Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/he3UE7cfkH7mRSuEl2-KR1__-Y0.roa
File: he3UE7cfkH7mRSuEl2-KR1__-Y0.roa (raw, json)
Hash identifier: cH+t+jHrUD1ZopUE5XzwIdEVY7WJkEE73pTqkgQO+T8=
Subject key identifier: 85:ED:D4:13:B7:1F:90:7E:E6:45:2B:84:97:6F:8A:47:5F:FF:F9:8D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186A0BD5B345EAE56674714EAAD35E85C35
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/he3UE7cfkH7mRSuEl2-KR1__-Y0.roa
Signing time: Thu 02 Mar 2023 05:13:29 +0000
ROA not before: Thu 02 Mar 2023 05:13:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.186.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.229.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a0:bd:5b:34:5e:ae:56:67:47:14:ea:ad:35:e8:5c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 2 05:13:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85edd413b71f907ee6452b84976f8a475ffff98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:8e:9d:a1:46:5e:09:f4:4c:f7:98:e9:88:
91:e1:22:e5:7e:4b:03:f0:c1:07:e7:18:63:49:96:
2f:13:c4:51:c6:0b:08:5d:19:4c:c6:4f:e3:ba:8f:
11:18:ac:60:c3:59:16:67:72:14:ee:f8:5a:0f:b2:
b8:2c:eb:5d:7f:49:81:89:da:15:12:51:5a:a9:ae:
8f:a5:0d:a4:aa:8e:6b:3b:6b:3c:58:34:f7:21:17:
4e:85:54:b9:d4:3f:a3:1e:db:45:8b:1e:9d:fd:da:
74:67:47:e3:2c:a9:6d:f7:5b:7d:ab:a1:57:46:de:
76:c5:e8:7e:72:b2:31:d8:4b:ca:d0:20:2e:e4:15:
01:29:34:00:51:7b:7d:2d:1c:03:1a:83:e7:a5:c5:
78:6f:79:26:25:76:82:2b:4d:83:8e:93:ff:e5:cd:
f5:d2:af:dd:ae:9b:99:72:b6:86:c4:c5:ac:95:02:
04:8a:9f:c2:82:e5:8a:64:a9:c8:f2:90:90:68:e6:
34:e0:96:46:3e:13:2f:eb:49:e7:70:fb:69:08:70:
63:18:b8:7b:2b:03:07:b0:13:16:82:e2:4b:e0:81:
62:89:29:f8:e9:27:84:5d:60:7a:8b:bb:f6:6d:5b:
5f:49:e2:e7:98:24:18:ba:7c:9c:b8:dc:ee:c3:3f:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:ED:D4:13:B7:1F:90:7E:E6:45:2B:84:97:6F:8A:47:5F:FF:F9:8D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/he3UE7cfkH7mRSuEl2-KR1__-Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.71.0/24
84.32.76.0/23
84.32.79.0/24
84.32.88.0/24
84.32.148.0/22
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.221.0-84.32.222.255
84.32.229.0/24
84.32.232.0/24
84.32.239.0-84.32.240.255
84.32.242.0/23
84.32.245.0/24
84.32.252.0/23
88.216.1.0/24
88.216.3.0/24
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.92.0/23
88.216.128.0/24
88.216.132.0-88.216.134.255
88.216.186.0/24
88.216.189.0-88.216.190.255
88.216.199.0/24
88.216.215.0/24
88.216.220.0/24
88.216.228.0-88.216.235.255
Signature Algorithm: sha256WithRSAEncryption
9d:cd:73:f9:66:b0:f2:95:ec:f9:88:82:9e:83:25:80:b2:4a:
17:d9:a9:9c:d5:4e:54:3f:7a:cb:53:7b:53:dd:9c:d8:21:2f:
19:64:37:89:4d:a8:92:2e:66:93:98:5a:0b:35:f0:4a:10:28:
ef:4e:29:07:e0:7b:2d:f5:cf:e1:bb:a0:34:a3:64:83:55:6c:
e3:c8:58:aa:a5:72:29:53:7c:2c:53:b3:41:a9:25:d6:60:83:
c0:6d:00:ff:f2:fb:2b:ab:04:ba:22:ca:a4:29:5e:23:2a:ce:
ff:3f:6c:9a:ac:6c:d7:ee:0b:41:9a:8e:2b:74:a1:16:b3:38:
ac:67:3a:ec:29:94:88:e8:9d:d2:73:f8:ee:39:76:f0:8e:5b:
f0:be:24:ce:61:53:6c:5c:4d:cc:03:b6:17:8d:b1:fe:92:50:
5f:7e:89:eb:38:96:eb:34:67:6b:b1:6e:1a:01:d6:95:f0:b7:
5e:2c:67:6e:0d:85:2d:8b:9e:e2:60:40:06:56:3b:56:9c:1a:
d3:f5:85:43:d5:70:b7:38:f4:fd:21:f5:a6:6b:90:1b:fa:80:
1a:b4:d6:de:4c:2c:84:60:ea:d8:3e:a0:17:50:da:65:66:f5:
c0:50:b3:28:74:61:a4:b4:0e:07:9a:ea:34:b4:c0:bc:f5:00:
0a:11:f8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org