Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/grzMBQq5_ooeSYw29VlHacKkz0c.roa
File: grzMBQq5_ooeSYw29VlHacKkz0c.roa (raw, json)
Hash identifier: Bh+r1tOLVuIiRZWmScFGjt1yTIwgrXzCpI8Z1Tdaps8=
Subject key identifier: 82:BC:CC:05:0A:B9:FE:8A:1E:49:8C:36:F5:59:47:69:C2:A4:CF:47
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186215822FA0671AAD7E069EEF1C0A4593E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/grzMBQq5_ooeSYw29VlHacKkz0c.roa
Signing time: Sun 05 Feb 2023 11:31:09 +0000
ROA not before: Sun 05 Feb 2023 11:31:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 84.32.71.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
84.32.109.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:21:58:22:fa:06:71:aa:d7:e0:69:ee:f1:c0:a4:59:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 5 11:31:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82bccc050ab9fe8a1e498c36f5594769c2a4cf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:0b:75:17:78:73:7e:e3:7e:2f:e3:4f:bf:
44:74:6a:cd:90:f9:ed:a6:57:dc:6a:d9:0d:c8:55:
9b:c4:f1:e8:97:e4:74:72:41:65:68:18:bb:5b:9d:
9e:2a:38:d6:46:da:05:31:1b:f8:28:3e:ac:b7:9a:
b0:22:91:3d:e2:df:a3:e7:49:ec:c8:d4:9e:cb:a0:
90:7e:de:e6:bf:ed:17:73:19:d1:af:68:0a:74:16:
f7:8b:d7:0f:91:ab:f4:42:96:c8:27:92:a8:54:d8:
e7:53:a8:dc:ef:24:38:57:8c:cc:7c:2f:39:fe:9f:
e3:9a:e8:87:d3:44:d3:c1:39:f5:47:30:14:34:ef:
ed:c9:54:4f:e5:03:60:0e:5f:ad:54:32:d7:ed:d7:
be:47:5a:dd:ca:6b:e8:f8:6b:99:de:8f:6d:7a:46:
6c:f3:81:73:6b:ac:22:9d:a5:9e:12:be:fc:51:83:
7d:75:d6:f1:ac:1c:d9:7f:77:16:14:74:bc:61:c4:
23:8d:51:64:d9:25:a9:2f:f3:75:12:b4:64:41:4b:
26:7c:ef:9f:8d:94:9b:92:c8:4f:aa:eb:76:40:f6:
0d:48:a0:f5:af:58:da:4a:e7:52:60:89:fe:65:6d:
68:7a:f0:51:5b:56:95:f9:45:20:64:41:f7:bf:d5:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BC:CC:05:0A:B9:FE:8A:1E:49:8C:36:F5:59:47:69:C2:A4:CF:47
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/grzMBQq5_ooeSYw29VlHacKkz0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.24.0/24
84.32.50.0/24
84.32.71.0/24
84.32.88.0/24
84.32.108.0/23
84.32.150.0/23
84.32.177.0/24
84.32.218.0/24
84.32.220.0/24
84.32.232.0/24
84.32.239.0/24
84.32.245.0/24
88.216.3.0/24
88.216.32.0/24
88.216.46.0/24
88.216.92.0/24
88.216.199.0/24
88.216.210.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7c:cb:0b:e8:1e:5e:c4:be:d5:7c:71:35:01:9a:22:1b:0f:
6a:a1:a5:51:bd:0e:8f:73:f0:3a:27:37:d2:c3:e9:b4:f6:3b:
c1:17:4e:ba:cb:93:be:f3:c6:ba:72:8e:aa:c9:4b:2e:c1:1c:
df:42:3d:f3:5b:22:22:94:13:ec:74:01:39:f3:51:2e:e4:9f:
8e:a8:f3:7d:84:37:d2:8c:a7:f4:4d:3f:0f:52:75:cb:3c:f6:
74:96:a4:a9:3a:7e:9e:40:b0:f5:82:8b:d7:13:5a:89:c0:a3:
18:66:74:92:6f:5a:0c:bc:fd:a9:b8:b7:5b:c5:a5:61:17:0e:
38:6a:e4:b4:b0:d6:cd:2f:b8:ed:fd:62:86:f7:46:ab:4a:86:
8f:77:07:31:e1:2d:7e:3c:13:63:09:c6:a3:21:9e:a0:b3:d1:
c1:39:fe:e0:a3:03:f5:b5:64:3b:5b:fd:98:08:ef:93:c1:98:
7e:83:d6:22:f3:8e:2a:af:63:9b:21:4b:19:8e:6c:a3:9f:ed:
cb:45:90:29:91:b3:40:c5:f4:48:86:f0:9d:3f:26:37:e1:02:
53:e2:7e:e8:8f:11:3c:b1:33:54:5f:4d:5f:1f:d9:f2:f8:9b:
43:83:fe:2b:fa:fd:cd:4d:39:8f:c8:ad:bc:c8:1b:f5:bf:cf:
56:08:5d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org