Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gHZRVB4husT5LeArIU8e0P_CJ50.roa
File: gHZRVB4husT5LeArIU8e0P_CJ50.roa (raw, json)
Hash identifier: 94caLUVE/B/CirEaOxDz/VOmGrHsNfQefcPKl1xjZgs=
Subject key identifier: 80:76:51:54:1E:21:BA:C4:F9:2D:E0:2B:21:4F:1E:D0:FF:C2:27:9D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019006FB5B36A06422A2C9362771EA4E663B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gHZRVB4husT5LeArIU8e0P_CJ50.roa
Signing time: Tue 11 Jun 2024 11:07:34 +0000
ROA not before: Tue 11 Jun 2024 11:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.39.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jul 2024 19:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:fb:5b:36:a0:64:22:a2:c9:36:27:71:ea:4e:66:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 11 11:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=807651541e21bac4f92de02b214f1ed0ffc2279d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:42:6d:70:f5:6e:02:41:e7:a4:9f:58:a5:
ab:a4:b9:64:c5:87:89:d4:fd:3a:49:58:e1:b3:66:
52:9e:c7:70:ba:4a:a3:18:43:6b:c3:92:0d:e4:71:
21:ca:40:ba:39:19:72:53:86:4d:34:9f:cb:ca:36:
57:49:e4:27:db:e8:f1:17:f1:8b:15:36:44:74:91:
c2:3a:6b:9a:aa:ff:9a:04:ac:4c:3f:38:67:a5:90:
e6:99:79:7e:5b:07:0e:13:84:38:09:d5:1b:df:06:
37:ac:8f:6a:40:d3:d1:ff:af:fb:10:94:d8:fd:e4:
fa:b8:20:e4:61:60:68:1c:8f:bf:7e:1a:18:db:7d:
a8:9b:62:d4:39:aa:d5:84:78:64:2f:7c:66:8f:27:
9d:72:76:a7:fa:1c:86:14:2d:eb:d6:27:b0:0b:ff:
1b:9a:18:90:72:50:a9:3a:31:c2:e1:95:79:fa:d8:
6e:85:9c:8f:fd:12:9b:4b:10:62:d6:74:bc:74:05:
3b:e1:eb:c7:52:fd:b8:41:7c:c0:97:52:47:bb:9a:
92:21:50:de:1a:78:21:bb:f5:cc:cf:ea:75:46:e2:
c5:c2:5f:ef:1a:10:15:d0:6e:77:b1:81:22:88:07:
6d:3b:ae:6b:a5:ea:74:89:e0:ad:4f:1e:0b:89:e9:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:76:51:54:1E:21:BA:C4:F9:2D:E0:2B:21:4F:1E:D0:FF:C2:27:9D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gHZRVB4husT5LeArIU8e0P_CJ50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.39.0/24
88.216.44.0/23
88.216.93.0/24
88.216.130.0/23
88.216.134.0/23
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:97:41:b0:7f:bb:91:fe:45:8a:c7:15:7d:b8:44:6a:b3:10:
26:3f:79:20:3d:5e:61:6c:af:92:70:90:fb:73:9d:c7:32:4c:
ba:7d:2c:1c:59:25:2d:2b:ce:d9:96:1f:69:e5:d0:05:07:f4:
06:c1:52:c9:5f:99:3d:6b:c6:3c:a4:cf:0f:cd:dc:61:14:2d:
bb:8f:a8:55:33:91:6f:99:64:63:0f:51:d6:1f:e2:a7:cf:6a:
2e:9e:db:51:66:43:fc:c2:ba:5f:1e:62:94:66:ca:e0:b5:b2:
68:1f:e3:08:00:64:2d:a2:41:11:c4:28:c2:9e:38:f9:f5:ac:
0e:55:dd:42:24:c3:89:0c:6d:b6:cf:ab:96:4c:16:17:fe:6f:
a4:f5:be:e5:eb:2c:f7:bf:23:4d:30:8c:a2:fd:55:c4:c5:0f:
c5:d3:26:b5:aa:f5:80:1f:0f:d1:ce:71:c4:21:a8:d6:a8:8b:
d1:4d:2f:79:10:41:5e:40:b1:c8:f5:55:83:a8:c3:c9:27:8d:
0f:34:b1:67:21:3a:23:b2:06:73:74:a4:3c:96:c1:9c:3a:b5:
11:d6:c4:a4:0e:65:76:8f:10:61:0f:b9:fc:c0:3f:d3:37:0f:
aa:a3:15:2d:72:27:d5:ff:d7:39:86:a7:8a:13:2c:b6:55:a4:
72:1b:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 20:58:14 2024 by rpki-client on console-ams.rpki-client.org