Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QPpujwPTn3bMvP0aHYWIOLSrSqs.roa
File: QPpujwPTn3bMvP0aHYWIOLSrSqs.roa (raw, json)
Hash identifier: IjWw28W5B4qfZ3nt0Bl0uYA/qftnFTLbR5i/FS7/COY=
Subject key identifier: 40:FA:6E:8F:03:D3:9F:76:CC:BC:FD:1A:1D:85:88:38:B4:AB:4A:AB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185DD9039B6C59E23FFF4B93851BA046A0E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QPpujwPTn3bMvP0aHYWIOLSrSqs.roa
Signing time: Mon 23 Jan 2023 07:38:14 +0000
ROA not before: Mon 23 Jan 2023 07:38:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:90:39:b6:c5:9e:23:ff:f4:b9:38:51:ba:04:6a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 23 07:38:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40fa6e8f03d39f76ccbcfd1a1d858838b4ab4aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:57:ae:41:f4:a7:24:a9:ba:94:8a:2c:e1:22:
7c:d1:da:e8:d9:d3:ab:b5:97:7c:64:f8:14:4c:1d:
5d:8c:38:e1:42:27:11:41:06:21:10:95:b2:8e:4f:
09:76:bd:46:c6:bb:14:68:24:fd:2b:57:3e:94:0b:
54:57:61:1e:c5:2f:0b:7f:51:4a:58:d3:e2:3a:6d:
6b:90:e7:db:13:56:be:ce:fe:0c:85:14:17:96:44:
d8:ba:a3:b2:54:65:b5:97:be:33:8f:ea:9b:6f:18:
78:2e:bb:f4:b9:f5:06:c0:8a:d5:f6:c6:f5:d7:1b:
e1:6e:83:7f:9d:12:98:fb:66:e0:60:a4:0d:fa:6c:
a0:13:d5:8a:a8:85:58:1e:6c:86:b8:88:39:6a:8c:
68:aa:70:8e:8d:40:a6:f8:fa:15:63:6d:e1:e2:0e:
2e:73:51:6b:30:ff:cf:a7:c9:b3:cf:a5:31:81:68:
bf:68:38:b0:ec:d9:f3:00:c7:34:97:7a:af:0c:63:
10:31:67:dc:27:24:08:b0:07:66:b6:1d:f5:2c:46:
f4:2f:93:5d:8d:e4:55:db:8c:95:84:a7:a7:c4:e8:
25:c2:fd:be:3c:cd:1b:ad:e5:40:2b:b2:f1:19:49:
56:88:b5:7e:94:65:fd:97:d8:b2:ef:dd:96:cd:bc:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FA:6E:8F:03:D3:9F:76:CC:BC:FD:1A:1D:85:88:38:B4:AB:4A:AB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/QPpujwPTn3bMvP0aHYWIOLSrSqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.76.0/23
84.32.79.0/24
84.32.179.0/24
84.32.212.0/24
84.32.220.0-84.32.222.255
84.32.240.0/24
84.32.243.0/24
88.216.17.0/24
88.216.128.0/23
88.216.132.0/23
88.216.190.0/24
88.216.224.0/20
Signature Algorithm: sha256WithRSAEncryption
16:eb:31:9e:bf:71:eb:05:24:89:c9:73:8b:07:d0:a2:99:13:
8b:7b:26:58:47:06:ff:f9:c5:5f:9b:c6:9a:06:08:e2:11:32:
d1:9e:32:09:d5:9e:f5:35:44:c3:0c:ba:f4:fa:f8:ea:21:ee:
fc:dc:37:fe:49:01:9c:b0:6e:54:d4:d2:c5:e7:4b:2a:e6:f6:
23:8d:94:63:e2:4a:ee:1e:8b:bf:d4:22:40:e4:33:98:dd:99:
3d:5d:87:b9:3c:16:75:8d:f7:98:ed:ff:8a:d0:e7:8b:20:35:
b2:3f:76:b9:e3:0e:c6:c1:50:16:95:33:6d:6f:91:85:8d:07:
71:15:d5:52:65:ba:4e:db:e4:b0:6f:ec:e2:65:e2:4d:dc:f3:
47:cc:9b:7b:29:58:ea:3a:ba:ce:5e:76:a4:ca:b1:0a:1c:a2:
7c:f8:d3:0c:83:82:41:3c:8d:75:b2:bb:8c:6f:e3:4d:ca:85:
c1:a0:dd:c3:43:0d:a5:36:22:7d:6d:fd:7c:eb:db:08:6c:b0:
ad:72:a7:e6:78:90:0e:3c:90:2f:9c:1b:6e:08:24:b3:08:2a:
4a:47:f8:51:71:bd:fa:9c:9c:ce:38:4b:82:d4:d7:86:8e:d3:
d8:63:be:a1:85:58:fb:6d:69:8e:ec:ca:b9:d1:f2:39:01:03:
28:7e:c4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:47 2023 by rpki-client on console-fra.rpki-client.org