Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XsnX8bTrgRsH-an5YemgCEbjKsM.roa
File: XsnX8bTrgRsH-an5YemgCEbjKsM.roa (raw, json)
Hash identifier: lMUS+DvSDuyAYZDpkX2a2ocnPz5KPwo6Zyrpk9u7y9s=
Subject key identifier: 5E:C9:D7:F1:B4:EB:81:1B:07:F9:A9:F9:61:E9:A0:08:46:E3:2A:C3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFC255E2EB147F8BA16CF1381B9919
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XsnX8bTrgRsH-an5YemgCEbjKsM.roa
Signing time: Sun 01 Jan 2023 18:54:50 +0000
ROA not before: Sun 01 Jan 2023 18:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.56.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.105.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.230.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:c2:55:e2:eb:14:7f:8b:a1:6c:f1:38:1b:99:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ec9d7f1b4eb811b07f9a9f961e9a00846e32ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:84:1f:91:eb:db:b0:c2:60:ad:79:56:cb:
67:5a:86:0b:c4:a1:99:ae:ff:bf:16:83:cc:25:6c:
d5:5e:67:a1:38:f0:3c:f8:34:83:ef:a4:fb:1d:2d:
b2:79:2c:c1:ad:8d:e6:a1:6e:ae:76:4d:c0:a7:3d:
86:1f:48:09:96:10:08:2e:27:5c:7e:a1:93:e8:36:
84:6e:13:28:e5:2d:09:b3:d2:03:76:70:9a:f5:88:
48:51:b3:76:3a:b8:e8:ce:83:34:34:d5:ab:ac:24:
09:29:58:e2:18:78:6b:c2:91:42:01:0b:b0:aa:7b:
bb:e2:d5:dc:85:ff:1e:76:e7:bf:b8:b2:16:45:e9:
86:3b:69:e6:85:84:1b:b3:df:a1:21:e8:84:c0:f4:
cd:fa:8f:e1:99:96:fb:56:e9:eb:07:32:68:f4:f3:
42:16:87:0e:73:2b:f8:00:7f:71:2a:eb:59:8c:8a:
63:de:d1:05:1c:a4:b9:fe:8f:74:a7:2d:e2:8d:1d:
1b:e6:b9:9f:a1:66:d7:b7:7c:23:e9:5b:84:51:3c:
db:2e:b7:0d:82:78:e8:c5:ae:00:64:e3:9e:34:61:
0a:60:09:82:d1:1d:b5:51:df:d7:7e:1e:84:81:ee:
9a:4b:84:d2:15:33:d2:e9:ee:93:35:bc:8e:a6:38:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C9:D7:F1:B4:EB:81:1B:07:F9:A9:F9:61:E9:A0:08:46:E3:2A:C3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/XsnX8bTrgRsH-an5YemgCEbjKsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.56.0/24
84.32.63.0/24
84.32.95.0/24
84.32.104.0/23
84.32.107.0/24
84.32.230.0/24
88.216.1.0-88.216.2.255
88.216.34.0/24
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5c:10:b2:19:7a:8c:d4:2b:37:d5:ec:1b:43:a8:64:33:90:
e5:93:98:17:79:31:ab:83:92:50:35:eb:49:d1:1e:39:35:5a:
08:a4:46:21:da:b7:03:f4:38:22:7a:75:d1:d2:38:0e:dd:65:
11:9c:c1:b8:28:bf:09:d0:ec:d5:a7:70:d5:ec:b9:a1:a7:43:
d3:d6:f7:b3:52:19:d8:61:5c:fd:f7:d2:49:7c:7f:50:70:cb:
9c:9b:10:87:56:34:b3:7f:01:c5:fc:f0:21:cd:61:cc:4e:f7:
b5:4e:d1:02:64:d2:34:e3:af:b1:81:48:e3:2f:84:69:49:16:
a2:49:f3:4f:ee:0a:e6:be:8f:0a:65:e5:ba:56:b3:54:a5:05:
f3:b4:e3:7a:25:33:ff:f5:d1:45:8c:3c:b0:c5:22:81:a6:57:
3a:6d:13:bf:29:32:d3:9d:29:7c:4b:f5:79:d2:e8:70:42:34:
ad:ce:3e:df:48:88:fd:a7:cd:b9:4c:a2:07:e9:ea:f9:8a:76:
6c:1b:0a:15:e9:ad:0e:c1:2a:f9:7d:d3:15:de:f5:50:44:f1:
4f:36:56:95:7f:bf:3c:7e:10:d8:e1:c5:a0:ae:93:52:ec:af:
bf:1e:53:7d:8e:7d:73:f1:c5:19:d3:e9:f1:7e:87:46:d2:36:
18:2b:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org