Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aTEC3jP5zdnQw6J8ancXYyjXpN8.roa
File: aTEC3jP5zdnQw6J8ancXYyjXpN8.roa (raw, json)
Hash identifier: 57C7PkTwQLqb1WY7vf9aAAi70Eq4nNFi1ARVk8uD0ZQ=
Subject key identifier: 69:31:02:DE:33:F9:CD:D9:D0:C3:A2:7C:6A:77:17:63:28:D7:A4:DF
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01864FAE082690761821BC1290DC357B9729
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aTEC3jP5zdnQw6J8ancXYyjXpN8.roa
Signing time: Tue 14 Feb 2023 11:27:30 +0000
ROA not before: Tue 14 Feb 2023 11:27:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.190.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
88.216.108.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:ae:08:26:90:76:18:21:bc:12:90:dc:35:7b:97:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 14 11:27:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=693102de33f9cdd9d0c3a27c6a77176328d7a4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:0e:96:4e:72:f6:76:0a:f7:db:79:88:a9:
71:48:97:89:ed:9a:ff:de:c5:5b:3b:3c:0f:fb:d4:
de:49:a0:85:1a:41:b2:1b:a8:b3:fe:4c:34:ee:b0:
04:f6:56:bf:43:f7:f9:56:75:76:3a:68:9d:90:53:
58:9b:bb:1d:5c:75:6a:99:ed:76:81:e7:81:89:11:
a2:18:03:69:18:90:c9:41:b6:06:89:f5:60:33:a2:
46:e8:ee:a4:ca:2b:e6:74:9e:68:84:64:11:6e:fb:
45:03:89:07:8f:cc:b8:a7:99:f0:b2:4b:03:1f:0d:
f0:fc:55:00:e6:10:8e:fd:f6:f5:26:50:7e:09:e6:
19:1f:64:f3:0c:2e:32:12:89:88:5e:19:f2:18:ca:
43:4b:bf:52:c7:e7:bf:63:60:8d:02:6e:8c:7f:20:
a3:07:eb:be:d6:28:df:e5:f8:aa:66:cc:e1:da:a7:
82:1d:77:19:f5:6b:f6:0a:e0:76:98:5c:6f:55:3d:
13:fd:9d:f0:12:5e:ac:ab:56:bf:29:2b:44:45:d8:
5b:f9:37:08:d0:0a:21:52:88:1f:54:47:cd:52:0a:
ab:43:c7:0e:ba:ba:88:88:1a:56:f7:35:40:dd:3b:
a5:f4:77:22:f0:30:2b:01:06:4b:d6:ff:34:8e:89:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:31:02:DE:33:F9:CD:D9:D0:C3:A2:7C:6A:77:17:63:28:D7:A4:DF
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aTEC3jP5zdnQw6J8ancXYyjXpN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.76.0/23
84.32.79.0/24
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.220.0-84.32.222.255
84.32.240.0/24
84.32.242.0/23
84.32.252.0/23
88.216.17.0/24
88.216.93.0/24
88.216.108.0/24
88.216.128.0/23
88.216.132.0-88.216.134.255
88.216.190.0/24
88.216.213.0/24
88.216.215.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
92:18:c0:ff:2e:95:68:d2:f5:d7:bb:28:b4:bb:fb:0e:53:f6:
2e:ce:07:7f:9e:9e:e0:4d:ad:6f:13:ad:45:68:7a:65:f1:12:
2b:e1:64:9c:1e:82:c2:98:f4:f0:d9:4b:62:77:c8:ef:f3:26:
09:35:43:92:e2:fa:10:30:f3:11:b0:47:0f:1f:e1:e4:96:50:
aa:9b:ad:52:45:6d:f6:a3:ab:49:a5:f3:dd:68:af:dc:94:b3:
d4:24:6b:0d:e5:72:17:9d:d6:20:38:51:a0:d6:86:86:0c:a7:
2b:1f:8f:75:02:d0:67:a2:b6:c8:d6:f7:45:d7:35:5a:e1:fc:
a4:76:be:47:2d:23:57:81:5f:9c:2e:54:da:c0:c4:6b:32:a2:
6d:02:16:db:4a:dc:a8:c5:24:00:23:33:3a:1e:f6:fa:a8:e5:
17:89:82:25:c8:1a:ca:c3:a2:1c:b8:78:07:01:d7:68:d5:af:
87:fe:2f:3a:cb:cd:70:55:73:f2:0b:8d:5f:12:fa:af:65:a9:
c9:1d:41:99:25:93:e8:2b:e3:cc:c0:d4:c4:bc:87:78:8e:ab:
69:0e:31:b0:cb:16:7b:31:9a:bb:be:20:a9:33:ff:58:94:5e:
53:bc:d7:ea:7a:57:8f:b1:68:fe:6f:73:f1:b6:3c:05:e6:8c:
93:56:5d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:31 2023 by rpki-client on console-ams.rpki-client.org