Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ewkZPUQbmaUg1_LQ5ZmPmNyRfU8.roa
File: ewkZPUQbmaUg1_LQ5ZmPmNyRfU8.roa (raw, json)
Hash identifier: /HpXdrHQSoHbCSbfvI6cxz8lUYDTtLOGnbQiaIXlYys=
Subject key identifier: 7B:09:19:3D:44:1B:99:A5:20:D7:F2:D0:E5:99:8F:98:DC:91:7D:4F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018C0FA3CB3D9D577245D17F40762ADE3113
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ewkZPUQbmaUg1_LQ5ZmPmNyRfU8.roa
Signing time: Mon 27 Nov 2023 07:17:21 +0000
ROA not before: Mon 27 Nov 2023 07:17:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.182.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
84.32.236.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
88.216.93.0/24 maxlen: 24
84.32.210.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.43.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 07:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:a3:cb:3d:9d:57:72:45:d1:7f:40:76:2a:de:31:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 27 07:17:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b09193d441b99a520d7f2d0e5998f98dc917d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:60:9d:7c:2a:96:08:76:37:8e:4d:16:02:
6e:65:64:d2:17:61:c3:22:89:f7:bd:d8:c4:9d:27:
7d:af:a7:b1:35:13:58:21:3e:f2:60:c9:92:23:3a:
05:37:b3:61:6a:e7:79:ca:82:2d:a0:f4:c9:0b:a7:
0d:49:8b:50:5c:35:44:e1:ee:66:0a:b5:56:47:fb:
dd:ab:13:4d:18:57:52:d9:d7:58:d6:bc:20:19:e3:
b4:89:ff:2a:19:79:f0:9f:ba:47:a2:f2:b8:72:71:
c6:70:ce:c0:b8:e3:f5:d3:4f:75:87:4c:ba:13:66:
f0:f3:4f:43:00:19:5d:00:e3:b3:34:fa:44:17:34:
e1:72:e3:25:24:14:15:3c:ef:7e:c9:58:bd:31:3f:
f5:36:63:01:3c:ee:90:62:09:bd:b5:43:cd:25:72:
8d:95:72:05:ac:44:9e:95:70:de:52:26:2a:f2:9e:
b2:b1:36:3a:27:1c:de:dc:67:49:c8:3c:67:d7:56:
2b:d8:a2:06:23:9c:ec:cc:75:28:23:fa:6a:d2:38:
c2:a6:be:71:fb:2e:b4:05:f9:21:90:68:01:ea:7f:
d2:3f:2d:ca:0f:07:84:c4:f0:bb:dc:0e:76:02:97:
5f:57:5b:54:58:08:c8:2f:bc:18:c9:3d:05:7f:38:
e3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:09:19:3D:44:1B:99:A5:20:D7:F2:D0:E5:99:8F:98:DC:91:7D:4F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ewkZPUQbmaUg1_LQ5ZmPmNyRfU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.66.0/24
84.32.83.0/24
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.178.0/23
84.32.210.0/24
84.32.214.0/23
84.32.236.0/24
84.32.244.0/22
84.32.249.0/24
88.216.22.0/23
88.216.43.0-88.216.45.255
88.216.93.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.182.0/23
88.216.187.0-88.216.189.255
88.216.191.0/24
88.216.197.0-88.216.198.255
88.216.208.0/24
88.216.211.0-88.216.215.255
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:af:22:fb:89:15:39:3b:13:59:b5:8e:6a:ee:1f:94:93:5d:
3d:3a:df:63:8e:fe:5d:12:43:2b:e8:41:06:f4:88:4c:f0:d8:
63:f5:29:8c:69:2c:ef:c3:26:77:e7:92:9d:42:83:7e:62:6c:
1e:c2:68:37:5b:4e:97:a6:09:86:a0:5b:e4:72:8a:51:45:0d:
00:aa:8d:b8:4b:cc:a5:33:39:8d:07:2e:eb:20:ee:b1:d8:d6:
d9:77:cb:82:ac:ba:99:cb:9a:a4:76:20:67:e4:56:76:a0:79:
6a:4d:0e:08:0a:66:d8:b0:82:8c:8a:c1:39:03:97:7d:e1:6e:
74:3b:77:24:b0:cb:89:2e:a9:95:63:dc:41:dc:c2:88:01:80:
2f:c1:81:e0:e4:b5:bd:74:dd:7d:ea:2b:5b:2f:2c:ff:16:3b:
09:34:42:75:c5:e7:e9:5c:8b:a3:52:c9:7c:74:e9:4e:86:d2:
e9:e5:ea:c7:25:97:d8:cd:26:23:94:5b:da:4b:0e:2f:b5:c3:
8f:43:9a:be:f8:ed:cb:30:f3:bb:ca:3f:8a:b9:25:33:b8:9a:
60:99:16:41:09:f9:a4:0d:ab:e6:fd:83:1a:36:2e:7e:26:f0:
b8:96:39:f0:4a:04:03:2a:80:1d:90:ba:a0:f5:2c:cd:81:5b:
24:f3:02:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org