Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/a1jwyvVJ67BGRmrnG8H_xX6yAPA.roa
File: a1jwyvVJ67BGRmrnG8H_xX6yAPA.roa (raw, json)
Hash identifier: JABke+fLKGPSLMB9ZfLXIN4PV49BtUtXv0rnddrmm8w=
Subject key identifier: 6B:58:F0:CA:F5:49:EB:B0:46:46:6A:E7:1B:C1:FF:C5:7E:B2:00:F0
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01858231D814D79D78D2C0BFFB8404936B2D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/a1jwyvVJ67BGRmrnG8H_xX6yAPA.roa
Signing time: Thu 05 Jan 2023 13:49:42 +0000
ROA not before: Thu 05 Jan 2023 13:49:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 88.216.199.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 08:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:31:d8:14:d7:9d:78:d2:c0:bf:fb:84:04:93:6b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 5 13:49:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b58f0caf549ebb046466ae71bc1ffc57eb200f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a8:45:43:6c:16:ea:fd:05:48:16:dc:c5:73:
c2:b4:c7:2c:ea:fc:47:16:0c:f0:c3:0c:38:91:a6:
56:07:ce:64:22:6c:67:9f:9c:8f:78:28:4b:44:d8:
2a:70:cc:0e:a8:8f:01:0e:02:0e:93:1b:cb:ae:36:
65:a6:e5:da:5d:c4:0b:a0:06:de:be:e1:34:95:9f:
69:33:e7:b2:22:1b:93:84:44:6b:45:7e:31:c4:9f:
42:ae:98:7b:48:65:2a:70:a2:13:e1:6a:d6:05:51:
60:15:37:90:88:bd:c8:e4:b1:53:c5:6a:88:9f:7e:
2c:ff:2a:9d:7d:a2:7c:8f:20:12:13:c9:91:ca:76:
f3:9b:b1:3b:e5:b7:fd:14:66:ba:bd:20:c1:88:14:
78:b8:73:91:5e:f6:bf:d3:ef:69:f2:7d:c2:29:31:
71:63:c5:fe:35:59:1f:d8:95:60:7e:d1:32:02:8b:
d2:50:4d:1a:1b:30:4e:bc:d6:ce:90:ff:34:53:5b:
d1:c0:b2:be:99:30:23:73:68:e5:2a:c1:a2:69:8e:
d0:21:29:95:19:98:fa:14:bd:bf:b3:c4:3e:b9:9b:
93:ea:b6:56:71:50:1e:4c:08:1b:4f:4c:27:1e:d9:
1a:90:3a:45:9e:35:2e:9d:25:ba:78:f1:47:f0:c1:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:58:F0:CA:F5:49:EB:B0:46:46:6A:E7:1B:C1:FF:C5:7E:B2:00:F0
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/a1jwyvVJ67BGRmrnG8H_xX6yAPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.48.0/24
84.32.50.0/24
84.32.58.0/24
84.32.71.0/24
84.32.88.0/24
84.32.93.0/24
84.32.108.0/24
84.32.150.0/23
84.32.177.0/24
84.32.218.0/24
84.32.226.0/24
84.32.232.0/24
84.32.239.0/24
84.32.245.0/24
88.216.3.0/24
88.216.21.0-88.216.22.255
88.216.32.0/24
88.216.46.0/24
88.216.92.0/24
88.216.134.0/24
88.216.199.0/24
88.216.210.0/23
Signature Algorithm: sha256WithRSAEncryption
00:0f:b5:d9:3a:76:34:e0:1a:53:74:5a:22:60:06:7e:aa:7a:
95:f2:c4:4f:cc:12:f6:32:12:2f:aa:19:b9:26:23:02:f5:b0:
f8:5e:ef:d4:86:57:3a:36:5f:c2:dc:07:24:bb:45:92:b0:c4:
52:e9:ee:65:ff:2b:ff:5b:2d:a0:66:fa:45:f3:15:96:4b:e3:
ed:0a:34:e6:a2:93:c9:a9:9d:38:1f:8b:b4:16:b4:83:e7:ab:
83:ce:27:20:9a:dc:d7:bb:61:4f:79:f1:e7:f5:51:00:a6:c2:
f9:1c:3c:5a:8e:b2:1c:e0:89:67:e6:2b:69:0c:01:57:42:a0:
e8:ef:cd:80:b6:98:56:33:30:3c:ea:5d:5a:47:be:ea:d3:df:
4a:78:14:3f:82:97:16:bd:79:ef:d7:45:4b:60:47:4e:db:08:
8c:23:37:de:fb:1f:c0:80:96:88:c6:24:de:73:be:c6:c5:25:
b6:a2:05:ea:18:a8:58:57:17:3b:51:b8:ba:39:19:87:8c:03:
33:7f:ea:53:6a:43:16:87:df:ca:9c:fe:65:68:66:fa:4d:4c:
d1:45:99:90:d1:c2:03:21:7b:8b:63:f7:46:99:f0:0d:44:fb:
92:e2:31:db:cd:05:18:40:5a:42:e3:4d:dc:59:dc:1f:bd:71:
28:2f:d1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org