Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bvw9f6VkRgqyZQg-BdebsVzNLiI.roa
File: bvw9f6VkRgqyZQg-BdebsVzNLiI.roa (raw, json)
Hash identifier: nUlYkLzmdE1mUsZDSpHZGn1rlrqqaz5LPl+ZyGKaWQM=
Subject key identifier: 6E:FC:3D:7F:A5:64:46:0A:B2:65:08:3E:05:D7:9B:B1:5C:CD:2E:22
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC50146AD259762AB5DC995BF9762C433
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bvw9f6VkRgqyZQg-BdebsVzNLiI.roa
Signing time: Mon 01 Jan 2024 12:30:44 +0000
ROA not before: Mon 01 Jan 2024 12:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.63.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
84.32.217.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.244.0/24 maxlen: 24
84.32.32.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:46:ad:25:97:62:ab:5d:c9:95:bf:97:62:c4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6efc3d7fa564460ab265083e05d79bb15ccd2e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:7e:a1:40:fe:28:54:e3:3f:9d:bd:1e:8a:
bd:f6:d1:70:0f:4f:19:92:d6:27:85:08:75:ee:42:
00:0d:1e:ba:19:2c:26:46:cd:f9:a5:66:8b:25:82:
f9:9e:66:ae:31:73:4f:1b:4c:43:48:be:78:32:36:
d5:63:7f:69:32:0d:77:4b:df:1a:83:46:c1:4b:ac:
3b:c2:85:fa:14:55:47:fe:30:cd:f5:64:10:60:03:
94:90:b8:4e:c4:be:fd:bf:ed:86:f6:15:e8:21:16:
f8:fe:9d:1c:88:bc:3d:73:4f:f6:68:69:ee:d1:69:
a4:5c:a2:11:4c:7e:a3:26:f2:cd:48:6b:3a:3f:e7:
42:2e:9c:f6:95:c7:da:cc:61:6b:22:f7:61:1e:c9:
9b:72:66:a7:df:5c:6f:47:a6:7e:ed:62:a3:d4:c2:
c2:94:c0:25:c7:bc:94:b8:97:ad:5f:47:64:58:e5:
12:5c:7b:68:83:ad:b6:b8:62:43:28:e6:7a:3e:79:
57:8d:1e:f3:b1:8d:20:33:c3:ed:48:e5:f1:dd:00:
60:f1:a2:7b:92:8c:30:d7:a9:05:b1:83:c2:89:55:
71:48:8d:09:6e:5e:32:16:bf:85:c4:9b:d8:57:d6:
b3:52:03:88:04:30:9d:80:03:b1:2b:3a:67:63:ae:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FC:3D:7F:A5:64:46:0A:B2:65:08:3E:05:D7:9B:B1:5C:CD:2E:22
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bvw9f6VkRgqyZQg-BdebsVzNLiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.32.0/24
84.32.39.0/24
84.32.63.0/24
84.32.107.0/24
84.32.149.0/24
84.32.151.0-84.32.152.255
84.32.154.0/24
84.32.156.0/24
84.32.177.0/24
84.32.217.0-84.32.218.255
84.32.244.0/24
88.216.34.0/24
88.216.41.0/24
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0e:c0:dd:ed:99:50:9f:b8:a5:7f:82:8b:7d:80:92:4e:a1:
1c:0b:e2:7c:ad:cd:a4:25:87:ff:bb:14:e6:7c:e4:8c:2e:ba:
fe:06:7d:44:1f:00:4d:1e:e1:2a:e2:dd:bc:f4:42:c1:1c:ee:
ef:d2:a4:fc:a9:2d:d0:5a:3b:dd:33:3c:c5:7b:80:b7:13:de:
1e:dc:74:72:e0:c2:f7:54:b7:a6:91:dc:0b:84:33:6b:5e:71:
a8:8b:92:e0:a4:05:8e:93:00:97:fc:ca:b2:6e:2b:19:cb:bc:
17:97:39:df:89:eb:de:1d:6c:2e:d5:b1:c1:2c:b5:1a:c2:03:
8b:74:e3:f0:ad:b6:34:df:3e:ad:d7:a0:65:9f:9f:bb:c2:35:
34:0b:f6:92:61:ce:95:b0:b5:ac:f4:32:64:10:db:b4:eb:26:
94:9c:fd:25:ea:4b:0e:4c:83:8b:eb:72:ae:f0:04:15:26:ff:
2c:68:95:48:41:9c:d1:93:28:34:17:da:a2:95:d0:79:5f:58:
b9:6d:20:f1:89:a8:ac:11:0c:03:00:ac:1f:7c:b1:5b:a6:38:
d5:0d:c0:97:5b:15:5b:4e:8e:b0:f9:57:ed:55:f0:1b:d1:1f:
17:3c:63:10:4d:7e:9a:f6:ed:80:02:72:c8:c3:be:00:eb:fe:
ab:b3:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org