B:CD:09:41:D2:DA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MQ6W30YqwcGiDJwSaQSLzQlB0to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.152.0-84.32.154.255
84.32.156.0/24
84.32.158.0/23
88.216.45.0/24
88.216.56.0-88.216.65.255
88.216.132.0/24
88.216.185.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1f:c2:4c:75:73:b0:b4:3a:19:b3:70:64:89:a8:e6:54:10:
e5:56:ee:02:66:22:d5:63:8d:1f:8d:76:7c:76:a5:f9:66:19:
27:15:b7:1a:af:d4:48:a5:88:76:4b:e2:1e:7b:d0:85:54:85:
f1:fe:6a:db:f7:04:61:5a:ba:49:d3:63:ef:12:f8:5c:94:62:
59:2d:02:be:ff:d3:74:f4:b9:f8:25:77:ba:21:6d:50:fa:65:
87:21:b2:a1:e6:fa:32:4c:df:da:bf:cf:f7:ea:8c:7b:4f:23:
85:04:04:c0:18:e0:4f:27:15:aa:62:2b:dd:29:47:11:7f:c2:
fa:b6:c8:c1:2c:8d:4a:8a:49:f6:5f:43:43:76:e4:cd:c2:75:
9d:c2:93:37:de:c2:dd:ab:8b:29:71:dc:7b:a9:52:78:56:45:
ce:5d:90:ab:ad:a6:5f:b5:a5:bd:eb:8a:7c:74:46:16:0e:18:
c1:34:49:9c:1a:67:61:1f:33:9d:15:9d:07:00:d0:fa:f4:76:
2d:f4:4f:3e:42:6f:74:a8:9b:82:93:fa:d4:4c:1c:b3:fd:2f:
21:75:65:35:c9:a6:f4:3f:d4:f4:fa:73:5e:30:de:bb:e4:c6:
c1:87:79:e5:fc:c7:f7:38:05:30:ee:15:48:57:32:9a:e6:99:
ef:2c:c4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:32 2024 by rpki-client on console-fra.rpki-client.org