Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UAzBEJMY-DnVQk5xiYQOvAkJs9g.roa
File: UAzBEJMY-DnVQk5xiYQOvAkJs9g.roa (raw, json)
Hash identifier: Rml1v5Q0z8Db/eOTjFM6Lxg8pcsjUkc9qYiA+79JdSE=
Subject key identifier: 50:0C:C1:10:93:18:F8:39:D5:42:4E:71:89:84:0E:BC:09:09:B3:D8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187BA3449946C76ECEAA0FF0D4D661D7846
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UAzBEJMY-DnVQk5xiYQOvAkJs9g.roa
Signing time: Tue 25 Apr 2023 20:56:41 +0000
ROA not before: Tue 25 Apr 2023 20:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 84.32.52.0/22 maxlen: 24
88.216.185.0/24 maxlen: 24
88.216.212.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
84.32.6.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.252.0/22 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Jun 2023 12:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:34:49:94:6c:76:ec:ea:a0:ff:0d:4d:66:1d:78:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 25 20:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=500cc1109318f839d5424e7189840ebc0909b3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:46:93:ae:eb:42:20:1f:1a:36:b4:33:fb:
38:a5:cc:66:d5:ae:20:ee:37:8b:7a:b5:38:bf:0e:
14:a8:41:ce:4c:f0:30:03:9e:a8:2a:41:f9:ee:fe:
f1:81:f0:6c:b0:78:08:23:c3:3d:bf:c5:a4:a4:f0:
3a:9c:ad:2d:79:c2:23:c8:ca:e9:9a:c8:ea:50:82:
65:aa:74:44:88:21:e0:09:79:37:8f:67:12:89:dd:
84:66:4f:f2:3d:9b:25:e7:e7:18:08:3e:92:8d:23:
79:89:bb:5c:a9:41:09:d4:e1:25:00:f0:a1:82:1a:
e3:a4:45:be:04:ff:3b:6b:ab:0e:b8:fb:17:2f:ca:
e2:b7:e8:c0:7b:81:a7:c2:4c:ce:8c:52:88:95:31:
0b:2c:ac:7e:03:36:78:d3:c5:ed:bb:64:02:c0:21:
df:32:95:90:85:db:e6:3f:5e:60:a3:8c:5c:ca:c6:
31:7a:27:00:79:f6:b8:7a:56:3c:d6:b9:fa:15:9d:
57:3a:44:63:93:5c:18:cd:88:54:6a:94:65:c9:45:
ff:9d:99:d4:49:71:a9:2a:ba:f1:37:d8:cd:48:e0:
ce:8b:45:cd:33:ee:2e:18:0f:c2:45:85:6f:da:10:
ab:82:e8:85:62:7f:3a:e1:a3:16:ba:e3:ed:34:55:
82:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0C:C1:10:93:18:F8:39:D5:42:4E:71:89:84:0E:BC:09:09:B3:D8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UAzBEJMY-DnVQk5xiYQOvAkJs9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
84.32.42.0/24
84.32.52.0/22
88.216.20.0/23
88.216.40.0/24
88.216.43.0/24
88.216.98.0/24
88.216.103.0/24
88.216.185.0/24
88.216.212.0/22
88.216.240.0/21
88.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:bc:48:bd:03:5b:d0:66:a2:ce:eb:c4:41:d3:25:54:39:0c:
f3:90:57:e7:b3:3f:70:18:8f:9d:b8:3b:de:2b:3c:34:e5:a2:
61:8f:af:16:56:9f:ab:bf:46:f0:57:17:f7:71:cc:bb:21:88:
1f:1a:8c:4d:a5:4a:64:4e:ab:13:1b:08:cb:98:d4:a4:86:86:
e4:87:a1:26:f3:0b:1b:bb:fc:c1:e3:a1:0b:d0:78:82:21:22:
8e:97:59:8a:2d:81:85:35:38:f8:f8:2a:e4:7b:6e:4e:a7:e2:
fc:ec:82:80:cc:cb:29:1b:34:7b:17:4e:ac:42:35:4e:fc:1a:
cb:13:8a:71:0c:f0:e2:b2:19:83:3b:3c:94:88:ef:89:9b:55:
db:fd:38:14:3c:97:0e:7c:3c:d9:d6:03:98:d8:2d:51:1e:48:
bb:5c:b3:ae:26:ff:d3:af:a3:23:bc:ab:5e:4e:da:d9:1a:b1:
a3:4b:5c:68:18:e6:88:36:3f:f9:8c:0e:32:56:44:2e:27:0c:
d0:9b:16:ea:17:83:22:34:a1:32:e7:e3:0d:c1:a8:81:aa:27:
c5:08:7c:ed:c8:d4:ad:45:2d:96:e8:da:0f:19:eb:e5:82:9d:
a1:65:e7:ec:aa:ac:c6:be:df:65:61:96:01:83:62:ba:77:99:
5b:0e:19:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org