Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XWaJ1NhX--CJYrU-7-7bB-PDTck.roa
File: XWaJ1NhX--CJYrU-7-7bB-PDTck.roa (raw, json)
Hash identifier: Ff6d3jpmTUXe+7IEkhYHf892mE1r392OFxnjIUlzlmg=
Subject key identifier: 5D:66:89:D4:D8:57:FB:E0:89:62:B5:3E:EF:EE:DB:07:E3:C3:4D:C9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01864FAE09FE05557EA3B77372A274CDB59E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XWaJ1NhX--CJYrU-7-7bB-PDTck.roa
Signing time: Tue 14 Feb 2023 11:27:30 +0000
ROA not before: Tue 14 Feb 2023 11:27:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
84.32.172.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:ae:09:fe:05:55:7e:a3:b7:73:72:a2:74:cd:b5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 14 11:27:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d6689d4d857fbe08962b53eefeedb07e3c34dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:29:7f:6a:03:84:16:b5:3e:e2:c1:35:95:
7f:78:55:65:47:2c:45:14:72:28:36:4e:12:9b:aa:
fc:f5:e0:74:18:44:3e:73:ce:32:b2:1e:34:c3:99:
b5:37:cb:7a:69:47:b1:ef:6b:41:8a:a5:77:5a:df:
8a:41:4c:f1:4c:cf:a1:8f:1c:31:00:32:0f:fa:ff:
f7:97:0e:1c:9f:01:aa:8e:f1:64:88:02:ba:ab:b7:
02:d0:46:99:7d:b6:9b:9c:23:8f:a9:86:d8:36:8c:
52:7a:d3:68:0b:4c:07:c4:fe:4c:70:78:48:c4:d8:
0b:1c:97:94:71:17:1d:b5:fd:3f:18:7d:56:db:21:
c4:43:01:ac:20:24:a4:46:b4:92:db:29:63:ef:b5:
61:24:76:6c:9f:b6:f0:4d:65:0b:cb:7a:94:a2:c0:
2c:33:64:84:dc:ff:3f:8e:95:df:ea:b7:23:bc:dc:
a7:cf:1c:75:e8:b5:65:fa:29:ff:0b:33:37:f2:f9:
c3:ea:75:dd:48:86:ef:20:4f:58:bd:96:4d:ff:4a:
bf:23:05:9c:a8:40:77:5a:80:da:ac:ce:59:fa:46:
17:23:b6:84:d1:22:53:2e:c8:df:2a:f4:e8:7c:3b:
ce:2c:55:6e:bb:9e:13:dd:41:6c:da:15:48:f4:c4:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:66:89:D4:D8:57:FB:E0:89:62:B5:3E:EF:EE:DB:07:E3:C3:4D:C9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XWaJ1NhX--CJYrU-7-7bB-PDTck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.64.0/24
84.32.148.0/23
84.32.152.0-84.32.154.255
84.32.156.0/22
84.32.172.0/24
84.32.175.0/24
88.216.20.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.111.0/24
88.216.132.0/24
88.216.185.0/24
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:74:8f:29:32:1c:d7:15:bd:0e:a4:89:a4:fa:28:f3:e3:8d:
06:9c:3d:2b:d6:57:5f:b5:09:bc:c5:bb:61:f3:88:fd:ff:97:
50:a9:24:0e:b6:25:27:d1:be:d5:bf:30:ee:6d:00:d0:42:a8:
e8:c8:90:3a:3f:e8:0b:5d:90:45:41:21:b3:f5:4d:07:a5:89:
85:ec:c7:b0:97:70:a1:b6:75:88:66:e8:6e:47:8a:ef:65:05:
90:48:e4:94:a7:8c:33:ea:0f:7d:e4:91:82:a7:22:dc:83:ee:
e9:d7:d7:ec:4d:0f:61:53:28:a0:3a:6b:be:ba:0f:ca:03:16:
17:e1:c7:01:7c:9c:f4:89:31:0e:b5:07:7b:4a:90:69:65:43:
10:a8:59:a6:07:68:94:5c:cc:54:b9:f5:c8:33:bc:18:93:90:
51:bd:51:1d:18:14:3b:e2:8d:77:47:99:2a:21:3b:1a:36:c6:
11:c4:62:84:41:14:b7:06:94:17:35:01:b2:86:db:c3:54:c1:
80:16:42:53:67:a3:98:af:1c:47:8b:ab:e2:d0:73:11:f8:94:
07:f3:49:55:d3:36:13:4c:94:bb:b9:f2:6b:c2:97:72:e4:05:
0e:28:a2:4e:c2:55:60:d0:d6:11:a8:2c:8d:28:d8:da:9a:4a:
aa:6e:eb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:30 2023 by rpki-client on console-ams.rpki-client.org