Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fHDXSisYtYF_IZ6QWL4K0mWKNkA.roa
File: fHDXSisYtYF_IZ6QWL4K0mWKNkA.roa (raw, json)
Hash identifier: 0rY8X+NVYNMRO/Vc+wZnaeXuZXeDUNJRPtvY4ILJ0xo=
Subject key identifier: 7C:70:D7:4A:2B:18:B5:81:7F:21:9E:90:58:BE:0A:D2:65:8A:36:40
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01891812E18B7D329811DF727DD59F92CBD5
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fHDXSisYtYF_IZ6QWL4K0mWKNkA.roa
Signing time: Sun 02 Jul 2023 19:27:17 +0000
ROA not before: Sun 02 Jul 2023 19:27:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 84.32.58.0/24 maxlen: 24
88.216.67.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
84.32.219.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:18:12:e1:8b:7d:32:98:11:df:72:7d:d5:9f:92:cb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 2 19:27:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c70d74a2b18b5817f219e9058be0ad2658a3640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:f3:26:01:f7:c3:a5:ba:2c:00:23:3c:a5:
0a:35:7f:a5:b1:35:4c:24:9d:b8:b3:37:6c:cc:e8:
d3:d9:16:13:9e:b2:f1:58:6b:1b:a1:ac:63:5e:b3:
72:ba:bf:93:11:9d:ba:37:97:3a:57:b4:0b:17:20:
68:e2:6b:de:66:9c:58:e3:4a:12:92:9d:6e:a2:66:
8c:21:e1:2f:42:e3:77:19:1d:17:1c:85:fa:ad:a8:
a3:d1:a2:b1:c8:de:e3:a4:69:13:20:1e:1b:33:60:
8f:37:47:ea:aa:2c:a5:c0:d2:5d:bb:70:2a:7f:f7:
5c:2a:cb:25:d9:c7:fe:30:65:8b:b1:9a:b1:5e:57:
50:2a:5b:ab:46:b2:b6:84:06:d2:c0:a7:a0:76:fc:
98:f2:0d:dc:a8:68:91:79:d1:d3:03:45:b5:87:d7:
1a:d2:ea:5b:73:5f:d1:a1:bc:bc:bc:26:21:4b:64:
0e:2a:9c:d9:c1:31:13:55:97:b1:5f:b3:24:13:26:
bd:da:c5:5d:48:d6:13:ad:87:65:78:83:1a:d0:72:
c4:b5:d9:ae:1d:39:e5:a8:e6:f0:6f:24:66:b6:47:
12:d9:bf:52:48:a7:c3:f9:e3:a9:31:53:e3:f1:6c:
24:08:d7:de:e5:87:91:a5:e2:50:1c:d0:f7:45:62:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:70:D7:4A:2B:18:B5:81:7F:21:9E:90:58:BE:0A:D2:65:8A:36:40
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fHDXSisYtYF_IZ6QWL4K0mWKNkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.28.0/24
84.32.49.0/24
84.32.58.0/24
84.32.219.0/24
84.32.234.0/24
88.216.66.0/23
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
36:15:fc:88:03:28:80:21:fd:c6:b1:44:a9:28:83:1b:22:24:
98:8b:8e:7e:ec:7b:ee:83:76:b1:ce:a7:38:cb:44:80:0c:2d:
28:0c:80:b9:bc:3c:3c:93:92:77:44:bd:03:3e:b8:18:2d:d6:
22:63:34:d5:c9:d0:8d:64:d9:5e:38:26:f9:0d:9c:89:ba:52:
9a:db:f8:56:b9:ff:85:25:ab:f1:31:d0:0f:d1:b1:f7:02:45:
44:04:cf:8f:29:f6:26:34:2f:7e:77:25:d3:3f:56:79:45:92:
24:f9:fd:18:d8:c8:2e:0d:3f:3b:a6:65:f2:e8:d5:a5:49:aa:
c5:d0:50:4b:53:f6:8f:c7:16:aa:e6:6a:7c:67:00:df:b9:1d:
f2:66:44:ed:8a:b9:07:6b:97:3c:0b:85:b7:60:55:4a:b1:99:
c2:26:d3:5c:fc:bf:5f:62:7b:3a:01:20:4a:50:a1:6e:e5:b1:
6b:69:d7:21:c7:9e:ff:23:f6:06:d7:11:74:78:cb:e3:00:02:
8b:22:df:68:03:c0:77:9a:52:d8:96:20:9d:53:de:57:c2:6a:
61:85:a1:df:de:a8:7a:e9:5b:3c:0b:ff:c4:d5:3f:b6:7c:8d:
f7:18:f3:fa:0e:68:d5:f8:81:d0:6c:60:5e:c6:b2:b9:6c:a6:
26:18:15:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:31 2023 by rpki-client on console-ams.rpki-client.org