Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bHZ_ae35BisVzHy5WgbS4HTgAj8.roa
File: bHZ_ae35BisVzHy5WgbS4HTgAj8.roa (raw, json)
Hash identifier: gftZ+JXN55htiJUiflvFnINHGz+ATiG9E55uTGjYmGQ=
Subject key identifier: 6C:76:7F:69:ED:F9:06:2B:15:CC:7C:B9:5A:06:D2:E0:74:E0:02:3F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01877697560EA8926A545C98C65008E2AA13
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bHZ_ae35BisVzHy5WgbS4HTgAj8.roa
Signing time: Wed 12 Apr 2023 17:50:42 +0000
ROA not before: Wed 12 Apr 2023 17:50:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.63.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.32.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:97:56:0e:a8:92:6a:54:5c:98:c6:50:08:e2:aa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 12 17:50:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c767f69edf9062b15cc7cb95a06d2e074e0023f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:08:80:c3:9e:97:a4:2a:3f:93:e3:cc:2f:
c4:2a:fc:e9:ba:d4:97:16:f2:02:08:e8:d9:21:55:
66:3b:d3:17:53:3b:8b:63:b1:d5:82:ed:8e:26:ef:
65:bc:33:d8:ac:7a:e9:4d:f1:7a:6c:8f:d4:3c:56:
eb:88:3a:93:09:e9:ef:0d:4a:4b:16:8b:65:89:01:
53:d8:86:d7:04:2a:38:67:6d:f8:9c:f1:a1:56:1f:
cc:3a:7f:70:fa:3d:b7:e1:a9:5e:59:07:b0:22:ee:
5c:0c:19:0d:39:fd:48:fd:29:9e:8e:ca:84:14:de:
8b:ef:0d:05:af:18:d5:be:22:33:56:02:d8:2a:78:
59:07:a2:b1:13:7e:53:e3:c4:5f:0b:91:1b:fa:04:
40:34:59:22:05:d9:42:1f:87:39:47:53:d6:87:90:
3f:1d:df:f6:47:fd:2f:cf:f0:58:b3:04:26:e4:8d:
5a:bd:58:38:a9:6b:ad:be:ec:ba:1a:00:55:07:6c:
e2:3b:b5:78:bb:e7:88:de:52:6d:a3:6b:be:85:cd:
6e:4a:9c:1c:5c:0d:1a:9e:50:85:b5:38:17:47:f8:
c2:28:e0:64:27:42:51:09:9e:38:15:69:05:a9:56:
0f:c6:57:ff:4a:2a:ae:59:b6:c3:54:95:db:1e:b6:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:76:7F:69:ED:F9:06:2B:15:CC:7C:B9:5A:06:D2:E0:74:E0:02:3F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bHZ_ae35BisVzHy5WgbS4HTgAj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/24
84.32.32.0/24
84.32.63.0/24
84.32.95.0/24
88.216.2.0/24
88.216.34.0/24
88.216.181.0/24
88.216.186.0/24
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b4:5b:c5:40:13:a1:53:7f:a9:43:28:6b:1e:b4:bc:bb:bf:
60:d3:e3:88:94:c6:08:01:70:83:33:72:44:68:df:11:52:3b:
46:3f:64:0e:8d:d5:dd:e2:a5:9c:3c:24:e3:23:ec:d1:36:64:
c2:9a:9b:f6:9f:80:25:1d:d2:13:24:e8:61:7c:6c:e7:c2:51:
71:46:ac:3d:f1:63:c2:c5:b9:33:55:03:ea:dd:18:8a:3e:6a:
e6:cd:8b:0f:aa:26:0f:84:52:19:d9:54:f4:e1:ef:61:2b:d7:
34:2f:a8:00:90:e7:74:8a:f3:b8:43:16:16:c0:45:0a:7c:91:
0f:5b:dd:79:02:c5:43:7b:59:4a:71:58:6e:3a:47:e6:69:a1:
e5:5e:ad:39:7d:84:cf:b1:7a:3f:cb:d3:e6:60:2c:27:15:2a:
b7:92:62:78:9d:48:16:96:bf:03:8e:db:92:37:df:81:55:71:
d0:6f:e0:57:c1:4a:59:d9:72:1d:86:8e:d1:71:5a:24:6b:a1:
1e:af:cc:f9:9e:b6:51:bb:e2:40:87:7b:91:f0:f4:19:8b:fe:
3f:bf:ff:3e:43:48:5f:69:71:55:ab:e2:57:5c:bc:f2:3c:26:
be:cf:a5:a8:34:4a:9b:89:c7:25:2f:69:52:16:5b:6a:2e:84:
97:2a:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org