Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fD5jS_EqbJ_6wEZFZdEOwB7Tv5s.roa
File: fD5jS_EqbJ_6wEZFZdEOwB7Tv5s.roa (raw, json)
Hash identifier: WqqehNTk+fTloSw6ARwTvEz/TrR4fndk38pVAlRLTuw=
Subject key identifier: 7C:3E:63:4B:F1:2A:6C:9F:FA:C0:46:45:65:D1:0E:C0:1E:D3:BF:9B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188A0D806CCAA4EAD779D7CE1350C68D76B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fD5jS_EqbJ_6wEZFZdEOwB7Tv5s.roa
Signing time: Fri 09 Jun 2023 15:48:11 +0000
ROA not before: Fri 09 Jun 2023 15:48:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 84.32.52.0/22 maxlen: 24
88.216.185.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
88.216.212.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
84.32.6.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
88.216.252.0/22 maxlen: 24
88.216.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:d8:06:cc:aa:4e:ad:77:9d:7c:e1:35:0c:68:d7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 9 15:48:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c3e634bf12a6c9ffac0464565d10ec01ed3bf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:d7:25:38:b2:d1:a3:8c:86:a3:94:01:07:
7c:23:90:1f:80:14:dc:09:00:9f:40:c9:9b:20:70:
f7:a5:9c:2f:bb:bf:b9:61:42:f1:c1:1b:32:23:a6:
0f:29:90:8c:a9:46:9e:c6:6f:0e:2a:6e:b5:2a:c3:
1e:e3:84:17:84:08:10:b5:0a:1c:1e:b6:7d:83:9a:
d6:73:21:76:92:fa:ce:86:b0:1a:6a:cc:ec:bd:3a:
c5:ee:39:cf:c7:a3:b1:16:0e:9b:b7:95:de:95:80:
53:3a:e8:db:07:cc:b1:4d:fd:8c:23:0d:ef:da:2d:
80:64:55:c4:8e:d0:ad:04:3b:dc:fc:c6:f4:76:94:
f9:1a:eb:62:a8:ca:88:cb:37:d0:49:14:8c:14:14:
16:91:12:ce:49:90:69:6d:f9:07:9c:50:68:66:c8:
e2:db:d5:42:57:4b:b9:1c:10:01:66:e7:ba:d6:5e:
77:60:99:b2:81:db:37:d2:b3:3e:eb:a0:bf:46:69:
84:41:8f:dc:1b:7c:7b:11:c5:25:a0:ef:bc:71:33:
c7:8e:07:89:04:b8:d5:81:ca:8f:15:4b:bf:40:2b:
fb:78:cc:1d:a0:d0:c8:d5:f2:89:14:49:2c:14:ac:
0d:e9:8c:ec:98:6f:c5:7b:73:c3:c6:23:c0:e5:5c:
a9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3E:63:4B:F1:2A:6C:9F:FA:C0:46:45:65:D1:0E:C0:1E:D3:BF:9B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fD5jS_EqbJ_6wEZFZdEOwB7Tv5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
84.32.52.0/22
88.216.20.0/23
88.216.43.0/24
88.216.98.0/24
88.216.103.0/24
88.216.185.0/24
88.216.212.0/23
88.216.215.0/24
88.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
96:ad:fa:97:9d:bb:fa:ea:ee:9a:d4:4e:37:3f:b5:82:19:c8:
4e:a4:9c:74:cd:be:d8:c0:9a:2d:4b:ea:d7:86:d4:e7:e6:e5:
a5:58:9b:4c:8d:38:4e:9d:4a:64:de:eb:35:8b:bc:1b:a8:56:
87:80:46:76:8a:33:b9:31:7d:41:eb:fa:e8:92:71:44:29:54:
ba:91:ce:8f:5c:8c:17:5a:da:1a:52:fb:05:b6:d6:09:69:81:
91:a5:10:dc:ad:4c:a7:5a:c8:6f:65:21:c6:f0:43:bf:73:d5:
81:ff:6c:5e:0f:9d:db:6f:e6:a7:8f:a2:a4:ac:91:99:29:ce:
92:5d:ba:55:1a:4e:8a:d2:70:93:f7:0d:a7:71:3d:2c:50:47:
e4:c8:32:8a:66:68:05:a6:0c:38:8e:1a:ef:bd:39:4b:ae:84:
5c:2b:85:1e:02:b2:cc:84:ca:9b:61:ed:76:2b:21:08:66:54:
ea:9f:23:22:9d:cf:a3:ab:4f:00:36:87:bb:8d:9a:74:8f:e6:
95:5c:33:c6:91:14:f5:cc:df:f0:76:66:79:bb:1c:a7:07:5d:
41:e8:56:b9:48:9d:7f:25:c7:fe:a2:48:3a:ed:d7:04:24:d7:
77:1a:41:bb:b0:c4:dc:61:51:56:0d:ef:45:ac:22:a7:7b:cd:
60:99:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org