Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VCGjjAG2s9Ltqqb7XIyWs9eTMeg.roa
File: VCGjjAG2s9Ltqqb7XIyWs9eTMeg.roa (raw, json)
Hash identifier: VY6du/iJUlzbxmgU/SI7wUfqQ0NRmBjh46e6mUgTCkE=
Subject key identifier: 54:21:A3:8C:01:B6:B3:D2:ED:AA:A6:FB:5C:8C:96:B3:D7:93:31:E8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018D8C8C8503370698594B19EAF12399F2D3
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VCGjjAG2s9Ltqqb7XIyWs9eTMeg.roa
Signing time: Fri 09 Feb 2024 06:27:15 +0000
ROA not before: Fri 09 Feb 2024 06:27:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204770
IP address blocks: 84.32.34.0/24 maxlen: 24
84.32.128.0/22 maxlen: 32
88.216.198.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 05:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8c:8c:85:03:37:06:98:59:4b:19:ea:f1:23:99:f2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 9 06:27:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5421a38c01b6b3d2edaaa6fb5c8c96b3d79331e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a0:03:a9:6c:a0:bc:19:71:c5:7f:97:e3:68:
c0:77:fa:28:92:2f:8e:59:e4:22:e2:65:9c:af:40:
48:ec:50:79:e7:f9:19:44:28:c5:04:af:01:37:8c:
3c:6c:c8:1a:78:3b:27:4c:bd:ef:ec:bb:f8:b4:cd:
72:bc:0c:47:58:f4:33:03:58:23:f0:3e:4c:12:01:
fa:36:06:bf:94:e0:36:01:85:c8:fe:30:47:24:b6:
01:77:fd:2f:56:eb:29:89:5d:b3:15:40:8c:7e:a2:
57:e4:b6:dc:71:27:f2:66:86:10:b8:f3:1f:fb:08:
58:e2:57:d0:47:d4:1f:f6:e4:d1:4a:a4:e4:f6:b0:
9a:37:b7:e2:c6:2d:62:80:00:b2:f8:ae:48:b5:15:
f8:61:ba:8f:88:3d:09:41:9b:9b:96:3f:fb:ad:5f:
7c:17:3b:15:75:8e:f4:4b:23:dd:41:18:ae:93:de:
8a:c4:0e:8d:47:fc:48:20:4e:e0:c3:14:96:be:f1:
25:5f:99:0a:5f:da:67:d1:df:32:3e:93:9e:13:8c:
f6:8e:48:1f:60:83:3b:82:68:e0:7d:24:3b:f2:0b:
5c:6b:94:76:c7:3f:7e:8c:a6:f5:99:c9:c0:c5:31:
e5:9c:98:7d:ed:3f:9e:12:c6:19:79:ca:33:56:bb:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:21:A3:8C:01:B6:B3:D2:ED:AA:A6:FB:5C:8C:96:B3:D7:93:31:E8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VCGjjAG2s9Ltqqb7XIyWs9eTMeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.34.0/24
84.32.128.0/22
88.216.198.0/24
88.216.210.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b0:33:91:b6:d2:b8:bc:18:23:79:80:c9:47:08:83:66:f0:
07:08:1a:6a:54:3b:9b:8c:ca:68:22:ab:33:73:c9:e7:e9:dd:
7f:dd:ad:14:38:41:d6:6d:d1:92:1e:50:a5:54:40:36:96:59:
f4:d5:5f:a2:32:ed:04:c1:1b:c7:41:ef:a1:5b:28:73:70:c9:
1c:d0:75:dd:39:8e:1b:97:9d:c9:82:a9:85:80:79:5a:0c:c5:
7a:b3:ed:96:2c:0b:83:0b:68:25:56:08:07:b5:8b:df:07:3e:
dd:ae:ed:cd:5e:1e:ca:10:af:89:e7:c0:4a:51:bf:3e:5b:6d:
4c:97:7f:f4:7a:08:25:b4:85:55:38:d3:50:dc:24:ce:9e:0f:
24:65:4e:bf:47:22:a4:e9:72:d2:97:ad:ae:d7:59:20:f5:e0:
a7:99:32:fc:0a:99:15:fa:66:35:54:6b:46:b5:a0:87:07:4d:
b5:f1:00:27:76:75:ce:84:86:72:39:e5:bd:a1:d9:b4:f9:26:
5d:b2:6c:15:85:2b:f0:d5:49:09:ca:04:97:65:dc:e5:bc:69:
cc:97:e7:8a:c0:5e:3a:00:9b:c4:48:7f:05:fa:5d:5c:d7:3b:
c7:41:af:36:fb:0f:34:7d:88:c2:a5:95:aa:76:8b:58:35:63:
34:26:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org