Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NDNdtD0AuRxD6-bb_4weOMyGsOg.roa
File: NDNdtD0AuRxD6-bb_4weOMyGsOg.roa (raw, json)
Hash identifier: YtZjAsiI6Ar0u64ljzd2e4jceUEtCggXaxjSfLbj9eg=
Subject key identifier: 34:33:5D:B4:3D:00:B9:1C:43:EB:E6:DB:FF:8C:1E:38:CC:86:B0:E8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01866B04208275AAC34D6A0698E275CB9D43
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NDNdtD0AuRxD6-bb_4weOMyGsOg.roa
Signing time: Sun 19 Feb 2023 18:51:17 +0000
ROA not before: Sun 19 Feb 2023 18:51:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 84.32.71.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Feb 2023 07:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6b:04:20:82:75:aa:c3:4d:6a:06:98:e2:75:cb:9d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 19 18:51:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34335db43d00b91c43ebe6dbff8c1e38cc86b0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:41:1e:89:25:16:e9:95:be:b3:12:5e:47:a4:
d3:70:b1:4d:bf:fe:95:c4:20:75:eb:9f:7a:e3:19:
7d:3f:10:25:04:d6:c7:e3:9a:28:0b:73:24:82:8c:
28:ed:2d:61:bf:7c:11:c2:b9:dc:1a:c7:6a:27:5d:
7c:96:d2:70:7b:bc:f3:3c:30:46:3f:7a:69:44:a5:
62:65:eb:87:de:13:57:b3:52:a1:6e:4c:1d:8e:d4:
c0:42:00:21:0b:07:b2:3c:9d:a0:17:36:39:20:00:
bb:4f:c6:b7:0b:a1:a4:4e:82:31:18:ba:1d:71:dd:
fc:78:3b:df:1f:63:0c:12:dc:25:18:d7:99:99:3a:
4f:96:8d:3d:34:b3:81:c2:38:66:61:d7:63:60:e7:
6a:14:6a:9d:f5:4e:a8:89:7f:cf:2d:dc:5a:fa:60:
31:05:73:b3:d0:9d:68:c7:45:7f:64:02:45:50:91:
8d:8a:1e:92:2a:2e:7a:fb:46:71:73:1d:fc:f4:9d:
13:58:c8:c9:c1:46:65:13:58:84:d8:d2:30:a8:cf:
ec:b8:3b:f8:96:af:50:b4:c5:05:d3:e7:1d:19:45:
66:d1:35:17:24:17:ed:04:af:ee:09:3c:45:eb:dc:
95:da:38:8d:37:7b:8e:e7:59:68:f7:12:50:01:d2:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:33:5D:B4:3D:00:B9:1C:43:EB:E6:DB:FF:8C:1E:38:CC:86:B0:E8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NDNdtD0AuRxD6-bb_4weOMyGsOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.50.0/24
84.32.71.0/24
84.32.88.0/24
84.32.108.0/24
84.32.150.0/23
84.32.220.0/24
84.32.232.0/24
84.32.239.0/24
84.32.245.0/24
88.216.3.0/24
88.216.46.0/24
88.216.92.0/24
88.216.199.0/24
88.216.210.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:33:3b:12:8c:43:0c:1a:f8:5b:dc:4c:e8:f0:c0:15:f7:fb:
cc:50:7d:8c:1e:29:c3:d6:3e:cc:89:9e:74:c7:f8:74:65:25:
27:7e:8f:91:56:8a:09:84:8d:61:ef:10:f5:72:f6:be:c5:fe:
24:da:d1:20:78:a9:e6:8e:6c:7d:01:f2:01:81:0a:f6:f2:1e:
de:51:bc:80:54:78:96:8d:ee:a0:ee:8d:3c:67:46:1c:3c:32:
66:99:2c:04:60:0f:bc:3a:3b:dd:6a:a5:5c:4d:bc:c5:a7:b8:
89:bc:dc:46:a0:84:ff:08:d2:5f:5d:84:dc:e6:cd:82:d3:79:
66:34:1c:2a:3c:1a:31:36:11:13:91:76:5f:d2:81:bb:f7:86:
20:17:9a:4b:70:15:ba:8a:40:5b:6b:aa:ba:6f:d2:b7:0d:2d:
03:ce:8a:50:d1:9a:7e:ca:c6:23:04:1a:90:a7:57:a9:da:d1:
e3:1c:15:fe:d2:b0:03:e9:1e:3a:03:bc:cf:f6:fd:93:67:3f:
00:2e:3a:73:93:c6:05:6f:72:e6:ec:8a:ea:21:a5:2d:76:38:
76:60:a9:11:6b:0d:89:3a:81:d2:15:94:db:1c:49:b1:a9:6a:
07:23:e0:c0:20:e1:cb:35:a1:ae:32:d9:81:72:54:8a:72:e7:
9f:66:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org