Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SpRh-AOEeMOepEl_DJ5_DPuY3hs.roa
File: SpRh-AOEeMOepEl_DJ5_DPuY3hs.roa (raw, json)
Hash identifier: BVieNatMonJ0tfxC6BsI+CECG+3O9donDHx2+5XGkT8=
Subject key identifier: 4A:94:61:F8:03:84:78:C3:9E:A4:49:7F:0C:9E:7F:0C:FB:98:DE:1B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01857C3ABB51AC94F5CCC7884B11E83DC158
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SpRh-AOEeMOepEl_DJ5_DPuY3hs.roa
Signing time: Wed 04 Jan 2023 10:01:41 +0000
ROA not before: Wed 04 Jan 2023 10:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
84.32.6.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.252.0/22 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 11:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:3a:bb:51:ac:94:f5:cc:c7:88:4b:11:e8:3d:c1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 4 10:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a9461f8038478c39ea4497f0c9e7f0cfb98de1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:3b:15:df:1c:51:6c:fc:3c:91:98:bb:1b:
21:f5:27:49:05:93:b2:a4:59:fa:26:3e:17:3c:d6:
97:75:b8:fc:2c:92:24:49:05:31:87:3d:27:45:59:
cf:2f:df:79:4f:aa:e6:ae:47:33:d5:3c:7c:0b:78:
62:a7:ad:13:8c:12:38:a2:3e:a1:af:fc:57:51:da:
d6:2b:67:58:87:01:17:4e:03:59:f6:7f:c8:84:6c:
44:84:a9:a2:98:72:c4:47:a9:b5:8f:a1:17:6d:eb:
b3:11:9d:f2:45:11:ee:f5:93:37:e2:bf:40:23:94:
1b:1c:33:4b:dd:92:74:c5:7c:ff:eb:31:b1:eb:ef:
50:35:29:27:63:1b:34:57:c1:8f:e2:82:f4:1c:15:
77:11:b8:1a:d9:2f:a2:6c:dd:92:95:f0:97:90:a6:
04:54:97:6f:ab:45:c7:a3:13:14:14:db:b6:24:dc:
e7:af:7b:ee:b3:28:4a:2d:c2:41:99:f0:26:61:6b:
c9:e3:ef:ac:0c:06:9c:d1:ea:2b:a7:b3:9b:c4:f5:
03:9d:f0:29:dd:cf:a8:a8:eb:91:ea:81:93:51:41:
4f:a7:6a:3b:22:0c:d2:d6:72:cd:a8:03:4d:be:5b:
b1:20:7f:15:ef:a4:2b:bb:c7:2d:5f:29:e1:39:3b:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:61:F8:03:84:78:C3:9E:A4:49:7F:0C:9E:7F:0C:FB:98:DE:1B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SpRh-AOEeMOepEl_DJ5_DPuY3hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
84.32.42.0/24
84.32.76.0/23
84.32.240.0/24
84.32.243.0/24
88.216.17.0/24
88.216.36.0/24
88.216.40.0/24
88.216.43.0/24
88.216.98.0/24
88.216.132.0/23
88.216.190.0/24
88.216.214.0/24
88.216.228.0-88.216.247.255
88.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
26:82:f3:6c:a7:3e:56:94:3a:29:b9:ba:ac:af:36:2d:4a:00:
c8:32:7f:0e:83:18:ec:ed:b2:be:d6:f4:cf:3f:67:b3:80:74:
cb:bf:e6:03:01:60:dc:ef:ed:70:ec:09:6d:6a:19:a7:64:c1:
54:db:6b:c1:ac:30:10:b4:dc:15:dc:d6:73:9d:37:ec:a6:1f:
da:74:70:42:44:09:1a:56:88:f8:79:a7:59:8d:34:d5:d6:62:
d4:13:15:14:e3:e9:be:e1:80:3c:d3:10:00:52:8c:b0:bc:1b:
84:b1:9b:31:26:7d:e5:82:3f:1f:1f:be:24:00:ef:02:d4:29:
cb:ad:8b:05:53:74:c9:dc:0e:48:3a:69:f3:d1:b6:21:94:33:
51:a7:04:de:a9:ed:2f:dc:d5:9a:3f:9a:78:83:21:38:00:f9:
49:35:7e:cd:f6:d6:4a:ad:80:02:14:e2:d8:dd:57:03:0a:9c:
dc:32:85:0d:88:81:78:cf:e8:f6:42:4d:ec:bb:2d:e7:85:31:
9e:58:0f:08:83:bd:5c:de:4d:1f:68:c0:b3:2d:50:24:9d:33:
3c:fe:b5:f4:4b:e6:02:60:b2:d3:cd:26:bb:a0:c8:e5:61:2d:
35:29:65:a0:50:57:fb:67:76:64:ff:eb:c2:3e:d5:80:f1:80:
17:3e:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org