Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ODnP8_E9wjM5_ZVNPnrvIJZf4kY.roa
File: ODnP8_E9wjM5_ZVNPnrvIJZf4kY.roa (raw, json)
Hash identifier: e5LpcLtSuK6T5b6Xv8aoBJIdP78pmYiNfPJKH4ib0BI=
Subject key identifier: 38:39:CF:F3:F1:3D:C2:33:39:FD:95:4D:3E:7A:EF:20:96:5F:E2:46
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186BFFA0BBE03448EB7459151AC74510D0B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ODnP8_E9wjM5_ZVNPnrvIJZf4kY.roa
Signing time: Wed 08 Mar 2023 06:48:00 +0000
ROA not before: Wed 08 Mar 2023 06:48:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.186.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.173.0/24 maxlen: 24
84.32.174.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Mar 2023 15:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bf:fa:0b:be:03:44:8e:b7:45:91:51:ac:74:51:0d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 8 06:48:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3839cff3f13dc23339fd954d3e7aef20965fe246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:90:a3:32:0d:47:01:3f:b9:96:02:e2:8d:
cd:64:e7:cb:15:68:e8:57:aa:fe:b2:be:75:ce:2e:
c9:60:ca:4b:4b:5e:d3:b6:9f:7a:06:de:62:c0:4f:
a2:d4:df:07:e1:84:48:d7:03:85:da:e7:57:90:a3:
12:79:1d:18:f3:70:29:b0:6c:4e:4e:14:f8:b0:be:
13:53:c6:21:97:a1:e9:66:a8:b8:27:d0:07:af:3d:
f4:c7:e7:d2:cb:4e:e3:5c:4a:13:69:f1:ff:89:61:
90:81:48:23:7d:32:37:92:71:8e:4c:29:ef:2e:a8:
77:3e:79:4f:99:e1:7b:96:0e:8d:ea:18:44:2f:b7:
74:82:55:b8:7d:e1:35:19:1f:80:3e:a2:ee:00:f4:
06:18:1d:16:cf:b7:17:16:ca:a8:d5:91:f2:9d:a1:
c1:2a:0e:a4:23:28:e0:c3:2c:09:9d:52:a7:5a:12:
27:23:51:90:4a:39:9b:78:21:9b:ea:6e:ef:e2:9e:
ce:e6:99:f4:9c:d2:74:18:d5:36:3a:7b:0a:7a:49:
20:b0:3f:4b:cc:ab:9f:e1:ec:9c:18:e9:13:8d:44:
06:ef:48:fb:79:b0:ba:f2:d5:59:3f:ee:67:2d:25:
3e:fb:ae:bf:1e:55:68:96:b1:c7:7c:dd:a2:af:14:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:39:CF:F3:F1:3D:C2:33:39:FD:95:4D:3E:7A:EF:20:96:5F:E2:46
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ODnP8_E9wjM5_ZVNPnrvIJZf4kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.71.0/24
84.32.76.0/23
84.32.79.0/24
84.32.88.0/24
84.32.148.0/22
84.32.173.0-84.32.174.255
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0-84.32.222.255
84.32.229.0/24
84.32.232.0/24
84.32.239.0-84.32.240.255
84.32.242.0/23
84.32.245.0/24
84.32.252.0/23
88.216.3.0/24
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.92.0/23
88.216.128.0/24
88.216.131.0-88.216.133.255
88.216.186.0/24
88.216.189.0-88.216.190.255
88.216.199.0/24
88.216.215.0/24
88.216.228.0-88.216.235.255
Signature Algorithm: sha256WithRSAEncryption
65:f0:4c:1a:b1:44:67:cd:2a:3d:91:b5:b3:cd:8b:7c:48:4e:
8a:6e:e0:cc:7d:4d:01:ab:e8:86:0a:10:38:85:10:4f:76:eb:
3f:fc:2e:14:9a:36:74:2c:39:58:c7:7b:6f:0a:99:f8:6f:7d:
7b:eb:8e:ba:f4:7d:fa:98:3a:5e:2b:e4:38:5e:d2:2e:68:47:
3b:65:80:65:86:5b:94:1a:11:65:c5:90:0c:3f:a0:47:58:b9:
c7:1c:64:5a:91:29:0b:f7:da:3f:56:ed:32:60:d3:02:4a:0f:
91:77:84:c6:fc:1e:d2:92:25:e4:1a:44:d9:37:80:66:55:5e:
3e:f3:92:77:65:0d:4b:11:8a:03:53:32:71:74:2c:c9:08:71:
01:80:c9:92:fa:19:ca:27:fe:b7:9c:a0:49:12:ec:0e:6c:aa:
41:8f:c0:44:bd:0a:5b:64:98:dd:c7:e5:31:af:ed:3f:08:9f:
12:ef:ed:c7:4d:01:a2:2f:a4:43:fd:44:e4:c4:d3:3a:1e:16:
02:f6:4a:78:b9:56:c8:bc:27:5c:26:36:44:a2:8c:c1:11:6e:
9c:ae:e4:cb:d2:62:7f:5b:da:4c:70:91:4b:9c:d6:d6:79:8e:
c4:60:26:7f:90:4e:fa:b8:10:b5:8a:73:ad:e3:2c:3f:99:80:
af:e6:55:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org