Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Wuljjxu0Gkyh5gyq-hk3mqN6ayI.roa
File: Wuljjxu0Gkyh5gyq-hk3mqN6ayI.roa (raw, json)
Hash identifier: b3dX/EV2El7jrmu1fdJo/SglIBg+5yWR6CpS2gKtJQs=
Subject key identifier: 5A:E9:63:8F:1B:B4:1A:4C:A1:E6:0C:AA:FA:19:37:9A:A3:7A:6B:22
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186C7164F0456632A8853F9E78A1F4D7A99
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Wuljjxu0Gkyh5gyq-hk3mqN6ayI.roa
Signing time: Thu 09 Mar 2023 15:56:13 +0000
ROA not before: Thu 09 Mar 2023 15:56:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.184.0/22 maxlen: 24
88.216.189.0/24 maxlen: 24
84.32.188.0/22 maxlen: 22
88.216.93.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
88.216.130.0/23 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:16:4f:04:56:63:2a:88:53:f9:e7:8a:1f:4d:7a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 9 15:56:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ae9638f1bb41a4ca1e60caafa19379aa37a6b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:55:59:55:1b:f6:60:01:50:db:02:ba:ec:
a0:42:b0:bb:6b:32:6f:c2:d8:43:e2:b7:e2:17:59:
86:b3:63:d4:7a:07:bf:9e:7a:7b:6e:c5:fa:af:74:
bb:8b:7f:67:aa:cc:84:07:6b:ef:8f:9d:89:f7:92:
3a:3a:ee:2f:e4:17:52:f1:39:7f:56:07:74:df:46:
57:d4:de:59:d7:96:2e:60:8b:84:f2:db:cf:71:81:
ad:7a:ca:52:0c:23:a3:21:a6:98:ee:2e:94:24:03:
39:89:0d:45:f7:a3:fd:cd:d6:cf:c4:5f:2d:25:ed:
ff:8d:a4:2b:e0:ef:86:50:e7:83:18:a4:ba:fa:a1:
32:f7:47:88:26:ac:75:fb:55:51:46:4f:e3:9c:1f:
89:30:59:24:d4:31:23:58:c4:4a:3a:1a:f2:77:eb:
56:da:ca:e9:5d:a3:77:54:b6:c4:ea:42:bc:94:a9:
23:4c:ab:97:8b:0e:d7:f2:fe:a3:42:e2:3c:c6:b9:
70:f3:b4:35:e2:5c:b6:28:a9:d5:7c:27:71:cc:be:
2b:ca:3e:8a:04:ff:87:d3:9b:f7:18:20:cc:b4:86:
92:d0:f3:7f:cd:9e:32:a6:65:11:67:92:28:5e:da:
39:e0:64:7b:10:67:a3:c8:d8:7c:2d:2b:35:35:77:
d4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E9:63:8F:1B:B4:1A:4C:A1:E6:0C:AA:FA:19:37:9A:A3:7A:6B:22
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Wuljjxu0Gkyh5gyq-hk3mqN6ayI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.108.0/23
84.32.148.0/22
84.32.184.0/21
84.32.250.0/24
88.216.93.0/24
88.216.130.0/23
88.216.189.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c3:68:98:a9:3b:23:94:a0:88:82:d6:36:3a:c5:75:f1:11:
11:aa:85:d6:dc:5f:5e:24:15:d7:cb:3e:4c:08:0f:f5:23:c7:
25:8b:16:4f:76:fc:98:2c:4d:f8:c9:41:d0:0b:1d:b0:cd:96:
db:d1:f4:8a:9b:fb:45:36:d2:a0:88:13:0e:23:7a:41:2b:27:
3a:43:79:b3:41:d3:90:53:b6:1a:96:dc:54:18:5f:60:14:d3:
c0:69:b0:66:5a:96:d6:28:79:c9:4b:59:da:e2:cc:b1:27:ad:
be:17:67:23:8b:94:4f:60:b5:6d:21:31:82:54:e8:0a:b4:cd:
da:53:02:ab:90:49:0e:b5:32:cd:12:33:a9:0d:9a:df:c4:2e:
97:e1:20:b2:10:a6:a1:0e:31:00:ba:99:8a:b2:72:08:58:c3:
94:1d:92:13:7f:46:1e:04:12:41:f8:fc:81:ff:a1:3b:34:43:
6c:6d:1f:f4:30:ed:22:14:a7:7d:24:59:2c:b0:04:a3:55:41:
e3:10:2c:b6:72:84:cf:05:f3:40:2c:04:62:9c:f3:a2:51:41:
5f:9c:dd:c4:49:fc:c8:2b:5c:3b:3d:0f:31:f9:c2:9e:89:62:
b2:f5:64:aa:21:7a:32:99:08:88:37:94:28:f8:06:1f:42:14:
ce:5d:ee:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org