Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PeOLtBJSz2HNiy-QKXQ8WZJYjmU.roa
File: PeOLtBJSz2HNiy-QKXQ8WZJYjmU.roa (raw, json)
Hash identifier: bkXteugQRmHRyLJh4+mAUWkL95HaCXfKFspcKGXH2YQ=
Subject key identifier: 3D:E3:8B:B4:12:52:CF:61:CD:8B:2F:90:29:74:3C:59:92:58:8E:65
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185A5A496DCBA2FABC28DEF30D5032EC2E2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PeOLtBJSz2HNiy-QKXQ8WZJYjmU.roa
Signing time: Thu 12 Jan 2023 11:01:45 +0000
ROA not before: Thu 12 Jan 2023 11:01:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 88.216.199.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jan 2023 06:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:a4:96:dc:ba:2f:ab:c2:8d:ef:30:d5:03:2e:c2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 12 11:01:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3de38bb41252cf61cd8b2f9029743c5992588e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:fc:31:64:a2:69:04:73:ed:39:3b:4d:cd:
df:f2:7e:54:b9:96:77:aa:ee:01:22:86:41:2e:cd:
67:a1:1c:66:9a:72:a8:ce:f2:ac:90:d2:6d:5e:df:
53:0d:c9:20:9e:a7:69:0e:f6:db:21:b6:fa:d6:a6:
89:de:41:12:4d:ad:c8:21:89:b7:6a:81:44:d8:1a:
7a:4f:45:50:31:06:ad:f9:29:d4:fc:91:83:78:09:
be:fc:f7:62:43:45:2d:73:00:38:d9:d8:8e:d5:68:
60:ec:e4:df:c2:17:63:3e:7e:be:25:85:92:0e:32:
28:45:83:b5:5b:a7:8d:53:df:f3:82:ea:de:32:a8:
81:65:06:f6:b0:98:2a:f8:7f:57:79:80:bd:0d:6b:
3b:99:b9:ad:cc:cc:0d:fd:7f:30:aa:49:26:d8:85:
bb:fb:79:4f:59:bf:ca:2b:90:cc:c5:52:f0:52:5e:
de:c5:ad:65:a4:c0:6a:45:90:7d:f6:30:5b:19:fe:
33:fe:be:9f:1e:57:96:60:6b:88:bc:c7:23:2d:bd:
56:50:57:51:00:c1:86:e3:17:56:df:ea:cb:5b:ea:
e9:92:39:d3:b1:fb:38:61:78:f6:08:68:39:a4:74:
ca:3b:22:21:b4:2f:74:fb:c7:80:9d:a8:3d:63:11:
98:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E3:8B:B4:12:52:CF:61:CD:8B:2F:90:29:74:3C:59:92:58:8E:65
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/PeOLtBJSz2HNiy-QKXQ8WZJYjmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.24.0/24
84.32.48.0/24
84.32.50.0/24
84.32.58.0/24
84.32.71.0/24
84.32.88.0/24
84.32.93.0/24
84.32.108.0/24
84.32.150.0/23
84.32.177.0/24
84.32.218.0/24
84.32.226.0/24
84.32.232.0/24
84.32.239.0/24
84.32.245.0/24
88.216.3.0/24
88.216.21.0-88.216.22.255
88.216.32.0/24
88.216.46.0/24
88.216.92.0/24
88.216.134.0/24
88.216.199.0/24
88.216.210.0/23
Signature Algorithm: sha256WithRSAEncryption
94:a7:ef:35:1e:f6:66:e7:97:30:36:a8:46:d5:ce:76:a6:1e:
06:4f:56:49:a4:ce:0c:50:a2:c5:9b:56:f9:34:01:1a:3f:e3:
05:78:d1:6b:a9:f6:ee:bc:e1:80:1c:d9:4e:90:91:dc:aa:04:
29:89:0a:f5:37:44:38:71:50:1d:2f:8e:de:7e:cc:66:d5:ab:
2e:30:35:d3:d7:e5:9d:bd:81:c8:48:83:43:13:0c:fb:ed:82:
aa:de:12:c9:b7:3a:c2:20:8a:de:2b:53:2b:89:45:ee:58:08:
ff:25:79:b2:ef:e8:ad:46:21:9a:f8:bd:26:4c:b6:77:f0:72:
6a:57:0a:d0:4e:54:44:b4:39:5b:68:f7:06:7e:ec:bb:1b:02:
ad:ec:0d:ac:c9:dc:28:34:b7:a4:fa:40:3c:3f:95:36:0e:64:
ae:3a:84:a3:d2:99:ad:0d:51:30:1c:48:5a:3e:ac:17:53:ab:
8c:57:fe:ff:f3:b0:c8:b7:47:db:18:43:b7:bd:a0:8e:2a:c5:
b0:dc:e3:c9:40:f5:b8:0e:93:af:d0:84:0b:82:65:1f:22:0d:
88:49:89:eb:32:8d:49:f0:ff:a6:f5:51:e1:82:02:ac:f9:a7:
84:2a:39:8c:f5:8f:b9:59:3b:04:b4:3a:cc:e1:5e:75:5b:58:
c1:3b:dc:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org