Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZOi_Wct1zW7IRTmUYTY3M8hMo4o.roa
File: ZOi_Wct1zW7IRTmUYTY3M8hMo4o.roa (raw, json)
Hash identifier: kfvvqvzASR9PGnHB3jTSC0ArahSqSRquYddBwtSZqbU=
Subject key identifier: 64:E8:BF:59:CB:75:CD:6E:C8:45:39:94:61:36:37:33:C8:4C:A3:8A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01859BF5401A002DD63FA1A3A2F9E80055D9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZOi_Wct1zW7IRTmUYTY3M8hMo4o.roa
Signing time: Tue 10 Jan 2023 13:53:39 +0000
ROA not before: Tue 10 Jan 2023 13:53:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 88.216.185.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.56.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
84.32.172.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.175.0/24 maxlen: 24
88.216.23.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
84.32.157.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:f5:40:1a:00:2d:d6:3f:a1:a3:a2:f9:e8:00:55:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 10 13:53:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64e8bf59cb75cd6ec845399461363733c84ca38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5a:b0:bb:45:67:87:2f:4e:0a:62:95:90:e8:
a7:ff:77:9c:f9:3c:3b:08:43:41:a6:ee:21:a5:13:
e8:a9:7d:76:1c:80:8f:72:50:14:e5:02:fd:b9:f9:
1c:36:15:fe:95:5d:df:1d:90:0a:43:3e:54:52:9e:
22:db:e6:a9:d9:01:e2:34:1b:20:bd:d6:37:38:b5:
7c:ff:cd:cc:c8:73:78:a5:fa:d9:a8:f2:2c:f3:62:
cb:2e:d2:0b:d9:24:33:64:4b:e3:34:fb:4d:cc:4f:
3b:f5:bc:f2:ea:2f:cb:99:22:46:ea:e3:e1:1e:3a:
f6:91:e3:31:fb:b0:f6:d6:d8:a5:fe:7f:b4:cc:fa:
d8:d9:97:fb:ba:7d:93:31:44:9e:9c:40:ef:08:f5:
29:7e:a2:28:78:a8:68:db:97:b7:78:5f:6b:78:83:
91:f0:04:b7:b5:00:31:1d:3d:92:fb:ce:bb:d6:f1:
9d:5c:66:96:8b:4f:35:bc:b8:32:a7:b2:eb:2a:7a:
89:40:13:89:6d:8c:47:08:88:32:4c:94:5a:b0:f6:
d7:2f:5d:eb:fc:6d:0b:6d:51:b8:b3:96:0d:f3:62:
b0:06:65:be:b8:a6:19:d4:de:74:38:65:76:7a:52:
4d:70:8e:53:fa:a0:ab:2e:0d:38:3f:87:79:f0:f0:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E8:BF:59:CB:75:CD:6E:C8:45:39:94:61:36:37:33:C8:4C:A3:8A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZOi_Wct1zW7IRTmUYTY3M8hMo4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.31.0/24
84.32.64.0/24
84.32.148.0/23
84.32.152.0-84.32.154.255
84.32.156.0/22
84.32.172.0/24
84.32.175.0-84.32.176.255
84.32.250.0/24
88.216.20.0/24
88.216.23.0/24
88.216.44.0/23
88.216.56.0-88.216.65.255
88.216.131.0/24
88.216.185.0/24
88.216.213.0/24
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
17:98:75:a7:00:3c:df:c2:a0:8b:af:5e:c8:98:99:59:7c:05:
cd:f4:f1:32:0e:f9:77:8f:cf:a0:f4:28:74:f5:72:89:09:13:
31:e1:26:b3:1b:b8:33:05:58:2b:48:57:4d:21:c2:3d:15:1a:
2f:9a:df:be:c7:70:33:96:3c:22:aa:f1:cc:76:47:4b:c6:41:
02:aa:dc:1e:b5:30:09:79:6f:44:b2:cb:de:fa:1c:5a:2b:8a:
a2:de:9e:58:46:86:77:d5:3a:a2:3c:77:ef:7c:b1:2d:ff:44:
3e:ae:29:66:bb:bb:05:a2:1b:9b:7c:b7:1a:b5:4c:18:99:d7:
01:ba:c1:39:9d:74:c3:5d:59:f0:26:be:44:fc:68:97:a7:3c:
53:7d:e2:32:aa:20:e3:2a:cf:34:c5:47:34:6a:9a:1a:1b:1e:
48:01:1c:9b:3e:d8:55:83:e2:b6:76:1f:36:06:66:0f:93:f7:
83:11:47:b9:ac:0f:b2:8d:dc:bc:cc:7b:ea:ec:9d:11:7a:fd:
f3:fc:89:f3:1c:8a:2f:46:95:68:66:04:9a:42:a1:05:14:95:
b2:50:f5:0d:e6:96:a0:e2:d9:57:28:8b:b5:0b:d1:6d:5c:15:
e7:02:ab:27:01:fb:58:91:17:9d:15:69:ab:3f:8d:08:d4:f4:
d4:44:59:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:30 2023 by rpki-client on console-ams.rpki-client.org