Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NJ9_PFQE8KQIRtJbke7rP4eWsvw.roa
File: NJ9_PFQE8KQIRtJbke7rP4eWsvw.roa (raw, json)
Hash identifier: dg3qrO+B87JkV/wnCS7IqD3iHBA/bXbEAhyL0P4ztSI=
Subject key identifier: 34:9F:7F:3C:54:04:F0:A4:08:46:D2:5B:91:EE:EB:3F:87:96:B2:FC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018571693721105D41D2F5E59E9EC4A0777C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NJ9_PFQE8KQIRtJbke7rP4eWsvw.roa
Signing time: Mon 02 Jan 2023 07:36:38 +0000
ROA not before: Mon 02 Jan 2023 07:36:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
84.32.172.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:37:21:10:5d:41:d2:f5:e5:9e:9e:c4:a0:77:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 07:36:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=349f7f3c5404f0a40846d25b91eeeb3f8796b2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:dd:63:5f:d4:b4:b3:b1:31:67:8f:a6:ca:
a8:20:7d:cb:89:cc:fa:8d:7b:2e:ad:38:2a:2a:2e:
ee:17:f1:7a:6f:4f:90:78:38:8a:90:e6:60:a8:27:
8e:74:d6:d1:ed:86:43:65:3d:63:cc:3d:14:85:c5:
74:14:33:e7:6f:66:ab:e5:5e:d1:25:5a:91:59:a1:
33:4c:74:cd:2f:05:6d:cf:a9:bc:3f:a9:d1:8f:47:
1b:0b:b0:39:12:09:18:8b:8c:b8:24:91:18:97:2a:
c0:18:49:ad:91:23:cb:7e:f2:4b:da:46:44:57:60:
62:d3:a6:23:37:1d:e5:4d:71:15:55:92:be:21:9d:
d8:01:55:6f:fe:1a:ca:0b:6a:ee:4c:36:64:78:23:
31:cc:49:f0:08:1e:e7:c5:74:8f:1c:fa:21:c9:ea:
7a:55:bf:cd:78:cc:0e:1e:1f:19:66:45:53:f9:01:
46:08:dd:c4:29:c6:56:b4:18:8d:f6:25:fd:a5:c3:
d8:d8:78:51:5a:a4:5d:76:d7:70:86:8b:f3:a3:7f:
6a:fb:f4:bc:d2:c2:3d:dd:8b:20:a9:ba:6d:08:3a:
aa:54:e0:38:86:e4:c9:01:e3:9b:12:ce:43:35:3a:
d8:9a:39:ae:fa:b6:e3:cf:8d:af:d7:c8:2f:25:53:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9F:7F:3C:54:04:F0:A4:08:46:D2:5B:91:EE:EB:3F:87:96:B2:FC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NJ9_PFQE8KQIRtJbke7rP4eWsvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.31.0/24
84.32.64.0/24
84.32.148.0/23
84.32.152.0-84.32.154.255
84.32.156.0/22
84.32.172.0/24
84.32.175.0-84.32.176.255
84.32.250.0/24
88.216.20.0/24
88.216.23.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.185.0/24
88.216.213.0/24
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bd:0f:8b:b2:92:ae:36:8f:89:24:15:24:09:30:91:32:26:
f8:33:57:d4:01:7d:9e:09:25:c3:cc:53:a3:28:43:8a:48:fa:
f3:b0:1f:c1:a5:37:d4:e8:74:e0:a4:f4:92:73:12:f7:a1:1e:
ff:d4:81:ce:30:c3:bb:dd:8e:d6:d4:29:11:e5:a5:c9:b6:02:
ea:17:14:dd:ce:98:f0:67:2d:02:cc:7c:62:0d:59:14:c2:08:
5d:6b:c9:cc:12:78:6a:93:4d:1d:bf:73:6f:29:05:9c:c1:d6:
1f:05:ce:22:39:3a:bd:98:ae:ee:e4:86:d4:34:77:e5:c9:94:
32:d3:ce:be:58:7f:6d:7a:a1:c1:01:7b:ab:f8:8c:7e:d7:28:
09:10:ff:8d:da:57:3e:a9:7e:fe:96:52:00:57:26:50:f1:06:
a1:e6:fb:6a:5a:f2:f4:90:fc:fd:c3:38:cf:01:76:6a:cc:fc:
a5:4f:dd:f5:0f:25:fd:af:be:ec:71:e0:e8:da:03:5b:73:59:
1f:0b:53:eb:57:6c:22:dc:76:80:21:04:74:fb:52:9b:8c:99:
51:a3:7d:c1:a6:c2:ca:9e:f8:20:87:fd:15:e3:b9:aa:49:b6:
e5:12:7d:24:88:cf:00:68:d2:69:1d:0f:35:30:64:da:73:22:
5f:bf:37:e2
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgISAYVxaTchEF1B0vXlnp7EoHd8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTAyMDczNjM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDlmN2YzYzU0MDRmMGE0MDg0NmQyNWI5MWVlZWIzZjg3OTZiMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCDdY1/UtLOxMWePpsqoIH3Licz6
jXsurTgqKi7uF/F6b0+QeDiKkOZgqCeOdNbR7YZDZT1jzD0UhcV0FDPnb2ar5V7R
JVqRWaEzTHTNLwVtz6m8P6nRj0cbC7A5EgkYi4y4JJEYlyrAGEmtkSPLfvJL2kZE
V2Bi06YjNx3lTXEVVZK+IZ3YAVVv/hrKC2ruTDZkeCMxzEnwCB7nxXSPHPohyep6
Vb/NeMwOHh8ZZkVT+QFGCN3EKcZWtBiN9iX9pcPY2HhRWqRddtdwhovzo39q+/S8
0sI93YsgqbptCDqqVOA4huTJAeObEs5DNTrYmjmu+rbjz42v18gvJVMmpQIDAQAB
o4ICdjCCAnIwHQYDVR0OBBYEFDSffzxUBPCkCEbSW5Hu6z+HlrL8MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvTko5X1BGUUU4S1FJUnRKYmtlN3JQNGVXc3Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAFQgHwME
AFQgQAMEAVQglDAMAwQDVCCYAwQAVCCaAwQCVCCcAwQAVCCsMAwDBABUIK8DBABU
ILADBABUIPoDBABY2BQDBABY2BcDBAFY2CwwDAMEA1jYOAMEAVjYQAMEAFjYuQME
AFjY1QMEAFjY1zANBgkqhkiG9w0BAQsFAAOCAQEAR70Pi7KSrjaPiSQVJAkwkTIm
+DNX1AF9ngklw8xToyhDikj687AfwaU31Oh04KT0knMS96Ee/9SBzjDDu92O1tQp
EeWlybYC6hcU3c6Y8GctAsx8Yg1ZFMIIXWvJzBJ4apNNHb9zbykFnMHWHwXOIjk6
vZiu7uSG1DR35cmUMtPOvlh/bXqhwQF7q/iMftcoCRD/jdpXPql+/pZSAFcmUPEG
oeb7alry9JD8/cM4zwF2asz8pU/d9Q8l/a++7HHg6NoDW3NZHwtT61dsItx2gCEE
dPtSm4yZUaN9wabCyp74IIf9FeO5qkm25RJ9JIjPAGjSaR0PNTBk2nMiX7834g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:29 2023 by rpki-client on console-ams.rpki-client.org