Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/R_TBeoc4z5Q6iEq7I7fnNGEws1s.roa
File: R_TBeoc4z5Q6iEq7I7fnNGEws1s.roa (raw, json)
Hash identifier: T0UXGqTFNXQUiKGsbFUCvcfoQ3NOuRg1DkkbmMOp6ns=
Subject key identifier: 47:F4:C1:7A:87:38:CF:94:3A:88:4A:BB:23:B7:E7:34:61:30:B3:5B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186B310FE671CCDB7DB538A9920B8817E70
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/R_TBeoc4z5Q6iEq7I7fnNGEws1s.roa
Signing time: Sun 05 Mar 2023 18:38:00 +0000
ROA not before: Sun 05 Mar 2023 18:38:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
88.216.209.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.178.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Mar 2023 10:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b3:10:fe:67:1c:cd:b7:db:53:8a:99:20:b8:81:7e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 5 18:38:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47f4c17a8738cf943a884abb23b7e7346130b35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:82:34:ea:c0:11:09:89:d7:14:11:9a:95:2b:
b4:af:92:7b:98:d1:10:d0:5b:33:01:45:e5:1b:f2:
ee:7c:21:41:98:c9:4f:a9:fc:58:14:8c:51:cf:47:
44:14:9d:c8:cd:34:9c:8c:74:9c:b4:89:22:89:9a:
f1:b0:d1:b8:41:20:c6:84:b9:24:16:da:64:70:74:
2d:09:5f:6e:8b:76:ea:bd:5f:ed:92:2e:2c:b6:84:
cb:17:55:3d:74:c2:f1:77:8d:9d:0f:14:2f:e2:a9:
f3:05:f1:71:b1:51:e1:05:b4:2c:b0:78:03:11:59:
cf:59:bf:75:18:4b:a9:69:d6:fd:a4:bc:be:78:28:
f8:8a:f7:d4:82:1a:d5:80:b6:f8:40:0f:4e:76:9f:
b8:e5:29:ac:87:a8:4c:d4:9a:a9:d8:cf:b7:ed:a4:
4d:3b:68:fd:fd:6a:bd:50:ba:e6:b5:81:c9:be:a5:
e5:44:68:77:ac:8c:a0:40:fc:1e:2f:ba:fe:c1:9b:
3b:aa:48:80:74:84:90:2e:e5:ee:6a:3c:6f:c6:9f:
c8:33:3c:8e:89:2d:35:9c:84:60:47:c4:ae:63:18:
fb:e7:ee:17:48:db:c9:9d:50:52:77:50:30:4b:0e:
a0:36:d6:ad:f7:41:85:bd:c8:ef:96:79:d8:79:1b:
0c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F4:C1:7A:87:38:CF:94:3A:88:4A:BB:23:B7:E7:34:61:30:B3:5B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/R_TBeoc4z5Q6iEq7I7fnNGEws1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.44.0/24
84.32.47.0/24
84.32.59.0-84.32.60.255
84.32.66.0/24
84.32.68.0/24
84.32.90.0/24
84.32.178.0/24
84.32.225.0/24
84.32.227.0/24
88.216.95.0/24
88.216.103.0/24
88.216.209.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c4:6f:03:de:4a:d3:c7:66:5d:cc:0e:3d:e4:71:cf:16:c1:
10:3f:27:88:73:de:8b:db:d8:9e:9d:bf:ba:e2:74:57:46:bd:
40:65:da:51:fc:7d:ec:a4:b3:5c:1a:43:67:f4:57:6c:26:79:
9d:5a:ca:c3:ac:59:e1:87:49:8f:40:16:9e:f1:d8:29:f6:4d:
f4:47:0f:26:37:be:1c:89:6e:07:69:c0:ff:eb:55:0c:f6:f0:
46:2c:dc:dd:53:e2:74:2a:57:37:d0:70:31:4d:ae:53:4d:cf:
53:ac:28:4b:5c:5c:3c:42:ec:d2:ac:bf:b3:54:ed:8b:a3:09:
5b:2c:00:5e:e2:21:f4:7f:09:71:29:7e:1e:f9:ed:a8:b7:f8:
0a:7f:65:d2:c0:21:50:d5:15:68:01:e3:ce:91:1f:29:59:b9:
90:68:4e:ac:f8:36:cd:ed:7f:f5:b5:aa:0b:a9:59:d4:1b:f7:
af:d9:f7:cb:42:9e:21:e9:f5:a5:86:d0:26:f5:be:9b:b2:f8:
e4:f2:b8:08:f6:67:02:5b:cc:06:4d:2a:2d:2f:d3:72:31:22:
fe:5b:22:9e:12:2f:f9:9b:60:b7:df:6f:f0:02:66:6c:1d:f2:
15:84:87:16:3f:69:10:e0:59:c5:ac:e2:3b:d2:11:03:13:56:
a4:26:d3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org