Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UFhlFqfYLxX5foeF7jclJqSSucE.roa
File: UFhlFqfYLxX5foeF7jclJqSSucE.roa (raw, json)
Hash identifier: PoEzqwmityhjNBQE8WO7R6XGYm3WgQAONzBpU6Ejw9Y=
Subject key identifier: 50:58:65:16:A7:D8:2F:15:F9:7E:87:85:EE:37:25:26:A4:92:B9:C1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFD2B18AF1102243B92FA23DD818D4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UFhlFqfYLxX5foeF7jclJqSSucE.roa
Signing time: Sun 01 Jan 2023 18:54:54 +0000
ROA not before: Sun 01 Jan 2023 18:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 88.216.199.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d2:b1:8a:f1:10:22:43:b9:2f:a2:3d:d8:18:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50586516a7d82f15f97e8785ee372526a492b9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:0a:0e:51:c9:88:8c:23:3c:31:fd:7b:1f:
dd:5b:73:ce:a5:f7:3e:4f:17:98:0d:0d:3b:d0:26:
e7:61:bd:83:6f:af:77:4c:68:8c:cc:34:e6:7a:bd:
2a:06:fe:de:76:4f:df:47:07:35:82:eb:8f:b4:ab:
22:64:8d:e1:b6:5a:d5:56:6a:d4:d1:72:cb:7b:a0:
02:7c:85:fd:0d:7f:c7:c5:d4:9c:13:5b:c9:06:32:
a9:37:f4:01:8d:66:9f:76:bd:73:11:83:ac:c2:8a:
9a:98:d3:6d:32:1f:63:da:09:8a:25:a6:58:bd:d3:
e2:96:30:1d:93:74:0d:40:41:ce:55:c7:f4:23:63:
dd:6a:42:3b:7c:06:eb:68:30:48:5a:a5:89:81:b6:
48:25:7e:ef:e3:51:b2:c4:cb:57:60:13:90:ab:dd:
64:52:90:e0:7d:7d:b5:11:9a:df:26:b7:5a:74:07:
b8:73:e3:3d:fe:bb:4c:dd:a4:52:4f:86:65:c7:67:
3b:94:83:11:a0:08:91:63:6c:c7:90:9d:e9:b3:8e:
9e:71:98:c0:75:a6:ea:30:77:11:50:fa:ed:c7:38:
b5:66:ae:0c:ea:c8:cb:c2:d3:1e:0d:b8:a5:bc:59:
ca:7b:9c:16:87:fd:7b:9b:2c:83:84:84:bb:1d:f1:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:58:65:16:A7:D8:2F:15:F9:7E:87:85:EE:37:25:26:A4:92:B9:C1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UFhlFqfYLxX5foeF7jclJqSSucE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.48.0/24
84.32.50.0/24
84.32.58.0/24
84.32.71.0/24
84.32.88.0/24
84.32.93.0/24
84.32.108.0/24
84.32.150.0/23
84.32.177.0/24
84.32.218.0/24
84.32.226.0/24
84.32.239.0/24
84.32.245.0/24
88.216.3.0/24
88.216.21.0-88.216.22.255
88.216.32.0/24
88.216.46.0/23
88.216.92.0/24
88.216.134.0/24
88.216.199.0/24
88.216.210.0/23
Signature Algorithm: sha256WithRSAEncryption
93:f7:bf:df:9d:f6:57:a5:95:cf:cc:c0:7a:51:8c:02:bb:0d:
3d:b1:9f:ce:b6:1d:00:d0:18:7a:48:49:36:a6:6d:48:84:30:
ba:e6:75:2b:a7:fb:0b:70:9a:9d:d5:a2:ba:27:bb:42:b9:a1:
4a:3f:3e:49:ed:16:16:3b:78:10:c1:1a:1d:6e:fe:90:c1:96:
34:ad:e2:4d:16:7f:d7:cc:38:b8:d8:28:e3:c1:48:f2:5a:2c:
e8:60:d5:3c:6a:ed:25:cb:3b:c0:80:46:61:e4:fc:d8:01:15:
fe:fe:89:1d:05:e7:d1:70:21:26:14:92:a1:ac:0a:c3:f2:03:
50:f0:40:c2:2c:88:e1:c1:2f:63:77:f9:6e:cb:69:18:03:bb:
c1:bf:c0:30:9b:4d:41:a4:46:89:e9:cc:c1:e4:40:32:f6:94:
d9:ab:22:c1:63:f1:2f:f9:8d:c3:47:22:f2:88:2f:36:df:c7:
c2:9b:6a:9c:05:3d:ae:7b:40:12:b5:15:6f:ff:4f:13:37:a0:
4e:44:60:bc:4f:c3:f0:9d:6a:a3:9d:bf:71:e1:c6:79:5a:d6:
7a:bc:44:c6:6a:8c:42:54:16:6f:9e:02:20:7b:43:2a:97:ac:
b6:5b:fd:fc:08:da:7c:f8:6a:b2:e2:26:86:10:25:e6:8f:f9:
49:99:b4:49
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAYVur9KxivEQIkO5L6I92BjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTAxMTg1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDU4NjUxNmE3ZDgyZjE1Zjk3ZTg3ODVlZTM3MjUyNmE0OTJiOWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaoKDlHJiIwjPDH9ex/dW3POpfc+
TxeYDQ070CbnYb2Db693TGiMzDTmer0qBv7edk/fRwc1guuPtKsiZI3htlrVVmrU
0XLLe6ACfIX9DX/HxdScE1vJBjKpN/QBjWafdr1zEYOswoqamNNtMh9j2gmKJaZY
vdPiljAdk3QNQEHOVcf0I2PdakI7fAbraDBIWqWJgbZIJX7v41GyxMtXYBOQq91k
UpDgfX21EZrfJrdadAe4c+M9/rtM3aRST4Zlx2c7lIMRoAiRY2zHkJ3ps46ecZjA
dabqMHcRUPrtxzi1Zq4M6sjLwtMeDbilvFnKe5wWh/17myyDhIS7HfGSkwIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFFBYZRan2C8V+X6Hhe43JSakkrnBMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvVUZobEZxZllMeFg1Zm9lRjdqY2xKcVNTdWNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBABU
IAgDBABUIAoDBABUIDADBABUIDIDBABUIDoDBABUIEcDBABUIFgDBABUIF0DBABU
IGwDBAFUIJYDBABUILEDBABUINoDBABUIOIDBABUIO8DBABUIPUDBABY2AMwDAME
AFjYFQMEAFjYFgMEAFjYIAMEAVjYLgMEAFjYXAMEAFjYhgMEAFjYxwMEAVjY0jAN
BgkqhkiG9w0BAQsFAAOCAQEAk/e/3532V6WVz8zAelGMArsNPbGfzrYdANAYekhJ
NqZtSIQwuuZ1K6f7C3CandWiuie7QrmhSj8+Se0WFjt4EMEaHW7+kMGWNK3iTRZ/
18w4uNgo48FI8los6GDVPGrtJcs7wIBGYeT82AEV/v6JHQXn0XAhJhSSoawKw/ID
UPBAwiyI4cEvY3f5bstpGAO7wb/AMJtNQaRGienMweRAMvaU2asiwWPxL/mNw0ci
8ogvNt/HwptqnAU9rntAErUVb/9PEzegTkRgvE/D8J1qo52/ceHGeVrWerxExmqM
QlQWb54CIHtDKpestlv9/AjafPhqsuImhhAl5o/5SZm0SQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:30 2023 by rpki-client on console-ams.rpki-client.org