Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bWlAfHV-XO0r3apVyZ-fDb_R_Kg.roa
File: bWlAfHV-XO0r3apVyZ-fDb_R_Kg.roa (raw, json)
Hash identifier: GrzoNLHp4/DjyoXC6I2g1/0ix5Adb1bWs7rsOQ/d8Vc=
Subject key identifier: 6D:69:40:7C:75:7E:5C:ED:2B:DD:AA:55:C9:9F:9F:0D:BF:D1:FC:A8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018597A9B3C28D1AE1558C55300477551B3E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bWlAfHV-XO0r3apVyZ-fDb_R_Kg.roa
Signing time: Mon 09 Jan 2023 17:52:39 +0000
ROA not before: Mon 09 Jan 2023 17:52:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
88.216.209.0/24 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.178.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Jan 2023 08:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:a9:b3:c2:8d:1a:e1:55:8c:55:30:04:77:55:1b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 9 17:52:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d69407c757e5ced2bddaa55c99f9f0dbfd1fca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6b:21:85:af:7c:5a:af:35:ca:76:4e:48:bd:
42:4f:c1:0b:e9:90:9f:3c:d4:06:0c:69:52:7f:8d:
fa:7d:e3:ef:e7:16:1c:f7:44:67:bc:93:88:92:24:
f3:05:e4:9a:b9:12:ee:2e:ce:c3:13:7b:7d:e3:e7:
c9:f0:0a:4a:52:d6:6a:9c:b6:04:f9:08:08:93:6e:
d1:21:4a:03:23:bb:6d:80:73:4d:1d:88:d7:17:fd:
fb:19:b1:dd:8f:5a:80:fa:bd:58:ed:52:76:a8:a3:
00:e8:f4:3a:b2:4d:7b:53:5c:82:c2:a3:7f:9b:8a:
3d:20:fe:21:e6:02:e7:e0:39:9e:dd:f7:a5:1e:2f:
45:81:fe:33:b8:d2:ec:16:f7:7a:df:3c:b6:aa:fe:
f4:26:36:cc:6d:e3:2c:47:46:44:58:d3:cf:e5:4e:
dc:73:c3:26:9c:4e:87:ce:23:15:1c:8a:48:f2:0c:
9f:a1:93:d0:f5:ef:ba:06:79:06:7f:43:27:1f:92:
f9:05:bf:7a:43:b8:bc:6e:4c:26:ec:03:c0:eb:2d:
d5:b7:37:10:72:8e:ce:eb:7d:b1:c7:2c:6c:b3:76:
93:ef:81:4d:9b:2b:4b:dc:4a:74:3a:9b:4b:a3:e4:
1e:40:c4:b6:6d:a2:a3:9c:c8:76:34:49:9c:fd:65:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:69:40:7C:75:7E:5C:ED:2B:DD:AA:55:C9:9F:9F:0D:BF:D1:FC:A8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bWlAfHV-XO0r3apVyZ-fDb_R_Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.28.0/24
84.32.44.0/24
84.32.46.0/23
84.32.59.0-84.32.60.255
84.32.66.0/24
84.32.68.0/24
84.32.90.0/24
84.32.92.0/24
84.32.178.0/24
84.32.219.0/24
84.32.225.0/24
84.32.227.0/24
84.32.255.0/24
88.216.95.0/24
88.216.103.0/24
88.216.188.0/24
88.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ec:12:4a:ae:2b:31:a7:0e:c8:d9:a9:75:51:4d:ae:e8:c8:
59:cc:ef:ac:25:db:08:6c:9f:29:f7:fc:7d:77:7d:5a:66:85:
c4:e7:40:01:b3:90:1d:96:bb:df:a1:33:af:6e:d0:e6:11:22:
a8:41:c3:c1:18:28:a9:c9:ce:8f:0c:ea:59:b5:32:de:af:8f:
72:d2:26:77:90:70:e8:bb:9a:c7:64:9f:5f:b0:87:b8:3b:30:
a1:a2:dc:c1:42:2c:57:c7:2a:19:48:e6:1e:c6:31:59:63:eb:
24:63:25:5f:20:ba:d4:0c:f0:46:c0:ac:3f:30:bd:87:58:b8:
6d:4e:e3:3d:59:bb:93:bc:5c:04:75:91:7c:d2:b7:f7:63:02:
9c:b9:a2:f2:7c:65:5f:27:1a:46:a6:08:1a:96:b6:3d:fd:eb:
29:15:64:08:bd:96:25:16:5a:13:e9:4f:96:f1:12:84:f7:12:
11:02:c0:93:27:d7:ed:46:9a:3f:a3:2b:cd:05:3a:f7:e0:b0:
a3:ac:a6:6c:e4:8d:3c:53:66:50:b5:ed:ac:01:43:66:f8:f7:
34:85:de:09:cb:f2:ca:de:ec:8a:8b:90:0c:15:26:f6:b6:77:
a9:20:2a:73:5c:55:5e:cc:97:bb:a8:60:db:5c:99:7d:1e:39:
f3:a5:bd:b1
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAYWXqbPCjRrhVYxVMAR3VRs+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTA5MTc1MjM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDY5NDA3Yzc1N2U1Y2VkMmJkZGFhNTVjOTlmOWYwZGJmZDFmY2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGshha98Wq81ynZOSL1CT8EL6ZCf
PNQGDGlSf436fePv5xYc90RnvJOIkiTzBeSauRLuLs7DE3t94+fJ8ApKUtZqnLYE
+QgIk27RIUoDI7ttgHNNHYjXF/37GbHdj1qA+r1Y7VJ2qKMA6PQ6sk17U1yCwqN/
m4o9IP4h5gLn4Dme3felHi9Fgf4zuNLsFvd63zy2qv70JjbMbeMsR0ZEWNPP5U7c
c8MmnE6HziMVHIpI8gyfoZPQ9e+6BnkGf0MnH5L5Bb96Q7i8bkwm7APA6y3VtzcQ
co7O632xxyxss3aT74FNmytL3Ep0OptLo+QeQMS2baKjnMh2NEmc/WWryQIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFG1pQHx1flztK92qVcmfnw2/0fyoMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvYldsQWZIVi1YTzByM2FwVnlaLWZEYl9SX0tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAFQgHAME
AFQgLAMEAVQgLjAMAwQAVCA7AwQAVCA8AwQAVCBCAwQAVCBEAwQAVCBaAwQAVCBc
AwQAVCCyAwQAVCDbAwQAVCDhAwQAVCDjAwQAVCD/AwQAWNhfAwQAWNhnAwQAWNi8
AwQAWNjRMA0GCSqGSIb3DQEBCwUAA4IBAQB97BJKrisxpw7I2al1UU2u6MhZzO+s
JdsIbJ8p9/x9d31aZoXE50ABs5AdlrvfoTOvbtDmESKoQcPBGCipyc6PDOpZtTLe
r49y0iZ3kHDou5rHZJ9fsIe4OzChotzBQixXxyoZSOYexjFZY+skYyVfILrUDPBG
wKw/ML2HWLhtTuM9WbuTvFwEdZF80rf3YwKcuaLyfGVfJxpGpggalrY9/espFWQI
vZYlFloT6U+W8RKE9xIRAsCTJ9ftRpo/oyvNBTr34LCjrKZs5I08U2ZQte2sAUNm
+Pc0hd4Jy/LK3uyKi5AMFSb2tnepICpzXFVezJe7qGDbXJl9Hjnzpb2x
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org