Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/P1lTpbfI53ydTnpSiOp4Nzx3N2I.roa
File: P1lTpbfI53ydTnpSiOp4Nzx3N2I.roa (raw, json)
Hash identifier: 3z3pmw7wboBI6ZKZerNgSozdKRPQOFOrHzykTmqlb1U=
Subject key identifier: 3F:59:53:A5:B7:C8:E7:7C:9D:4E:7A:52:88:EA:78:37:3C:77:37:62
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186022DE71B16F16EBBC2A501717E5FAFF9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/P1lTpbfI53ydTnpSiOp4Nzx3N2I.roa
Signing time: Mon 30 Jan 2023 10:16:48 +0000
ROA not before: Mon 30 Jan 2023 10:16:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:2d:e7:1b:16:f1:6e:bb:c2:a5:01:71:7e:5f:af:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 30 10:16:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f5953a5b7c8e77c9d4e7a5288ea78373c773762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:b9:6f:02:5c:fa:33:cb:6e:09:51:4d:ee:
e0:dc:6b:65:0b:76:ae:57:d2:dd:14:8a:dc:16:2a:
0d:2b:79:da:83:10:b2:8c:33:43:8e:d6:3e:22:5d:
14:92:37:80:62:29:33:e7:13:80:14:04:5a:08:03:
e8:94:a6:a3:d5:0d:5c:ab:16:0b:4a:78:56:5c:eb:
17:51:a9:01:4d:8c:44:40:91:db:8a:cd:05:77:a2:
30:41:04:d0:e3:94:b1:dd:36:31:f6:c1:0c:4c:b7:
00:51:c4:71:ab:6f:b3:02:67:9b:b6:e0:18:8b:b9:
e4:6e:b1:1e:7e:82:f8:9e:6f:d2:a1:c0:9d:74:04:
1a:95:38:cf:84:06:70:34:c2:31:d5:44:10:a7:43:
da:8f:9a:e2:98:a9:01:e6:0a:98:aa:f0:29:61:ec:
fc:c9:f3:6b:af:28:55:75:21:99:ae:8c:93:82:0f:
5a:0b:f5:16:2b:c6:a7:e1:0c:36:c7:8d:62:60:bc:
fd:5b:8c:1b:ab:9b:2d:44:eb:2a:e3:83:29:21:2b:
b0:f4:7b:bc:63:25:8b:9f:59:98:4c:7a:35:e5:71:
01:5e:05:73:3e:5f:5a:4d:63:2c:1c:29:c8:ce:8f:
27:81:53:6c:0b:a7:5c:19:31:71:40:58:4c:3e:05:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:59:53:A5:B7:C8:E7:7C:9D:4E:7A:52:88:EA:78:37:3C:77:37:62
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/P1lTpbfI53ydTnpSiOp4Nzx3N2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.76.0/23
84.32.79.0/24
84.32.179.0/24
84.32.212.0/24
84.32.220.0-84.32.222.255
84.32.240.0/24
84.32.243.0/24
88.216.17.0/24
88.216.128.0/23
88.216.132.0/23
88.216.190.0/24
88.216.228.0-88.216.239.255
Signature Algorithm: sha256WithRSAEncryption
5d:57:23:d0:db:ac:d8:ca:5e:f5:c3:2b:16:bc:f8:b7:cf:a9:
c8:e9:f1:b0:99:b8:a8:58:89:dc:87:de:3e:c2:aa:b4:f4:23:
b8:43:e7:cd:a6:04:38:6e:4e:8a:78:2a:4f:cf:5b:1c:0b:19:
b4:c0:4c:53:83:e8:bf:9c:7b:31:f8:2f:bd:58:a9:51:05:78:
cb:00:de:0f:d7:68:e5:33:9f:20:1c:e2:7c:a2:f2:e6:69:44:
af:4c:0a:05:84:e7:05:6c:dd:0f:26:2d:ae:d4:f3:17:3c:32:
6f:58:47:d3:68:35:36:59:28:d1:11:9c:ad:99:b8:ec:b1:0a:
c3:f0:a3:5d:a2:40:5b:fc:68:0d:fd:21:88:9f:42:40:89:8f:
14:08:6e:83:75:9b:41:34:ad:15:d5:66:e8:c7:1a:6a:1c:96:
ec:2e:2e:e1:a5:74:42:98:81:b6:76:2f:95:9f:c4:12:e5:14:
04:7a:97:25:73:ed:6c:e9:ea:34:b1:b0:c4:1c:6a:eb:15:3c:
27:c7:cb:2a:f9:0c:66:6c:e3:6d:c8:dc:df:5c:c5:e0:ca:0c:
46:aa:82:95:4a:67:b9:35:72:97:96:1d:08:ce:be:00:73:f9:
cc:78:e7:31:39:0a:85:98:9e:50:a9:a3:ee:1d:a8:a7:49:a0:
34:ce:93:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:29 2023 by rpki-client on console-ams.rpki-client.org