Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZsoFEzRaqretuu9AeR7zE7HcPWY.roa
File: ZsoFEzRaqretuu9AeR7zE7HcPWY.roa (raw, json)
Hash identifier: dzEjay1QknnyJvSEQk+MqczydkVt23JqbGz/XNd3L/0=
Subject key identifier: 66:CA:05:13:34:5A:AA:B7:AD:BA:EF:40:79:1E:F3:13:B1:DC:3D:66
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186602316221CEB52A3F8518621DE5434CA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZsoFEzRaqretuu9AeR7zE7HcPWY.roa
Signing time: Fri 17 Feb 2023 16:09:17 +0000
ROA not before: Fri 17 Feb 2023 16:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.186.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.218.0/24 maxlen: 24
88.216.108.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.109.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:60:23:16:22:1c:eb:52:a3:f8:51:86:21:de:54:34:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 17 16:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66ca0513345aaab7adbaef40791ef313b1dc3d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c5:5d:cc:09:a1:8f:5a:82:ec:ba:bf:29:50:
29:2c:64:79:01:3d:f1:71:ff:51:e3:42:81:9b:f1:
de:98:63:2f:03:82:8f:7f:3f:54:1b:c4:47:99:95:
62:ab:a6:37:ab:46:11:43:76:af:07:da:a7:9d:be:
15:54:da:eb:8e:30:3c:34:51:f6:85:a7:64:8d:9a:
1d:12:d5:f2:61:17:1a:5c:3e:c4:f4:e1:ba:ec:1e:
f9:02:d5:99:82:0f:fd:00:ae:26:3c:a5:29:c6:9a:
ff:ee:8c:1b:b2:75:ff:a3:29:0b:d0:d0:7d:a5:78:
3d:fd:fa:72:d3:3e:5f:25:28:90:f0:f1:f4:2b:4c:
46:39:37:ed:2b:82:05:0b:79:25:ff:78:1f:14:3a:
5c:87:c6:5a:2d:c5:f9:16:3f:66:98:d4:d2:2b:ec:
0a:ed:73:a2:cf:15:07:b6:53:df:09:ed:d1:95:ca:
c7:f6:ed:0a:52:10:82:f7:09:dd:f3:f2:43:29:b9:
83:94:d5:c5:3a:08:a6:d2:4f:91:17:e4:55:37:c7:
ee:a7:31:d6:f8:20:0f:7a:87:43:89:29:aa:80:93:
a0:0c:a2:c8:86:e1:97:d1:e4:fe:d6:bf:33:a6:55:
5b:d4:db:14:bf:b2:f0:cd:e6:60:29:19:af:ca:a0:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CA:05:13:34:5A:AA:B7:AD:BA:EF:40:79:1E:F3:13:B1:DC:3D:66
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZsoFEzRaqretuu9AeR7zE7HcPWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.76.0/23
84.32.79.0/24
84.32.109.0/24
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.218.0/24
84.32.220.0-84.32.222.255
84.32.240.0/24
84.32.242.0/23
84.32.252.0/23
88.216.17.0/24
88.216.93.0/24
88.216.108.0/24
88.216.128.0/24
88.216.132.0-88.216.134.255
88.216.186.0/24
88.216.189.0-88.216.190.255
88.216.213.0/24
88.216.215.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
43:36:7d:fa:b3:41:b8:b4:cf:09:bd:c1:96:45:7a:6f:76:85:
7a:1f:22:5a:e8:65:38:e9:b5:21:67:6d:78:5c:51:db:93:75:
80:18:b2:0b:bc:25:c8:e0:aa:fc:38:b1:db:e1:2d:8f:b4:84:
de:d8:f0:92:5a:1c:02:47:fb:f7:e7:57:1a:d4:fd:d2:f9:4f:
1f:19:26:b5:98:bb:19:52:85:ef:29:3d:ac:93:40:a3:3c:14:
fe:3d:93:61:69:00:9c:af:c5:07:03:dd:c0:76:5a:5b:2d:d0:
42:7d:f0:c1:7a:76:a4:79:bb:0c:78:af:ca:32:46:56:32:41:
ed:98:85:3a:a4:43:36:b8:8b:0a:4c:b3:20:a6:e6:91:05:b6:
65:9f:89:46:50:3b:89:a3:f6:d8:58:7a:b2:bd:88:69:95:b7:
8e:a6:29:0a:50:fb:a4:2d:6a:99:9e:b7:41:35:aa:26:31:f4:
55:91:9c:9f:5c:6a:0e:c1:31:1c:c9:cb:84:4c:5d:92:60:42:
ca:17:87:75:e0:6d:a4:f2:f1:24:d7:24:b8:f7:2e:07:e8:46:
0d:9e:3e:a4:fe:1b:da:bc:95:aa:50:dc:c2:64:5e:87:c4:7f:
38:6a:1b:c0:a9:7b:88:4c:b7:0a:87:42:5c:dd:0a:03:4c:f3:
0d:2a:7b:ce
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAYZgIxYiHOtSo/hRhiHeVDTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMjE3MTYwOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmNhMDUxMzM0NWFhYWI3YWRiYWVmNDA3OTFlZjMxM2IxZGMzZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcVdzAmhj1qC7Lq/KVApLGR5AT3x
cf9R40KBm/HemGMvA4KPfz9UG8RHmZViq6Y3q0YRQ3avB9qnnb4VVNrrjjA8NFH2
hadkjZodEtXyYRcaXD7E9OG67B75AtWZgg/9AK4mPKUpxpr/7owbsnX/oykL0NB9
pXg9/fpy0z5fJSiQ8PH0K0xGOTftK4IFC3kl/3gfFDpch8ZaLcX5Fj9mmNTSK+wK
7XOizxUHtlPfCe3RlcrH9u0KUhCC9wnd8/JDKbmDlNXFOgim0k+RF+RVN8fupzHW
+CAPeodDiSmqgJOgDKLIhuGX0eT+1r8zplVb1NsUv7LwzeZgKRmvyqAxVQIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFGbKBRM0Wqq3rbrvQHke8xOx3D1mMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvWnNvRkV6UmFxcmV0dXU5QWVSN3pFN0hjUFdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagDBAJU
IBgDBABUIB4DBABUIC4DBAFUIEwDBABUIE8DBABUIG0DBABUILMDBABUINQDBAFU
INYDBABUINowDAMEAlQg3AMEAFQg3gMEAFQg8AMEAVQg8gMEAVQg/AMEAFjYEQME
AFjYXQMEAFjYbAMEAFjYgDAMAwQCWNiEAwQAWNiGAwQAWNi6MAwDBABY2L0DBABY
2L4DBABY2NUDBABY2NcDBABY2NwwDQYJKoZIhvcNAQELBQADggEBAEM2ffqzQbi0
zwm9wZZFem92hXofIlroZTjptSFnbXhcUduTdYAYsgu8Jcjgqvw4sdvhLY+0hN7Y
8JJaHAJH+/fnVxrU/dL5Tx8ZJrWYuxlShe8pPayTQKM8FP49k2FpAJyvxQcD3cB2
Wlst0EJ98MF6dqR5uwx4r8oyRlYyQe2YhTqkQza4iwpMsyCm5pEFtmWfiUZQO4mj
9thYerK9iGmVt46mKQpQ+6Qtapmet0E1qiYx9FWRnJ9cag7BMRzJy4RMXZJgQsoX
h3XgbaTy8STXJLj3LgfoRg2ePqT+G9q8lapQ3MJkXofEfzhqG8Cpe4hMtwqHQlzd
CgNM8w0qe84=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org