Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SEI2C2viB9PeLn3Y0ATJJOZb1nM.roa
File: SEI2C2viB9PeLn3Y0ATJJOZb1nM.roa (raw, json)
Hash identifier: T9RL1fiNQNKFnfuBSnlhsjKsGggSF9tFqq0sXjfI7Z4=
Subject key identifier: 48:42:36:0B:6B:E2:07:D3:DE:2E:7D:D8:D0:04:C9:24:E6:5B:D6:73
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CE7B68848C59C7E8685E19D78B87C76FF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SEI2C2viB9PeLn3Y0ATJJOZb1nM.roa
Signing time: Mon 08 Jan 2024 06:15:48 +0000
ROA not before: Mon 08 Jan 2024 06:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
84.32.214.0/23 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
84.32.57.0/24 maxlen: 24
84.32.59.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 06:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:b6:88:48:c5:9c:7e:86:85:e1:9d:78:b8:7c:76:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 8 06:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4842360b6be207d3de2e7dd8d004c924e65bd673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:02:f1:f8:e0:c3:5c:25:34:e4:11:11:96:
e5:fc:82:ef:fd:91:7e:e4:10:ab:fc:96:4d:be:d9:
8e:1c:d6:b1:4d:49:c9:05:3f:98:24:4c:60:0d:b0:
f1:b9:01:b5:17:79:2a:c7:88:01:78:27:2c:dc:15:
4a:2a:b6:36:ce:e2:14:b0:fb:a1:83:0c:5d:b2:84:
9f:59:cc:1b:64:b6:5e:bb:ac:f2:d5:db:03:a6:f2:
53:2a:95:72:9c:d0:ad:e7:75:c7:14:9c:70:83:fc:
bb:d7:58:e2:96:c6:c2:5e:c8:70:df:0d:c6:b2:f2:
fe:f3:da:d5:2e:89:97:39:ae:2d:dc:67:1e:89:80:
f2:76:b4:13:b0:50:cc:96:77:ce:1a:bf:aa:7a:27:
c3:4b:b9:68:6e:b7:96:0b:fa:e7:46:78:81:e0:44:
85:fa:d5:6e:df:68:55:e6:18:53:4b:12:b7:29:59:
8c:4b:9b:43:00:00:e3:66:7d:63:34:ba:50:d3:4e:
fd:30:a7:14:8e:73:81:69:08:82:c2:16:ee:89:de:
11:74:c5:f4:b3:b2:88:e4:5d:76:9c:77:e2:6e:a5:
b4:ba:cf:ab:df:67:d5:a7:53:b0:b5:e8:f9:58:f5:
08:1b:76:b5:f7:48:d4:e1:8d:ad:7a:01:c1:04:5e:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:42:36:0B:6B:E2:07:D3:DE:2E:7D:D8:D0:04:C9:24:E6:5B:D6:73
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SEI2C2viB9PeLn3Y0ATJJOZb1nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0-84.32.27.255
84.32.39.0/24
84.32.46.0/23
84.32.57.0/24
84.32.59.0/24
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.178.0/23
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.188.0/22
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
70:ce:e0:dd:88:d0:01:70:4e:8f:69:53:04:b7:ff:14:e3:76:
96:62:91:1f:28:e6:7c:b7:ee:63:29:68:fa:97:af:84:64:c9:
88:12:68:27:de:df:52:32:c9:e2:b0:e6:56:b9:b2:7c:cd:32:
69:a5:92:02:8e:d6:a4:6b:b9:6b:80:7b:3d:50:cb:a0:e7:d8:
0f:69:89:5c:5b:3c:3e:16:7c:ce:c6:f7:2b:bb:ab:e1:72:88:
97:e3:82:9d:3c:53:b8:78:5d:54:b4:a6:47:55:2e:1d:7d:46:
25:44:6d:70:e1:9d:43:5e:78:2c:ed:e8:f6:6e:25:5b:62:8e:
f2:bf:26:7c:80:5c:1d:75:f5:1e:f4:66:89:b7:6c:62:b2:46:
25:7a:88:1e:a7:93:e0:71:3e:4e:f0:3b:46:77:c2:66:c4:ca:
01:4f:e2:13:1a:a3:0f:48:b9:b6:27:a0:27:12:45:b7:29:38:
28:e6:69:31:a3:d5:a1:a1:68:a9:da:43:29:56:29:26:2c:3c:
cb:5a:34:8f:4a:fa:ba:24:ae:66:7c:61:98:d0:11:4c:f8:3f:
99:6b:2e:bc:a6:1e:95:86:a8:33:70:8a:87:6c:c6:1d:a0:06:
52:9a:d0:ce:d4:93:fa:d5:b8:cc:cd:b2:89:b1:af:ef:14:51:
08:b6:04:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org