Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PagwC5jvQREP6O-HWVkT9mhQ30o.roa
File: PagwC5jvQREP6O-HWVkT9mhQ30o.roa (raw, json)
Hash identifier: PWCOS46xFcETFnIuGw8UiX8XVrL4uQZfI1PZn7kIT8Y=
Subject key identifier: 3D:A8:30:0B:98:EF:41:11:0F:E8:EF:87:59:59:13:F6:68:50:DF:4A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186A2A8FEF09B3AAECD37E9AD87461D4892
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PagwC5jvQREP6O-HWVkT9mhQ30o.roa
Signing time: Thu 02 Mar 2023 14:10:29 +0000
ROA not before: Thu 02 Mar 2023 14:10:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.186.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Mar 2023 18:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:a8:fe:f0:9b:3a:ae:cd:37:e9:ad:87:46:1d:48:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 2 14:10:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3da8300b98ef41110fe8ef87595913f66850df4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ce:6f:31:60:65:b2:62:fb:3a:eb:e0:96:e0:
50:bf:56:94:e2:52:a6:f9:f6:5c:94:bb:c7:1e:a5:
34:a8:29:72:f8:c0:a0:61:ca:74:2c:f4:b5:06:8a:
02:3f:af:df:aa:da:b5:e4:fe:4e:c4:d4:7b:48:d3:
6d:a9:ec:f7:d6:7a:97:01:a0:d1:cc:65:ca:44:e2:
42:8b:dc:12:1c:c6:54:6d:11:c8:c5:6d:5d:87:66:
4d:c7:44:71:f5:7d:ca:19:69:9a:06:92:de:b5:96:
a4:46:7d:d3:89:cd:37:06:cf:52:28:90:e2:d4:15:
d6:b0:0a:cd:6b:d9:01:08:3d:e8:23:ca:f1:13:b9:
d1:29:71:8c:e8:70:2b:31:d0:8c:78:41:c3:08:9b:
da:72:e0:f7:44:b3:03:bc:2a:7e:69:e2:9b:91:c5:
a1:8f:6d:e9:84:9a:2e:91:26:a1:ba:8a:8b:6e:14:
82:7a:69:af:ea:36:12:ba:4f:a5:a2:7b:36:4a:e9:
3e:34:12:82:75:41:d1:e1:63:28:2e:eb:69:38:28:
3f:da:cd:cc:f3:e8:e4:11:05:55:e5:9a:da:96:33:
e4:a0:65:a2:be:bd:22:a3:b4:40:b6:e9:6b:77:0f:
8f:05:60:d4:af:55:69:da:bf:4b:58:a6:c1:53:b2:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A8:30:0B:98:EF:41:11:0F:E8:EF:87:59:59:13:F6:68:50:DF:4A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PagwC5jvQREP6O-HWVkT9mhQ30o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.71.0/24
84.32.76.0/23
84.32.79.0/24
84.32.88.0/24
84.32.148.0/22
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0-84.32.222.255
84.32.229.0/24
84.32.232.0/24
84.32.239.0-84.32.240.255
84.32.242.0/23
84.32.245.0/24
84.32.252.0/23
88.216.3.0/24
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.92.0/23
88.216.128.0/24
88.216.132.0-88.216.134.255
88.216.186.0/24
88.216.189.0-88.216.190.255
88.216.199.0/24
88.216.215.0/24
88.216.220.0/24
88.216.228.0-88.216.235.255
Signature Algorithm: sha256WithRSAEncryption
7b:be:38:18:b5:14:20:fb:df:1b:e8:0c:1d:d9:9e:8b:a5:fc:
94:00:dc:71:c1:0a:48:9e:57:5c:a0:ea:d0:6f:8c:56:70:1f:
23:80:c5:0b:18:5c:69:24:6b:98:31:26:40:6d:7e:ca:1f:d2:
d9:e2:de:62:52:f2:ce:a5:36:65:cd:92:6c:5f:04:d8:bb:2b:
75:3b:ac:28:67:28:19:f5:bd:0d:c8:28:8d:34:d8:c5:72:03:
b4:d7:c9:a3:80:63:a0:8e:40:ab:5a:41:0f:28:a6:ae:1a:a6:
4a:8b:7b:df:e3:e7:92:82:ad:8c:1e:be:17:2c:46:9c:54:78:
99:e0:a7:c4:85:5f:3f:42:7f:fb:3d:ff:3e:b5:9d:de:c0:88:
07:54:5f:81:8d:44:f0:6a:82:ba:c2:27:00:09:dc:10:41:fa:
a0:ae:6d:2e:dd:35:0a:77:3a:7f:dd:33:8c:40:af:68:f3:0e:
f3:12:5a:ed:d9:51:89:29:63:94:bc:29:66:2c:88:33:1d:0a:
7f:36:97:8b:d2:07:6e:0c:e3:06:9c:7a:bb:58:36:ac:c2:59:
6f:f5:15:ca:c8:0b:39:ff:ac:5a:1d:66:30:c3:c1:e9:bf:3e:
4b:ac:eb:ee:e4:cd:28:aa:3b:4f:f7:cb:3b:c7:8f:e5:6f:43:
c4:55:0a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org