Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/U9sGabIiX6GFw9X6RKkZGhfhPRc.roa
File: U9sGabIiX6GFw9X6RKkZGhfhPRc.roa (raw, json)
Hash identifier: kLFIiV0M5jpeYPWGOmG1+NiAz0LjmPbHWL9gtupb9ao=
Subject key identifier: 53:DB:06:69:B2:22:5F:A1:85:C3:D5:FA:44:A9:19:1A:17:E1:3D:17
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CAF93A6727E512BECF710ACF5BD0A517B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/U9sGabIiX6GFw9X6RKkZGhfhPRc.roa
Signing time: Thu 28 Dec 2023 08:38:58 +0000
ROA not before: Thu 28 Dec 2023 08:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.184.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
84.32.214.0/23 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:93:a6:72:7e:51:2b:ec:f7:10:ac:f5:bd:0a:51:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 28 08:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53db0669b2225fa185c3d5fa44a9191a17e13d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:17:d2:8a:da:a9:6e:1b:68:91:b6:05:39:
3b:ea:1e:65:56:bf:d7:f1:4d:74:74:b2:5b:45:34:
5e:b0:ee:35:3c:88:99:cf:33:44:21:e7:19:72:36:
37:80:9f:95:04:ee:59:e1:6a:be:f6:de:e1:94:9b:
48:05:78:b3:64:63:32:64:c9:d7:66:e4:b6:79:3b:
1d:52:13:c3:62:f3:26:0f:8a:03:75:bb:be:55:6d:
b2:42:99:66:dc:ab:00:83:a6:cd:7d:db:a0:41:3b:
73:9b:0b:b5:fb:ca:63:86:34:02:6e:4d:26:1e:22:
c0:b0:dc:be:26:74:75:6f:10:6a:37:ea:d6:57:6e:
f2:54:a4:5b:78:64:c4:c3:be:5e:a9:ff:3d:e0:b2:
49:ad:0a:1b:67:31:e9:88:df:8a:24:8d:d0:79:62:
e8:2d:47:4d:b7:b8:aa:9d:f0:05:b2:1c:28:c7:d0:
f3:d8:1b:78:89:ec:ab:81:bf:ed:6d:2a:26:44:29:
6e:15:91:dc:c6:f4:b3:fb:fd:dd:19:de:80:3d:77:
3d:30:e4:6b:e8:04:e6:2b:e9:8e:df:e0:be:0c:ab:
3b:f8:df:38:9e:fe:48:78:94:b1:39:43:ca:c7:4d:
d1:c1:21:a8:02:5d:1f:2f:14:5c:1f:29:2f:8d:7a:
e5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DB:06:69:B2:22:5F:A1:85:C3:D5:FA:44:A9:19:1A:17:E1:3D:17
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/U9sGabIiX6GFw9X6RKkZGhfhPRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.178.0/23
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.184.0/24
88.216.187.0-88.216.191.255
88.216.197.0-88.216.198.255
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
61:74:ec:d1:3f:19:24:b8:50:47:a6:ce:98:91:84:2e:12:5b:
49:52:0f:9b:de:e5:60:e9:08:36:8a:ab:69:a5:c4:64:ff:52:
e3:f1:6d:f9:0f:1f:55:58:03:1f:20:58:0b:3c:ab:3e:aa:86:
78:eb:2f:e0:4c:04:81:a2:4e:07:96:e8:56:6c:30:ff:53:0b:
ab:d7:c5:32:6d:57:4c:72:e6:95:0c:88:f7:da:d9:46:d6:e7:
e4:0b:a8:eb:dc:55:cd:29:e5:c1:63:1a:94:98:c8:93:0d:94:
20:d7:75:0e:7a:e0:d2:72:1a:ec:58:ff:b8:cb:88:dd:02:e2:
b6:46:b2:ec:08:55:43:bd:c0:ef:fb:e7:d0:bc:52:32:cc:b6:
56:82:ff:8c:32:c5:a2:b3:6d:4f:75:c4:d4:34:76:75:56:e1:
7e:70:fd:3f:bf:69:79:ce:4a:a4:e5:d4:7b:4a:45:bc:29:9b:
46:8e:c0:6b:74:8b:d9:64:11:35:cb:6e:76:64:b7:fc:c7:10:
40:23:8a:8e:03:57:e1:91:01:2b:dc:be:22:6d:b2:91:c8:8e:
cc:8f:5b:36:c7:3d:27:95:ee:5c:6f:85:d8:bb:14:6d:55:13:
f6:e8:76:1d:77:14:98:bf:8e:48:85:15:07:31:32:39:3b:35:
25:7e:59:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org