Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RuC8RSOXwNudPn0B7zURyFM3ZL4.roa
File: RuC8RSOXwNudPn0B7zURyFM3ZL4.roa (raw, json)
Hash identifier: NBXYZ2X49Hi+SboodyBMPGxCqUIhEI4k71fJQJhDnac=
Subject key identifier: 46:E0:BC:45:23:97:C0:DB:9D:3E:7D:01:EF:35:11:C8:53:37:64:BE
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186B310144B187DB6D032AFCFD76AD68DC8
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RuC8RSOXwNudPn0B7zURyFM3ZL4.roa
Signing time: Sun 05 Mar 2023 18:37:00 +0000
ROA not before: Sun 05 Mar 2023 18:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
88.216.221.0/24 maxlen: 24
84.32.65.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b3:10:14:4b:18:7d:b6:d0:32:af:cf:d7:6a:d6:8d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 5 18:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46e0bc452397c0db9d3e7d01ef3511c8533764be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:76:af:d9:90:8b:f4:21:b5:74:cb:85:44:
e8:9b:cd:90:e0:f2:a1:1a:93:70:8b:51:89:ee:62:
99:01:ab:b7:99:b6:c8:d1:d4:55:6d:00:81:23:c4:
9d:59:d1:ee:74:c3:58:dd:83:5f:b5:c9:d9:07:93:
5d:2c:fd:5f:c2:e5:3e:02:f5:0c:cd:d2:96:26:b5:
f6:1c:d6:6a:12:f9:f9:5d:ce:f9:a8:05:ff:42:4b:
5f:f8:97:15:ee:a6:10:6f:48:b0:1f:fc:22:5f:25:
7d:6d:60:f1:a8:82:35:12:a1:c8:3e:ac:54:de:aa:
ed:f8:fb:d8:e1:d3:e9:1c:ad:3d:bc:6a:ac:0b:a7:
9e:da:96:94:37:a3:b1:06:ad:01:67:1d:49:e5:6b:
56:39:ce:4b:38:e8:8b:d1:42:d9:70:06:3b:fd:bc:
99:55:10:bc:1d:a0:33:03:95:e9:4f:26:a9:ce:05:
58:01:80:19:d0:7e:b8:fc:56:dd:e5:47:2e:65:ce:
b8:c2:41:43:9b:c8:b3:1d:73:a4:2a:ba:d1:1b:dd:
48:0d:6d:d7:b5:87:b2:53:47:13:5c:a8:c8:8b:8b:
59:58:8d:dd:b3:58:1b:2e:dd:5d:98:d0:73:b7:a7:
a1:46:a5:b0:2d:db:10:87:6f:55:25:f2:a2:03:a3:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E0:BC:45:23:97:C0:DB:9D:3E:7D:01:EF:35:11:C8:53:37:64:BE
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RuC8RSOXwNudPn0B7zURyFM3ZL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.26.0/24
84.32.29.0-84.32.30.255
84.32.45.0/24
84.32.65.0/24
84.32.76.0/23
84.32.79.0/24
84.32.89.0/24
84.32.92.0/24
84.32.94.0/24
84.32.155.0/24
84.32.177.0/24
84.32.210.0-84.32.212.255
84.32.241.0/24
84.32.243.0/24
84.32.255.0/24
88.216.105.0/24
88.216.190.0/23
88.216.198.0/24
88.216.211.0/24
88.216.221.0/24
Signature Algorithm: sha256WithRSAEncryption
43:42:fc:fc:2f:03:1c:3e:c2:ca:83:95:a8:de:e3:b1:98:4c:
28:36:95:45:a4:d9:8c:61:40:24:13:27:ca:30:b9:af:5c:f8:
46:8a:cf:43:19:82:8e:50:9b:20:05:b0:c4:47:58:42:2b:bd:
7b:40:1c:fa:cf:0d:19:04:73:d7:23:c1:97:d2:d4:28:0d:2e:
eb:39:af:b3:37:86:73:3a:cb:1f:36:3f:a2:7e:c4:04:f1:8e:
c4:60:e8:9e:d8:48:2b:ac:f9:c2:47:07:7b:9d:87:f0:a6:3f:
53:c7:e5:12:d2:13:9f:12:24:03:c8:6b:ef:1e:2a:54:ef:09:
9b:23:fb:b1:e1:b5:f5:0d:1f:87:23:47:1c:34:f6:e2:fa:91:
98:69:05:42:29:2f:1e:38:5e:60:8d:33:b8:ba:65:d3:4b:40:
73:c8:c8:1f:f3:30:31:da:bf:c6:4c:12:8b:3e:39:da:c3:f9:
dd:27:55:c7:e6:6e:61:33:d0:e7:4a:5b:5f:3a:85:3c:0e:47:
59:25:7c:af:be:17:10:fc:fe:56:27:df:65:36:72:90:fc:f2:
16:e2:92:3c:4b:ed:a2:ac:b2:9c:43:29:3e:69:01:50:2a:27:
46:f8:f0:9e:4a:94:2d:35:21:62:df:c5:1c:d0:2f:03:4e:4a:
3d:a3:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:29 2023 by rpki-client on console-ams.rpki-client.org