Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_w_n3g6SWGhTDKoi-YDbaPNnO1M.roa
File: _w_n3g6SWGhTDKoi-YDbaPNnO1M.roa (raw, json)
Hash identifier: hAwGYA+2T/cH3oVDQO9PVP87NYsQvWJ1HxmZwYNBzgA=
Subject key identifier: FF:0F:E7:DE:0E:92:58:68:53:0C:AA:22:F9:80:DB:68:F3:67:3B:53
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018F8006E26A931BA385EA1C236504C64DE7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_w_n3g6SWGhTDKoi-YDbaPNnO1M.roa
Signing time: Thu 16 May 2024 06:11:25 +0000
ROA not before: Thu 16 May 2024 06:11:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204770
IP address blocks: 84.32.34.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.128.0/22 maxlen: 32
88.216.198.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
88.216.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jul 2024 19:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:06:e2:6a:93:1b:a3:85:ea:1c:23:65:04:c6:4d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 16 06:11:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff0fe7de0e925868530caa22f980db68f3673b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:1b:96:c4:47:26:23:49:13:b2:b3:4a:8f:
24:ba:16:93:a0:e0:d0:54:15:5a:4a:ef:99:95:98:
74:7a:72:42:a6:50:66:ab:eb:9f:08:27:08:06:98:
c8:1a:5e:f8:26:3f:68:76:0c:89:2b:6d:ee:cd:6e:
ea:9e:61:9f:d3:32:a3:11:f3:53:e4:4d:22:ff:88:
25:11:cb:10:43:91:c7:ab:d0:6b:a9:a7:91:18:4b:
bf:f8:1b:ab:37:3a:8b:d0:e3:a3:de:9c:fe:06:ba:
4e:b6:f5:9b:c8:dd:21:78:92:0f:3d:94:d3:29:cb:
b0:c2:cf:a4:b0:37:18:20:f8:f3:ae:0a:9f:d6:91:
ee:ba:40:6b:4f:3c:ac:36:cd:d9:93:4a:62:b4:4f:
36:bb:05:f6:99:44:56:55:d7:b2:de:70:21:f9:59:
91:51:50:01:f0:af:67:e5:e3:36:a2:61:90:b1:e8:
e4:ac:f0:51:22:63:49:f4:b1:85:fa:f9:a8:fa:0e:
c9:f7:7d:71:f1:27:fc:a4:65:79:81:65:3f:00:34:
92:1f:2d:c1:51:45:47:87:37:4e:6d:16:e5:6e:cb:
dd:06:3f:eb:a3:09:61:2c:d7:4e:7c:57:cc:5a:73:
5a:f9:80:50:8e:d2:3b:4c:17:42:08:d3:43:25:02:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0F:E7:DE:0E:92:58:68:53:0C:AA:22:F9:80:DB:68:F3:67:3B:53
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_w_n3g6SWGhTDKoi-YDbaPNnO1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.34.0/24
84.32.71.0/24
84.32.128.0/22
88.216.198.0/24
88.216.210.0/24
88.216.222.0/24
Signature Algorithm: sha256WithRSAEncryption
51:43:02:2d:a6:91:8a:9a:15:42:d0:d2:48:4e:d0:3a:4c:6d:
27:c4:27:37:39:41:81:fb:59:f8:6d:4b:94:96:00:88:d0:21:
76:98:48:01:9d:0a:d6:e6:ef:65:2e:c7:05:da:2c:bc:61:f0:
14:3c:78:cf:fd:46:5c:68:a3:5e:02:97:ff:c0:b5:07:b4:26:
48:66:6f:f7:2c:f9:81:62:28:4c:64:9d:e2:ab:11:4c:42:e7:
ce:4e:ab:a1:c6:f0:b0:07:a1:78:13:99:5a:3e:6f:b5:52:38:
d8:7a:2d:f6:8b:28:08:b2:1d:0c:05:cd:60:ef:be:1b:5b:76:
45:8e:c7:7f:d8:c8:65:61:2a:03:bf:1e:91:54:1e:d8:52:3a:
8a:f8:92:d8:9f:39:64:6a:b3:54:0b:df:79:d2:6a:e0:00:09:
c1:23:bc:51:3c:6c:6b:1d:17:c5:ee:95:2a:69:5e:d2:cb:26:
ae:aa:a4:e7:6b:19:9c:51:c4:5c:4f:bd:7d:b1:70:4f:03:ac:
c1:27:92:cb:df:26:f4:0b:35:0b:9f:4d:32:2e:61:4d:65:33:
f8:35:4b:4c:8b:fb:b5:ee:b4:a0:46:0d:10:7d:80:46:84:e2:
c9:a3:07:b4:83:14:1c:ba:9c:dc:24:1d:74:62:53:fb:d7:a3:
62:a3:0c:73
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAY+ABuJqkxujheocI2UExk3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjQwNTE2MDYxMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjBmZTdkZTBlOTI1ODY4NTMwY2FhMjJmOTgwZGI2OGYzNjczYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv0blsRHJiNJE7KzSo8kuhaToODQ
VBVaSu+ZlZh0enJCplBmq+ufCCcIBpjIGl74Jj9odgyJK23uzW7qnmGf0zKjEfNT
5E0i/4glEcsQQ5HHq9BrqaeRGEu/+BurNzqL0OOj3pz+BrpOtvWbyN0heJIPPZTT
Kcuwws+ksDcYIPjzrgqf1pHuukBrTzysNs3Zk0pitE82uwX2mURWVdey3nAh+VmR
UVAB8K9n5eM2omGQsejkrPBRImNJ9LGF+vmo+g7J931x8Sf8pGV5gWU/ADSSHy3B
UUVHhzdObRblbsvdBj/rowlhLNdOfFfMWnNa+YBQjtI7TBdCCNNDJQJHkQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFP8P594OklhoUwyqIvmA22jzZztTMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvX3dfbjNnNlNXR2hUREtvaS1ZRGJhUE5uTzFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVCAiAwQA
VCBHAwQCVCCAAwQAWNjGAwQAWNjSAwQAWNjeMA0GCSqGSIb3DQEBCwUAA4IBAQBR
QwItppGKmhVC0NJITtA6TG0nxCc3OUGB+1n4bUuUlgCI0CF2mEgBnQrW5u9lLscF
2iy8YfAUPHjP/UZcaKNeApf/wLUHtCZIZm/3LPmBYihMZJ3iqxFMQufOTquhxvCw
B6F4E5laPm+1UjjYei32iygIsh0MBc1g774bW3ZFjsd/2MhlYSoDvx6RVB7YUjqK
+JLYnzlkarNUC9950mrgAAnBI7xRPGxrHRfF7pUqaV7SyyauqqTnaxmcUcRcT719
sXBPA6zBJ5LL3yb0CzULn00yLmFNZTP4NUtMi/u17rSgRg0QfYBGhOLJowe0gxQc
upzcJB10YlP716Niowxz
-----END CERTIFICATE-----
Generated at Sat Jul 6 20:16:29 2024 by rpki-client on console-fra.rpki-client.org