Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/X9LdimvL9BhoTvSKCa0ykVI6850.roa
File: X9LdimvL9BhoTvSKCa0ykVI6850.roa (raw, json)
Hash identifier: 7h8QwekNF4PFZxMAtzr667ltS8vPcRG1nDsflzJfsaA=
Subject key identifier: 5F:D2:DD:8A:6B:CB:F4:18:68:4E:F4:8A:09:AD:32:91:52:3A:F3:9D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01881DF5852DA8B67BF9D3E91F5729111DCD
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/X9LdimvL9BhoTvSKCa0ykVI6850.roa
Signing time: Mon 15 May 2023 05:50:09 +0000
ROA not before: Mon 15 May 2023 05:50:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 84.32.58.0/24 maxlen: 24
88.216.67.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1d:f5:85:2d:a8:b6:7b:f9:d3:e9:1f:57:29:11:1d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 15 05:50:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fd2dd8a6bcbf418684ef48a09ad3291523af39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:71:7e:0e:9e:23:5d:b6:96:63:08:65:1a:
f8:24:d2:91:83:bf:33:11:a8:03:9c:dd:d7:ca:37:
e7:b9:4a:c1:c9:a9:85:37:30:f4:05:74:af:70:5d:
e2:08:02:5e:8a:0b:b7:f6:ff:e3:a8:a8:4d:d8:1d:
dd:56:72:17:0c:8a:a4:8f:5a:2a:70:c2:06:a5:7f:
a4:1f:b3:7b:a0:44:81:c0:0b:d7:ca:cf:a1:60:09:
a0:43:78:a4:dc:ac:42:ab:8c:21:b4:2d:bd:b8:0e:
68:20:7b:bf:cf:0b:91:13:57:8c:05:c4:8b:05:6a:
7a:80:6a:ea:42:14:70:5d:9a:2f:3a:a2:10:96:fa:
54:f4:97:4a:37:2a:b8:d5:aa:2b:6f:44:7c:49:c2:
e3:e4:38:51:97:4c:98:a9:2b:3b:a6:63:a3:35:67:
4b:b8:a4:42:53:13:5c:02:71:5c:e8:32:fe:4d:17:
d5:6a:8b:1b:53:bb:65:95:53:f3:5b:a5:c9:f4:2a:
6d:64:51:57:c3:8a:f8:df:2b:6b:be:84:94:f0:ff:
d5:72:f1:cc:ed:4d:69:5b:f5:37:94:1d:01:a6:7c:
4a:ae:31:51:ad:e1:ab:9b:66:08:a5:52:12:87:aa:
76:ce:56:8b:58:44:8e:34:99:0c:5c:62:c1:b6:0b:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D2:DD:8A:6B:CB:F4:18:68:4E:F4:8A:09:AD:32:91:52:3A:F3:9D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/X9LdimvL9BhoTvSKCa0ykVI6850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.25.0/24
84.32.28.0/24
84.32.49.0/24
84.32.51.0/24
84.32.58.0/24
84.32.219.0/24
84.32.226.0/24
84.32.234.0/24
88.216.66.0/23
88.216.222.0/23
Signature Algorithm: sha256WithRSAEncryption
77:25:27:5b:9f:7b:c6:5a:b4:06:b7:a9:01:26:f4:a2:ef:8a:
7a:30:f0:ba:45:af:79:09:d7:86:99:c2:fb:ed:b6:8b:5a:c5:
47:58:4c:77:ee:94:a3:b9:b1:a6:17:4b:e1:2d:8f:a9:88:4b:
52:0c:22:3d:fa:8e:58:c8:9f:dd:ad:77:7f:a8:c6:a0:2a:7a:
ed:26:3c:1c:f0:83:b5:0d:88:8a:44:d7:05:03:f0:31:4b:d6:
4c:06:c4:d7:3e:a2:0e:58:7f:50:fa:08:ce:6b:6c:dc:97:0e:
bc:29:f6:68:24:79:72:e0:76:8d:f8:3d:e5:6e:89:d4:33:b8:
4e:72:3a:c9:60:19:3a:3c:34:fc:c7:32:34:51:cc:8f:1e:f5:
95:de:f2:5d:8e:b0:76:11:64:46:b2:a7:fa:13:f0:a8:6f:bc:
79:b1:1c:7a:5f:f3:b5:97:54:fd:14:4c:1d:9d:8f:56:92:66:
34:9a:8b:70:c7:4f:f5:6e:d6:6c:2b:b8:73:d5:33:2b:c3:67:
32:5a:19:ea:b2:16:e0:9b:06:7c:27:c5:10:5e:65:53:00:4a:
48:f7:ee:dc:47:a1:ab:1f:53:ba:47:01:60:35:f8:4a:04:08:
90:b0:d4:64:f3:a4:af:41:a9:44:ff:17:ee:4c:d1:0f:0e:22:
93:b4:8c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org