Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MaOpwOwYFaq4oc3F-6AcLFgLZRE.roa
File: MaOpwOwYFaq4oc3F-6AcLFgLZRE.roa (raw, json)
Hash identifier: oxZaI1nrMGpz4iV7HB7bTiZXqmEHwmrXdQJDB4oT0bA=
Subject key identifier: 31:A3:A9:C0:EC:18:15:AA:B8:A1:CD:C5:FB:A0:1C:2C:58:0B:65:11
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018EC43F641E277B1C49085702B4554E610F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MaOpwOwYFaq4oc3F-6AcLFgLZRE.roa
Signing time: Tue 09 Apr 2024 19:04:32 +0000
ROA not before: Tue 09 Apr 2024 19:04:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33922
IP address blocks: 84.32.3.0/24 maxlen: 24
84.32.114.0/23 maxlen: 24
84.32.116.0/23 maxlen: 24
84.32.134.0/24 maxlen: 24
84.32.165.0/24 maxlen: 24
84.32.166.0/24 maxlen: 24
84.32.180.0/24 maxlen: 24
84.32.181.0/24 maxlen: 24
84.32.182.0/24 maxlen: 24
84.32.183.0/24 maxlen: 24
88.216.24.0/23 maxlen: 24
88.216.26.0/23 maxlen: 24
88.216.28.0/22 maxlen: 24
88.216.68.0/22 maxlen: 24
88.216.76.0/22 maxlen: 24
88.216.148.0/24 maxlen: 24
88.216.153.0/24 maxlen: 24
88.216.154.0/24 maxlen: 24
88.216.155.0/24 maxlen: 24
88.216.156.0/24 maxlen: 24
88.216.157.0/24 maxlen: 24
88.216.158.0/24 maxlen: 24
88.216.159.0/24 maxlen: 24
88.216.160.0/23 maxlen: 23
88.216.164.0/24 maxlen: 24
88.216.165.0/24 maxlen: 24
88.216.166.0/24 maxlen: 24
88.216.167.0/24 maxlen: 24
88.216.168.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 19 Apr 2024 12:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c4:3f:64:1e:27:7b:1c:49:08:57:02:b4:55:4e:61:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 9 19:04:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31a3a9c0ec1815aab8a1cdc5fba01c2c580b6511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:e3:08:52:c5:2d:32:75:18:a1:6a:21:fc:
85:95:d3:05:1d:a4:4f:d0:f6:27:a2:fd:30:fd:58:
90:fb:5c:70:01:bb:30:ac:a2:e2:7e:23:43:13:bb:
65:65:be:65:16:a9:96:ca:27:3f:80:dc:34:0c:b5:
d3:1c:89:1f:22:3f:84:ad:97:04:88:2e:8f:89:3e:
52:6c:f5:59:44:c7:2f:13:d3:6a:fd:d4:9e:88:83:
fe:6e:d6:04:ef:97:35:a0:7a:06:71:5e:98:2d:ff:
aa:27:eb:93:f0:cc:7e:58:24:66:ec:04:33:4d:b4:
25:93:64:47:3e:53:76:ae:f0:74:06:a0:f4:82:0f:
86:1c:f1:24:00:46:70:ca:a0:2b:20:f8:4e:05:0f:
b1:04:c6:32:98:5d:4d:9b:2a:09:b2:66:45:ba:e4:
1e:9a:83:84:9e:af:a5:ac:d4:8e:ed:e3:a1:3b:bb:
ab:3f:a7:39:77:d9:6d:bb:20:3f:b1:1a:7d:63:53:
99:76:4d:66:5d:eb:e4:ab:63:71:9c:0f:af:40:4f:
3a:4e:d6:55:e3:1a:44:32:c4:44:7d:4f:10:10:80:
6b:ad:9d:65:9c:29:f7:88:9f:45:df:22:66:d4:b1:
a1:ab:69:07:d1:92:ae:c6:8d:8c:94:08:ab:67:5e:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A3:A9:C0:EC:18:15:AA:B8:A1:CD:C5:FB:A0:1C:2C:58:0B:65:11
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MaOpwOwYFaq4oc3F-6AcLFgLZRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.3.0/24
84.32.114.0-84.32.117.255
84.32.134.0/24
84.32.165.0-84.32.166.255
84.32.180.0/22
88.216.24.0/21
88.216.68.0/22
88.216.76.0/22
88.216.148.0/24
88.216.153.0-88.216.161.255
88.216.164.0-88.216.169.255
Signature Algorithm: sha256WithRSAEncryption
62:f7:f4:2a:d8:2c:ef:df:fe:51:a3:32:83:95:85:20:d9:c8:
4a:c4:69:75:63:fe:e2:ca:15:1d:ab:cc:a6:68:8b:51:44:12:
9f:c5:f1:02:58:49:47:46:49:a5:17:3d:2c:2b:53:c4:06:50:
3d:61:4e:6c:ec:be:e6:aa:31:a2:af:01:15:78:66:d0:a2:c3:
e3:fb:8f:67:6b:f4:55:51:40:c4:68:1a:fb:72:d7:ec:14:47:
95:5a:e8:5a:79:77:f8:5f:9a:7f:fa:93:26:74:7c:be:cd:52:
7c:11:b3:34:8b:59:a5:fb:4d:a3:e2:1c:b5:7d:2b:96:a9:db:
85:f8:0a:bd:08:01:00:f8:30:2b:be:40:84:07:7e:ef:ad:e8:
f6:36:de:10:2a:6c:db:03:06:67:97:31:72:dd:2c:6d:88:e4:
2e:94:48:9c:ef:3a:2f:7f:46:7b:29:da:89:a2:99:68:53:c2:
b6:4e:7f:50:85:be:d9:00:f8:05:68:c4:d8:4b:26:51:9c:df:
de:dd:2f:ca:c9:76:05:05:01:be:2a:29:99:f9:92:64:ee:3a:
13:02:3d:85:14:85:7c:bf:f8:fc:26:93:c4:50:b6:76:6a:47:
66:02:7f:db:f8:7b:df:6d:ee:8e:06:ea:22:bb:b3:33:68:12:
ec:1d:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:32 2024 by rpki-client on console-fra.rpki-client.org