Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RYVkTHn3YUoy5g4ao6wqFNX6x38.roa
File: RYVkTHn3YUoy5g4ao6wqFNX6x38.roa (raw, json)
Hash identifier: ONP2LFZDvhfbYgVLobMLcFqyER4YtXrPSZiVi57pwuk=
Subject key identifier: 45:85:64:4C:79:F7:61:4A:32:E6:0E:1A:A3:AC:2A:14:D5:FA:C7:7F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01910DF37571E08D665BD54DFDE8C9471FB2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RYVkTHn3YUoy5g4ao6wqFNX6x38.roa
Signing time: Thu 01 Aug 2024 12:39:04 +0000
ROA not before: Thu 01 Aug 2024 12:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 12:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:f3:75:71:e0:8d:66:5b:d5:4d:fd:e8:c9:47:1f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 1 12:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4585644c79f7614a32e60e1aa3ac2a14d5fac77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:ee:a1:40:92:c8:ff:ce:09:cf:e1:b1:0a:
45:68:6f:28:be:24:30:79:e3:31:6a:52:1f:94:54:
92:c9:8d:4a:c2:2d:6c:28:6b:c5:05:93:01:f8:46:
98:32:65:58:48:98:7b:83:49:4f:e8:a9:b7:bf:89:
fd:84:71:f3:64:1f:d1:6f:7e:db:20:30:d9:49:21:
b4:37:2b:c4:43:a9:a1:af:21:51:d0:cd:38:2a:ce:
57:23:3e:2f:06:1d:61:51:d9:57:03:66:2f:73:90:
73:66:71:08:5e:68:cb:79:9e:40:ac:d0:5c:a9:9f:
bc:20:7c:26:f1:e7:07:b9:9c:a1:47:c8:5d:5f:41:
f8:59:8e:bd:7a:22:bc:57:1d:d3:87:00:22:77:60:
f7:89:1d:3d:26:d7:74:c5:57:48:6a:d5:be:c2:04:
52:01:6d:41:ab:71:0c:13:1b:f3:56:e8:b7:8e:ba:
f1:7f:e6:59:c8:f3:10:74:59:bc:3e:fb:a2:31:8d:
58:d2:fa:bd:3b:59:c6:e2:e7:ac:1c:85:bc:e7:4f:
23:34:a7:41:d0:36:b1:e4:7b:83:ce:9a:1c:f9:81:
33:71:34:15:b0:f2:13:53:d8:5a:e7:40:5a:38:10:
30:76:25:22:cd:8f:91:a0:4b:c3:fe:bd:e0:d4:cf:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:85:64:4C:79:F7:61:4A:32:E6:0E:1A:A3:AC:2A:14:D5:FA:C7:7F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RYVkTHn3YUoy5g4ao6wqFNX6x38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.70.0/24
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0/23
88.216.134.0/23
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:2d:2e:4a:f0:e2:d2:02:ae:1a:9e:1b:34:45:98:ec:47:dd:
c2:5a:e0:c8:3f:7c:d9:1a:ef:97:4a:d1:24:30:5a:2f:40:f7:
a4:36:d4:0f:a4:aa:d4:cb:93:99:0f:72:10:f4:bd:08:e0:51:
39:b3:fb:ba:2c:47:da:6a:85:d4:04:0d:58:4b:4e:e6:83:ba:
31:5a:43:83:84:72:a7:11:76:79:32:30:40:5c:fd:6a:0e:33:
9b:91:c9:f8:f0:91:87:8c:44:fa:f7:1a:20:42:0b:cb:62:6d:
38:8b:33:50:9e:ff:72:67:48:c2:f6:95:33:68:d8:73:d0:7f:
57:bc:bd:8d:04:16:9f:12:3f:fd:14:62:7f:a3:e4:cd:a7:c5:
c2:65:0a:23:a3:2f:ae:d1:44:39:67:9b:bc:69:14:6b:19:8a:
b7:3a:cb:3a:ca:5a:c4:d5:2d:d2:81:1e:3b:20:eb:ec:86:98:
46:f4:08:27:35:e3:07:ef:e4:13:63:af:60:64:c8:17:24:0b:
6f:84:eb:70:89:e0:e8:d1:8d:10:6f:3b:94:ef:8e:0b:08:39:
83:24:64:47:ac:0e:20:3c:68:51:48:d5:b1:8c:bf:28:dd:56:
31:4a:38:78:32:a5:38:cd:d8:43:15:0c:d8:3a:aa:53:e0:d9:
0c:3b:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 13:49:46 2024 by rpki-client on console-fra.rpki-client.org