Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eU2CDsGMn-1WQhbLFquU5peItk4.roa
File: eU2CDsGMn-1WQhbLFquU5peItk4.roa (raw, json)
Hash identifier: wHTYiK0tQhFz8deIbPu/jKJERKtern1urWrW/D++Dmc=
Subject key identifier: 79:4D:82:0E:C1:8C:9F:ED:56:42:16:CB:16:AB:94:E6:97:88:B6:4E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185BB3AF77C44F2C7A124D8ECD57CE32735
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eU2CDsGMn-1WQhbLFquU5peItk4.roa
Signing time: Mon 16 Jan 2023 15:38:01 +0000
ROA not before: Mon 16 Jan 2023 15:38:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 84.32.89.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.92.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.210.0/24 maxlen: 24
88.216.221.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 07:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:3a:f7:7c:44:f2:c7:a1:24:d8:ec:d5:7c:e3:27:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 16 15:38:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=794d820ec18c9fed564216cb16ab94e69788b64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:72:3e:ce:c7:7f:76:bb:31:51:26:3b:d8:dc:
63:e2:50:a2:80:96:48:b1:58:78:80:9f:b5:32:b8:
e6:35:94:55:3b:fc:65:ac:d1:b2:3b:d2:f7:26:25:
f6:57:32:2f:7b:c9:12:eb:9b:09:b6:3b:13:2b:27:
52:5c:58:11:27:2d:de:59:ce:0c:25:b0:74:c2:b3:
7e:97:b3:08:c3:e8:ea:cc:f5:54:f1:77:1a:78:24:
93:a9:0c:f8:8c:5b:61:45:0c:50:1b:a9:80:78:f1:
d9:23:62:a2:6c:2f:65:54:dd:cb:57:26:63:e2:03:
57:d3:8d:ec:79:e4:31:7e:ab:d2:d3:37:7f:62:90:
13:93:f2:c0:cd:7c:79:61:b2:14:5b:f2:10:96:90:
a0:6b:81:67:ca:99:b2:16:e5:b4:c5:f1:71:ca:66:
a8:bb:d7:42:da:b8:94:91:e4:27:05:07:2c:66:3f:
56:56:b8:99:69:8e:4a:09:e9:78:44:c7:01:72:31:
ef:95:0a:b1:02:29:c1:1c:82:65:23:68:cf:e2:fc:
1a:30:e3:03:9b:ca:f4:f5:96:37:cc:09:9b:99:d4:
6b:89:b8:26:5c:07:ea:5d:65:a7:5a:28:e7:ec:ce:
81:ba:33:84:5d:13:6b:54:29:d1:9c:ca:8c:05:92:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:82:0E:C1:8C:9F:ED:56:42:16:CB:16:AB:94:E6:97:88:B6:4E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eU2CDsGMn-1WQhbLFquU5peItk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.29.0-84.32.30.255
84.32.45.0/24
84.32.89.0/24
84.32.92.0/24
84.32.94.0/24
84.32.155.0/24
84.32.210.0-84.32.212.255
84.32.241.0/24
88.216.105.0/24
88.216.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:23:91:57:f6:f9:66:39:61:6e:59:78:6f:1e:91:b1:59:44:
0b:66:61:7e:ed:97:74:f6:19:f8:a0:d9:a3:1d:e4:df:86:82:
64:8c:fe:97:1e:9e:5c:a2:97:6d:63:8d:78:9c:21:90:44:d9:
c1:b9:05:6c:55:33:f5:24:93:24:30:c5:26:b9:76:a3:10:3a:
d3:03:d4:ce:76:23:39:2f:28:f8:be:1b:47:63:57:c3:e6:89:
9d:bc:1f:4b:6e:b8:91:00:38:55:c5:31:0a:d6:b4:2c:cf:62:
0a:08:37:6c:e3:30:88:4f:dd:75:59:75:df:29:83:5a:3f:a1:
db:6a:a3:44:10:0d:fe:b3:61:28:5b:6d:3c:a8:0e:96:87:56:
c5:ea:d8:60:ec:fe:35:53:09:10:68:f3:ee:b3:df:0a:fd:82:
04:95:f2:17:31:18:8b:28:5e:5a:d7:8f:96:93:93:d6:f5:c3:
44:91:30:eb:2b:42:ee:ea:5d:7c:f5:b5:18:68:18:ff:b5:51:
5b:e4:9f:21:2a:1d:76:87:41:d3:33:cb:7a:c8:1c:42:5f:ec:
4f:e1:12:28:75:f6:c5:f4:23:7e:c6:47:2c:75:68:fd:82:63:
e4:01:ee:d0:aa:47:90:e2:c4:2e:e1:63:a3:1a:74:4c:dd:c3:
d0:cf:cf:be
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYW7Ovd8RPLHoSTY7NV84yc1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTE2MTUzODAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTRkODIwZWMxOGM5ZmVkNTY0MjE2Y2IxNmFiOTRlNjk3ODhiNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXI+zsd/drsxUSY72Nxj4lCigJZI
sVh4gJ+1MrjmNZRVO/xlrNGyO9L3JiX2VzIve8kS65sJtjsTKydSXFgRJy3eWc4M
JbB0wrN+l7MIw+jqzPVU8XcaeCSTqQz4jFthRQxQG6mAePHZI2KibC9lVN3LVyZj
4gNX043seeQxfqvS0zd/YpATk/LAzXx5YbIUW/IQlpCga4FnypmyFuW0xfFxymao
u9dC2riUkeQnBQcsZj9WVriZaY5KCel4RMcBcjHvlQqxAinBHIJlI2jP4vwaMOMD
m8r09ZY3zAmbmdRribgmXAfqXWWnWijn7M6BujOEXRNrVCnRnMqMBZL0TQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFHlNgg7BjJ/tVkIWyxarlOaXiLZOMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvZVUyQ0RzR01uLTFXUWhiTEZxdVU1cGVJdGs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMMAwDBABUIB0D
BABUIB4DBABUIC0DBABUIFkDBABUIFwDBABUIF4DBABUIJswDAMEAVQg0gMEAFQg
1AMEAFQg8QMEAFjYaQMEAFjY3TANBgkqhkiG9w0BAQsFAAOCAQEAHCORV/b5Zjlh
bll4bx6RsVlEC2Zhfu2XdPYZ+KDZox3k34aCZIz+lx6eXKKXbWONeJwhkETZwbkF
bFUz9SSTJDDFJrl2oxA60wPUznYjOS8o+L4bR2NXw+aJnbwfS264kQA4VcUxCta0
LM9iCgg3bOMwiE/ddVl13ymDWj+h22qjRBAN/rNhKFttPKgOlodWxerYYOz+NVMJ
EGjz7rPfCv2CBJXyFzEYiyheWtePlpOT1vXDRJEw6ytC7updfPW1GGgY/7VRW+Sf
ISoddodB0zPLesgcQl/sT+ESKHX2xfQjfsZHLHVo/YJj5AHu0KpHkOLELuFjoxp0
TN3D0M/Pvg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org