Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eVesFUg6kmIN1iJi_l07OBViCz4.roa
File: eVesFUg6kmIN1iJi_l07OBViCz4.roa (raw, json)
Hash identifier: NFwjadf0074KeITWvqyM44Vll82v15ZM47vvp8aTgEI=
Subject key identifier: 79:57:AC:15:48:3A:92:62:0D:D6:22:62:FE:5D:3B:38:15:62:0B:3E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186D9C99A7585D488A3E6D551C86041D152
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eVesFUg6kmIN1iJi_l07OBViCz4.roa
Signing time: Mon 13 Mar 2023 07:05:13 +0000
ROA not before: Mon 13 Mar 2023 07:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.63.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
84.32.32.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 14:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d9:c9:9a:75:85:d4:88:a3:e6:d5:51:c8:60:41:d1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 13 07:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7957ac15483a92620dd62262fe5d3b3815620b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:36:f5:d9:59:ce:2e:10:87:2c:a5:84:9b:
c3:95:1b:ce:7c:c8:34:ba:6c:e4:a9:b6:3a:df:70:
7a:20:b6:0b:f7:3c:35:d0:64:6a:e6:2f:9c:4f:4e:
50:79:0b:f3:9e:ef:0c:d4:db:b1:3e:79:e7:ac:09:
b8:e4:99:6f:68:c1:87:9e:81:5b:59:76:74:0f:98:
95:5e:10:62:77:9c:c8:6c:96:66:ef:a1:c8:ba:00:
81:3c:ce:2d:f5:9a:f8:93:59:be:24:81:34:1e:19:
9d:52:4e:2b:7f:49:c9:6f:5c:8b:64:76:88:0d:25:
98:36:62:dd:41:c7:83:eb:e7:4e:84:70:31:92:30:
40:99:6a:1e:55:8c:b3:3e:11:72:f0:af:f3:a1:02:
c8:32:d8:0a:fb:b2:ad:20:bf:ea:78:49:ca:07:5e:
41:ee:72:de:06:be:5f:36:b1:5c:20:50:81:09:d3:
b8:fc:e1:db:1b:a0:ec:50:a0:f4:fd:b7:fd:4e:e5:
5e:71:c2:1c:89:b7:41:c1:25:c9:90:6c:28:d9:cc:
0c:53:74:f8:13:5f:b8:3b:e5:59:8a:ad:b2:16:a0:
65:50:0b:76:bf:47:5c:66:c5:96:cd:09:9d:4f:ea:
00:ef:4c:5b:d3:2b:d2:61:3b:e6:7d:30:83:9d:96:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:AC:15:48:3A:92:62:0D:D6:22:62:FE:5D:3B:38:15:62:0B:3E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eVesFUg6kmIN1iJi_l07OBViCz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.32.0/24
84.32.63.0/24
84.32.95.0/24
88.216.2.0/24
88.216.34.0/24
88.216.181.0/24
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d6:b2:0a:61:0f:c9:e5:a8:a2:05:98:70:cb:f3:f6:b8:b4:
5e:73:9b:a0:33:05:b9:01:e3:e8:46:2b:aa:63:48:92:cb:19:
99:4b:61:cb:77:4c:78:13:93:b5:e2:e0:db:49:ba:dc:e6:24:
19:0e:b2:5f:27:6d:a3:f2:46:12:82:df:e6:4c:89:f2:4c:95:
4f:c8:d0:0b:d5:4b:d0:7b:01:2b:80:b9:fe:48:8a:44:50:e4:
d1:ef:4a:c6:6e:f9:1a:fb:ee:22:e5:c6:73:22:11:9a:d8:68:
e4:21:6d:6a:d8:b5:e2:8f:5c:16:db:e4:13:24:fd:e7:f3:33:
b6:b3:e9:2a:67:db:42:4f:f7:3d:18:30:65:5b:97:c4:94:ce:
b0:a6:fd:db:b7:1c:97:26:31:d3:e5:73:0d:26:0c:a5:1f:b8:
b5:49:10:fd:40:39:8b:38:f6:e1:16:7d:4d:f6:bf:3f:cc:4b:
d1:21:c7:d2:b7:37:dc:8e:40:fb:e7:d6:de:aa:37:23:50:dc:
0d:d9:c9:de:71:17:30:fc:7a:13:47:a8:ae:ae:d0:27:28:0d:
d8:57:a9:2e:0a:58:5c:79:03:7b:d0:8b:f6:e4:74:57:c3:fe:
e4:7b:1d:ea:1c:94:0a:c3:6d:ae:8f:7e:85:ed:de:aa:1a:fc:
95:65:dd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org