Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aYK4qAoqk0UWfBNiwPJAn250ve0.roa
File: aYK4qAoqk0UWfBNiwPJAn250ve0.roa (raw, json)
Hash identifier: aAtbItcpbDUWGire0rUawcFBXsOkF8ouyxSeTpKDjDg=
Subject key identifier: 69:82:B8:A8:0A:2A:93:45:16:7C:13:62:C0:F2:40:9F:6E:74:BD:ED
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01859B6EA9BFCFEC17095E0CA06CCF64C09F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aYK4qAoqk0UWfBNiwPJAn250ve0.roa
Signing time: Tue 10 Jan 2023 11:26:38 +0000
ROA not before: Tue 10 Jan 2023 11:26:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 88.216.199.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jan 2023 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:6e:a9:bf:cf:ec:17:09:5e:0c:a0:6c:cf:64:c0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 10 11:26:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6982b8a80a2a9345167c1362c0f2409f6e74bded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:79:4e:5c:e2:b5:75:9a:bd:46:7f:31:74:
83:0c:0a:03:68:06:78:3e:e8:d5:d4:63:ab:63:99:
2e:04:37:e0:78:c1:e5:98:4b:de:bd:1d:c4:24:e6:
b4:fe:49:29:69:2c:9a:34:2e:71:01:94:dc:58:d8:
6c:b8:e7:28:3a:7f:9d:b8:39:be:a3:e4:22:32:26:
80:fe:5e:9b:1a:11:12:dd:26:8f:7c:6b:fd:2c:40:
14:2d:86:28:cf:d1:87:b4:99:33:47:0c:b2:c1:eb:
71:12:a3:af:87:be:d4:ca:ee:4f:b8:3b:ca:03:7d:
86:df:bc:8e:d8:c6:19:fc:1b:f7:2a:34:50:e6:9f:
6a:e0:c8:93:f4:1d:d5:0e:e2:d9:48:77:d5:b0:33:
bc:84:34:e0:c4:33:eb:ac:bd:83:9d:c6:10:7a:98:
d4:9e:57:0a:81:d3:07:2e:46:4c:d7:88:1e:8f:f7:
b1:1e:c6:cc:5a:ea:b9:bb:68:8e:94:47:27:35:9a:
33:1d:14:10:61:26:57:65:73:43:83:5e:84:9c:14:
b1:70:cb:c7:d8:d7:19:a6:b5:fb:51:af:f5:34:83:
90:24:ee:ae:0b:f6:10:a6:72:92:12:ff:9d:8e:6a:
34:ee:f8:82:25:66:67:5c:43:ba:0d:80:b0:ce:e9:
cb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:82:B8:A8:0A:2A:93:45:16:7C:13:62:C0:F2:40:9F:6E:74:BD:ED
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aYK4qAoqk0UWfBNiwPJAn250ve0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.48.0/24
84.32.50.0/24
84.32.58.0/24
84.32.71.0/24
84.32.88.0/24
84.32.93.0/24
84.32.108.0/24
84.32.150.0/23
84.32.177.0/24
84.32.218.0/24
84.32.226.0/24
84.32.232.0/24
84.32.239.0/24
84.32.245.0/24
88.216.3.0/24
88.216.21.0-88.216.22.255
88.216.32.0/24
88.216.46.0/24
88.216.92.0/24
88.216.134.0/24
88.216.199.0/24
88.216.210.0/23
Signature Algorithm: sha256WithRSAEncryption
34:3c:cc:42:91:fa:4a:80:50:a0:64:5f:26:18:d2:0a:2e:d7:
42:a6:71:7e:47:77:c6:06:e5:d5:63:42:65:3e:87:44:38:d7:
e4:13:2f:83:a7:3a:72:b6:33:b0:e5:d4:06:fe:d7:0d:75:a6:
30:52:cc:6e:73:d2:59:82:a0:e0:27:bc:27:54:23:82:5e:45:
31:ad:5a:b9:0b:52:b2:95:ac:2f:02:8a:a2:b4:64:a4:25:21:
5b:4b:7d:9a:73:76:7c:dc:ae:74:30:4f:35:1f:d3:26:67:88:
d9:50:22:36:6c:66:96:10:0e:3b:04:0e:a0:56:80:f8:95:0d:
9a:51:36:ae:a5:49:e5:2a:ac:b4:72:09:a3:9b:cf:ba:04:c4:
d9:75:a9:ec:c2:5a:72:6d:75:40:fc:13:7b:cb:e1:75:de:b0:
13:c4:36:1f:a0:6d:60:6e:35:d9:62:b8:16:4e:6e:ed:0e:28:
be:47:71:b1:8e:c3:de:68:b1:56:06:75:cb:e0:20:c4:8a:05:
8a:54:ad:76:f5:35:00:76:96:79:50:3d:57:02:db:da:32:e3:
65:f2:84:a7:b8:7f:40:66:ce:1f:9c:d4:14:fd:0c:c7:c7:7f:
5b:6d:0b:08:78:a3:df:20:b7:37:0e:99:bf:58:5f:e8:1f:65:
99:cf:bf:bd
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYWbbqm/z+wXCV4MoGzPZMCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTEwMTEyNjM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTgyYjhhODBhMmE5MzQ1MTY3YzEzNjJjMGYyNDA5ZjZlNzRiZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj55TlzitXWavUZ/MXSDDAoDaAZ4
PujV1GOrY5kuBDfgeMHlmEvevR3EJOa0/kkpaSyaNC5xAZTcWNhsuOcoOn+duDm+
o+QiMiaA/l6bGhES3SaPfGv9LEAULYYoz9GHtJkzRwyywetxEqOvh77Uyu5PuDvK
A32G37yO2MYZ/Bv3KjRQ5p9q4MiT9B3VDuLZSHfVsDO8hDTgxDPrrL2DncYQepjU
nlcKgdMHLkZM14gej/exHsbMWuq5u2iOlEcnNZozHRQQYSZXZXNDg16EnBSxcMvH
2NcZprX7Ua/1NIOQJO6uC/YQpnKSEv+djmo07viCJWZnXEO6DYCwzunLXwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFGmCuKgKKpNFFnwTYsDyQJ9udL3tMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvYVlLNHFBb3FrMFVXZkJOaXdQSkFuMjUwdmUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBABU
IAgDBABUIAoDBABUIDADBABUIDIDBABUIDoDBABUIEcDBABUIFgDBABUIF0DBABU
IGwDBAFUIJYDBABUILEDBABUINoDBABUIOIDBABUIOgDBABUIO8DBABUIPUDBABY
2AMwDAMEAFjYFQMEAFjYFgMEAFjYIAMEAFjYLgMEAFjYXAMEAFjYhgMEAFjYxwME
AVjY0jANBgkqhkiG9w0BAQsFAAOCAQEANDzMQpH6SoBQoGRfJhjSCi7XQqZxfkd3
xgbl1WNCZT6HRDjX5BMvg6c6crYzsOXUBv7XDXWmMFLMbnPSWYKg4Ce8J1Qjgl5F
Ma1auQtSspWsLwKKorRkpCUhW0t9mnN2fNyudDBPNR/TJmeI2VAiNmxmlhAOOwQO
oFaA+JUNmlE2rqVJ5SqstHIJo5vPugTE2XWp7MJacm11QPwTe8vhdd6wE8Q2H6Bt
YG412WK4Fk5u7Q4ovkdxsY7D3mixVgZ1y+AgxIoFilStdvU1AHaWeVA9VwLb2jLj
ZfKEp7h/QGbOH5zUFP0Mx8d/W20LCHij3yC3Nw6Zv1hf6B9lmc+/vQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org