Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/V_DdjaXNmaDGVXN004pYDj_23AY.roa
File: V_DdjaXNmaDGVXN004pYDj_23AY.roa (raw, json)
Hash identifier: Vo13lbHX9TkshIuGuR3bBh/euehILwUmudWV8cGiLpA=
Subject key identifier: 57:F0:DD:8D:A5:CD:99:A0:C6:55:73:74:D3:8A:58:0E:3F:F6:DC:06
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01861C54E2DF5FE3BBCC5744C5E6F800EA82
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/V_DdjaXNmaDGVXN004pYDj_23AY.roa
Signing time: Sat 04 Feb 2023 12:09:30 +0000
ROA not before: Sat 04 Feb 2023 12:09:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 84.32.85.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.43.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1c:54:e2:df:5f:e3:bb:cc:57:44:c5:e6:f8:00:ea:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 4 12:09:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57f0dd8da5cd99a0c6557374d38a580e3ff6dc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:65:36:1e:45:fc:38:cb:df:bb:f2:85:51:10:
96:04:b8:c0:c7:1b:34:34:4c:ef:52:35:05:14:04:
6d:70:f8:ae:75:bc:8a:26:c6:2d:73:27:b8:f0:50:
ae:9e:28:29:9b:f0:df:5b:fe:27:58:7e:05:73:26:
e4:4e:9a:7a:b7:c8:99:c2:8d:7c:32:ec:a5:77:ab:
92:e4:d1:5a:b9:5c:70:1d:6f:ad:fb:3b:40:47:f2:
1a:8b:80:c6:62:35:ec:77:8f:21:19:0a:0a:5c:a3:
21:3c:cc:f1:e1:64:bf:c3:65:b8:6a:d6:24:35:ce:
93:7a:5c:85:d0:42:d9:db:fc:c0:db:79:1e:ce:a6:
83:8b:5c:53:76:90:9d:9d:6e:ee:05:a1:c0:cc:54:
29:34:3b:a2:eb:f5:e4:d0:0e:15:e6:48:a1:72:c4:
d4:e4:6b:a6:af:bf:5d:ef:76:eb:9f:5f:ef:c8:6d:
cd:ac:41:76:0d:aa:39:ef:1f:15:21:7f:3a:c2:64:
ce:2e:31:ca:8b:8b:74:d6:ae:db:fe:9d:18:a5:35:
de:5d:c8:c6:14:7b:24:ae:d8:d1:d9:16:d5:cb:8c:
af:72:89:d3:35:5b:dc:cc:ea:15:a5:74:99:bd:1c:
0c:a9:a0:80:1c:ac:46:30:f5:00:92:2e:15:fc:1c:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F0:DD:8D:A5:CD:99:A0:C6:55:73:74:D3:8A:58:0E:3F:F6:DC:06
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/V_DdjaXNmaDGVXN004pYDj_23AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.43.0/24
84.32.85.0/24
84.32.93.0/24
84.32.221.0/24
88.216.47.0/24
88.216.102.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9f:de:ba:00:07:09:fd:0d:1b:38:18:65:2e:48:b9:16:a3:
f6:b6:05:b4:fe:c3:68:76:50:c3:f5:e1:14:95:9d:26:75:96:
47:32:c8:70:72:29:7e:7c:4f:8d:f1:09:44:3d:c6:f9:bd:3c:
8b:94:1b:cf:72:fb:3a:01:31:b6:39:48:32:77:f4:0e:c6:7e:
f7:6c:7a:7c:72:05:32:4e:34:a2:04:31:69:b5:55:16:ba:8c:
67:66:50:ca:79:53:c0:8a:6f:a4:69:eb:51:60:5f:fd:34:2f:
d0:fe:14:38:76:1f:3f:2b:8b:14:c0:b9:79:44:26:34:0e:c8:
ab:a9:f5:2f:aa:9f:e6:6d:cc:17:e0:35:4e:82:68:cd:9d:3d:
87:b5:bc:a6:6a:86:8f:61:5d:ca:f1:d8:c9:04:c9:85:ed:81:
25:8e:92:e5:c4:d0:54:b6:e5:54:c9:32:0c:32:95:2e:11:ed:
31:ec:17:67:e6:e2:02:ec:2d:1e:4d:34:7c:40:54:d9:d3:5c:
88:5d:e2:32:f1:df:6c:0e:25:59:83:54:c2:c7:a6:e4:db:36:
83:e0:55:95:3a:48:80:8e:7f:5e:43:81:f5:2e:e1:1f:ce:6c:
99:a0:d3:43:e3:df:42:10:d0:8b:e0:18:f4:cc:69:a5:00:d0:
a6:50:0d:e4
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYYcVOLfX+O7zFdExeb4AOqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMjA0MTIwOTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2YwZGQ4ZGE1Y2Q5OWEwYzY1NTczNzRkMzhhNTgwZTNmZjZkYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGU2HkX8OMvfu/KFURCWBLjAxxs0
NEzvUjUFFARtcPiudbyKJsYtcye48FCunigpm/DfW/4nWH4FcybkTpp6t8iZwo18
Muyld6uS5NFauVxwHW+t+ztAR/Iai4DGYjXsd48hGQoKXKMhPMzx4WS/w2W4atYk
Nc6TelyF0ELZ2/zA23kezqaDi1xTdpCdnW7uBaHAzFQpNDui6/Xk0A4V5kihcsTU
5Gumr79d73brn1/vyG3NrEF2Dao57x8VIX86wmTOLjHKi4t01q7b/p0YpTXeXcjG
FHskrtjR2RbVy4yvconTNVvczOoVpXSZvRwMqaCAHKxGMPUAki4V/BzDvQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFFfw3Y2lzZmgxlVzdNOKWA4/9twGMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvVl9EZGphWE5tYURHVlhOMDA0cFlEal8yM0FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVCArAwQA
VCBVAwQAVCBdAwQAVCDdAwQAWNgvAwQAWNhmMA0GCSqGSIb3DQEBCwUAA4IBAQB7
n966AAcJ/Q0bOBhlLki5FqP2tgW0/sNodlDD9eEUlZ0mdZZHMshwcil+fE+N8QlE
Pcb5vTyLlBvPcvs6ATG2OUgyd/QOxn73bHp8cgUyTjSiBDFptVUWuoxnZlDKeVPA
im+kaetRYF/9NC/Q/hQ4dh8/K4sUwLl5RCY0DsirqfUvqp/mbcwX4DVOgmjNnT2H
tbymaoaPYV3K8djJBMmF7YEljpLlxNBUtuVUyTIMMpUuEe0x7Bdn5uIC7C0eTTR8
QFTZ01yIXeIy8d9sDiVZg1TCx6bk2zaD4FWVOkiAjn9eQ4H1LuEfzmyZoNND499C
ENCL4Bj0zGmlANCmUA3k
-----END CERTIFICATE-----
Generated at Mon Jul 31 07:51:22 2023 by rpki-client on console-fra.rpki-client.org