Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RYDPK1q0meMcmyqhuY3IJ432XcY.roa
File: RYDPK1q0meMcmyqhuY3IJ432XcY.roa (raw, json)
Hash identifier: MTNEGo7esXMxdiZQXmsMDo15iZf4y3GU3Nkwd9EFKaw=
Subject key identifier: 45:80:CF:2B:5A:B4:99:E3:1C:9B:2A:A1:B9:8D:C8:27:8D:F6:5D:C6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186350AD688A252F3A281A19314530CD9DC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RYDPK1q0meMcmyqhuY3IJ432XcY.roa
Signing time: Thu 09 Feb 2023 07:19:08 +0000
ROA not before: Thu 09 Feb 2023 07:19:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.190.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.255.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.78.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Feb 2023 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:0a:d6:88:a2:52:f3:a2:81:a1:93:14:53:0c:d9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 9 07:19:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4580cf2b5ab499e31c9b2aa1b98dc8278df65dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a8:5f:32:f1:cd:c8:ac:03:83:dd:50:3a:8c:
53:08:03:bf:e1:ec:14:7f:87:21:e9:6c:dd:0e:93:
69:16:61:39:25:dc:c0:bf:23:1b:a0:6e:e9:47:9b:
81:a8:16:48:3a:07:a6:97:65:34:39:43:34:04:94:
4e:0b:eb:c4:db:20:aa:f3:ee:7c:b1:fa:41:72:fb:
a8:54:7f:6a:4a:85:ff:22:99:9e:b0:c6:3a:49:82:
0f:46:60:1a:2a:99:71:07:8b:7a:13:b2:3a:69:bd:
cf:61:97:2b:d7:96:53:29:dc:d6:ab:eb:5d:8a:6d:
45:02:5d:14:9a:8a:d1:e8:c3:ae:47:ec:79:30:94:
77:b1:2c:6a:bd:7c:c8:af:44:e4:08:74:00:ff:fc:
49:94:b6:f9:0f:37:07:09:d6:09:02:9f:6e:e1:0a:
9e:bd:67:19:93:84:c8:47:67:a8:5a:c1:6e:7e:20:
48:03:c3:ea:23:73:02:14:94:12:51:7b:2e:bd:d4:
2c:58:3a:76:cf:04:39:94:0b:11:08:96:7c:ed:91:
b2:bb:63:88:27:06:76:c0:ff:72:7f:68:05:4e:ca:
ce:81:32:cd:d6:6b:0e:ff:35:83:87:db:fd:92:d0:
9d:ba:b5:02:9e:9c:bd:e1:83:bc:43:a9:f6:5a:54:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:80:CF:2B:5A:B4:99:E3:1C:9B:2A:A1:B9:8D:C8:27:8D:F6:5D:C6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RYDPK1q0meMcmyqhuY3IJ432XcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0-84.32.28.255
84.32.30.0/24
84.32.46.0/24
84.32.76.0/22
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.220.0-84.32.222.255
84.32.240.0/24
84.32.243.0/24
84.32.252.0/23
84.32.255.0/24
88.216.17.0/24
88.216.93.0/24
88.216.128.0/23
88.216.132.0-88.216.134.255
88.216.190.0/24
88.216.213.0/24
88.216.215.0/24
88.216.220.0/24
88.216.228.0-88.216.239.255
Signature Algorithm: sha256WithRSAEncryption
24:8d:a5:5d:d2:37:e0:d1:45:6a:ca:9e:3c:ae:ac:a5:c4:92:
c7:1f:09:b2:9b:07:32:06:80:97:de:87:aa:7c:d7:05:e9:cf:
00:6f:32:02:ae:7e:72:4a:d8:05:3c:37:bc:e1:7a:db:de:01:
43:06:5b:9a:cd:0e:79:a0:8c:e1:99:d4:e0:b0:0b:1e:9d:37:
0a:7f:0b:58:3e:70:f7:13:16:b9:17:c5:9c:b4:b9:3b:14:8b:
cf:f2:0d:05:72:ce:6f:c0:e5:cf:fa:f7:65:19:1e:e0:14:cf:
6a:74:fa:2c:d4:01:b9:9a:84:25:9f:82:4f:aa:0a:1f:22:8d:
bc:85:36:ca:8b:7d:f5:51:b6:c3:94:56:04:aa:32:4a:e8:65:
9e:81:c1:88:9d:fb:0a:30:3d:b1:4a:c6:0c:9e:7b:66:3b:87:
3e:bf:55:53:f9:dc:7a:ae:83:50:2a:1f:4b:bf:b4:47:ba:c1:
bb:e3:e3:95:06:62:48:87:13:eb:cb:90:2c:6e:6a:ad:37:c9:
ad:5d:77:75:a6:3a:c7:e7:b1:b5:30:1b:4e:5f:3c:a4:79:4c:
e7:31:90:dd:8c:9f:b2:66:f6:9e:b2:d5:86:3d:dd:67:4a:6c:
0c:95:a1:fb:c4:b1:5f:1c:42:bf:24:fc:bb:24:d0:bf:67:5c:
93:4c:01:17
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org