Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/focU4bDFCWGK518xkckBD9cfGIo.roa
File: focU4bDFCWGK518xkckBD9cfGIo.roa (raw, json)
Hash identifier: SYyzj7wvn6FZnWBy2j9JNFdAYSg/77NcILqpn/5fyYI=
Subject key identifier: 7E:87:14:E1:B0:C5:09:61:8A:E7:5F:31:91:C9:01:0F:D7:1F:18:8A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018572B3EACDC8447A1C17EC78036A6822E8
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/focU4bDFCWGK518xkckBD9cfGIo.roa
Signing time: Mon 02 Jan 2023 13:37:51 +0000
ROA not before: Mon 02 Jan 2023 13:37:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 84.32.57.0/24 maxlen: 24
84.32.91.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.130.0/24 maxlen: 24
88.216.38.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jan 2023 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b3:ea:cd:c8:44:7a:1c:17:ec:78:03:6a:68:22:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 13:37:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e8714e1b0c509618ae75f3191c9010fd71f188a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:7d:ea:ff:cd:e2:80:3d:ee:5b:dc:e0:b2:
95:03:eb:55:7f:83:b4:94:d4:2b:c4:ee:2f:3b:56:
79:68:76:dd:71:a0:94:d3:b3:a2:57:e1:3b:7a:8e:
0a:c8:0f:23:05:62:c8:98:c8:c6:4f:c4:80:ab:37:
65:71:8e:eb:43:fd:a9:ab:f5:6c:a5:01:6c:82:6e:
9e:8c:87:39:d3:0b:ad:a8:ef:53:24:11:a4:3b:28:
13:55:53:95:cf:93:ab:3f:6a:c3:ff:11:72:68:a0:
dc:5f:0f:50:42:8b:76:ff:f6:94:2f:e5:a9:f7:df:
59:c8:67:83:6f:b8:82:df:1d:9b:44:d1:93:14:a7:
66:6b:ac:b2:94:07:17:81:06:d1:f3:f0:b9:84:1a:
2f:a1:12:5d:ac:f7:1a:d1:e1:1e:83:47:f9:48:74:
f1:60:96:6a:ee:69:50:52:62:13:ae:12:47:63:8a:
4f:b0:7b:18:d5:6d:80:4f:12:55:ca:28:92:4a:61:
87:a3:08:d1:24:59:58:94:87:ef:7c:04:47:c7:f2:
8f:27:88:c1:20:d3:ed:f2:7b:01:70:26:94:0a:44:
60:36:3a:f0:b2:ce:e5:09:cf:ee:bb:94:6b:75:68:
f0:85:5f:b5:27:da:0d:50:50:77:3e:26:5b:f5:bc:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:87:14:E1:B0:C5:09:61:8A:E7:5F:31:91:C9:01:0F:D7:1F:18:8A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/focU4bDFCWGK518xkckBD9cfGIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.57.0/24
84.32.91.0/24
88.216.38.0/23
88.216.93.0/24
88.216.101.0/24
88.216.130.0/24
Signature Algorithm: sha256WithRSAEncryption
43:eb:f3:46:91:cf:91:d2:25:77:cc:bd:49:09:1f:14:30:73:
76:3d:ad:d8:ec:89:cb:fc:a0:ea:be:05:1a:ac:79:53:b9:66:
46:db:bc:40:cd:b0:85:09:2b:ae:84:e1:29:89:b3:b2:12:96:
c0:cd:e5:c1:49:47:cd:81:f2:d6:10:24:b0:f6:eb:db:dc:4a:
95:61:57:93:20:38:34:0d:fb:86:75:8d:e7:13:40:ff:26:d2:
40:94:66:1c:63:2b:c0:84:e3:35:d6:d8:1f:08:57:e8:cd:87:
3a:34:ac:72:e0:53:2a:9a:80:87:33:f2:0d:52:a9:b7:7b:07:
57:c0:4b:fc:a1:1e:dc:75:22:14:27:45:88:45:a2:19:c8:46:
ea:74:08:52:37:ef:dc:d9:88:50:3b:55:2c:66:ed:1a:6f:a8:
60:7c:a8:29:f2:35:b7:67:d1:9d:3e:1d:0c:e9:cd:d1:4d:2a:
f8:c2:71:d4:12:dc:0d:2c:05:5d:b7:94:ba:8b:7d:10:8a:1f:
4f:8d:52:c3:9d:e0:53:17:b0:d6:eb:fa:e2:8b:f7:5c:1f:58:
83:75:8f:e9:ef:69:6d:9c:b5:4f:62:e8:1b:2a:63:98:5d:0c:
83:b5:7d:91:55:ae:82:3f:2c:c4:a7:61:80:e1:1f:79:72:39:
e7:8d:e3:45
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVys+rNyER6HBfseANqaCLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTAyMTMzNzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTg3MTRlMWIwYzUwOTYxOGFlNzVmMzE5MWM5MDEwZmQ3MWYxODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Lp96v/N4oA97lvc4LKVA+tVf4O0
lNQrxO4vO1Z5aHbdcaCU07OiV+E7eo4KyA8jBWLImMjGT8SAqzdlcY7rQ/2pq/Vs
pQFsgm6ejIc50wutqO9TJBGkOygTVVOVz5OrP2rD/xFyaKDcXw9QQot2//aUL+Wp
999ZyGeDb7iC3x2bRNGTFKdma6yylAcXgQbR8/C5hBovoRJdrPca0eEeg0f5SHTx
YJZq7mlQUmITrhJHY4pPsHsY1W2ATxJVyiiSSmGHowjRJFlYlIfvfARHx/KPJ4jB
INPt8nsBcCaUCkRgNjrwss7lCc/uu5RrdWjwhV+1J9oNUFB3PiZb9bxePwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFH6HFOGwxQlhiudfMZHJAQ/XHxiKMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvZm9jVTRiREZDV0dLNTE4eGtja0JEOWNmR0lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVCA5AwQA
VCBbAwQBWNgmAwQAWNhdAwQAWNhlAwQAWNiCMA0GCSqGSIb3DQEBCwUAA4IBAQBD
6/NGkc+R0iV3zL1JCR8UMHN2Pa3Y7InL/KDqvgUarHlTuWZG27xAzbCFCSuuhOEp
ibOyEpbAzeXBSUfNgfLWECSw9uvb3EqVYVeTIDg0DfuGdY3nE0D/JtJAlGYcYyvA
hOM11tgfCFfozYc6NKxy4FMqmoCHM/INUqm3ewdXwEv8oR7cdSIUJ0WIRaIZyEbq
dAhSN+/c2YhQO1UsZu0ab6hgfKgp8jW3Z9GdPh0M6c3RTSr4wnHUEtwNLAVdt5S6
i30Qih9PjVLDneBTF7DW6/rii/dcH1iDdY/p72ltnLVPYugbKmOYXQyDtX2RVa6C
PyzEp2GA4R95cjnnjeNF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org