Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kUxD3Uxfm6ONLHxl_Kf3RSRi-cc.roa
File: kUxD3Uxfm6ONLHxl_Kf3RSRi-cc.roa (raw, json)
Hash identifier: dG3VdXZVG11xuD5E3BJ/9zUH/WRQa2s4l2HTXbRoFiU=
Subject key identifier: 91:4C:43:DD:4C:5F:9B:A3:8D:2C:7C:65:FC:A7:F7:45:24:62:F9:C7
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018DA667E0BEB424C71EAB9DBFCC125B8A4D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kUxD3Uxfm6ONLHxl_Kf3RSRi-cc.roa
Signing time: Wed 14 Feb 2024 06:57:22 +0000
ROA not before: Wed 14 Feb 2024 06:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.216.0/24 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 08:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:67:e0:be:b4:24:c7:1e:ab:9d:bf:cc:12:5b:8a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 14 06:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=914c43dd4c5f9ba38d2c7c65fca7f7452462f9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:bc:30:3d:21:45:d7:1d:0a:4f:c7:a5:ec:
40:a5:25:82:a5:b2:b7:10:ad:18:4d:06:4e:70:31:
75:65:8a:04:5d:14:8d:21:50:7e:18:14:95:5e:68:
9c:26:fd:1d:47:f8:07:4b:a8:de:80:a3:60:3f:7a:
c6:84:a0:21:67:d4:0c:cf:79:54:64:43:70:8d:50:
24:0c:90:41:de:df:c2:5d:76:f3:0b:20:75:f6:d1:
86:82:4d:18:f4:78:a2:60:7a:7e:72:b4:b0:6a:f8:
ee:46:e5:a4:91:22:4d:bf:d5:54:9e:b9:04:ec:55:
01:33:03:5b:d0:99:7a:84:a6:42:5c:a2:6f:5d:08:
c5:e4:50:9c:dd:27:78:f2:38:2b:22:0b:31:66:1e:
53:a0:49:a3:25:ae:52:88:82:22:4c:a9:5a:57:b4:
ae:fd:9f:44:ab:47:d2:44:57:38:ab:74:e4:39:c8:
75:15:18:2f:74:77:49:40:82:e5:dc:68:25:26:0d:
69:a8:a6:25:a3:a9:1b:93:38:83:ff:59:9a:e1:c9:
e5:58:af:83:d0:a1:8b:80:0a:d7:d5:41:ff:0d:8e:
f2:3f:30:29:40:b0:ba:5d:ff:34:4d:62:c5:9f:d2:
b6:27:a9:18:1a:1f:fe:da:9d:1f:17:7d:54:6b:ca:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4C:43:DD:4C:5F:9B:A3:8D:2C:7C:65:FC:A7:F7:45:24:62:F9:C7
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kUxD3Uxfm6ONLHxl_Kf3RSRi-cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.210.0/24
84.32.214.0-84.32.216.255
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.187.0-88.216.191.255
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:73:b0:46:a6:e3:77:12:1b:9d:33:64:b1:f4:f9:e5:18:f3:
ff:07:63:66:d9:ba:ac:42:57:b8:20:4a:d0:22:98:16:8b:9a:
df:18:a3:af:8e:c6:bb:de:02:39:88:a2:fa:92:75:87:47:5a:
0d:f9:3a:fb:f4:b8:a9:a0:cf:8c:3f:1b:a5:40:db:63:fa:6e:
ce:6d:31:04:16:a6:b6:d9:ec:a6:37:9e:08:75:1d:8e:53:18:
bb:28:fc:b9:be:12:9c:23:8f:de:a6:19:65:68:27:4b:ac:11:
f5:d3:59:13:3c:e5:c0:05:da:de:43:be:19:35:1f:ef:4e:43:
46:2c:3a:9e:cd:d8:ae:ba:d7:ef:a2:49:1c:37:d5:09:ef:43:
1a:c6:cd:d6:2d:d4:8a:d2:2e:1b:92:a8:09:6e:7e:65:a9:55:
82:b1:8b:e0:a7:fe:4a:ca:92:33:57:da:9d:08:66:7a:f7:f4:
0d:81:70:bd:95:f3:37:fa:b5:80:ed:66:f0:c9:cf:e0:f9:ae:
e2:65:fd:91:97:11:82:c9:e5:71:cd:3e:eb:84:6f:f6:1f:d2:
e1:66:00:b7:77:7d:d3:a2:6c:ca:8c:20:45:41:38:8f:19:fd:
ce:5a:b5:5d:7e:1f:1e:cd:bb:80:c8:d9:d1:9c:73:b3:1a:e5:
e7:35:f8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 12:45:17 2024 by rpki-client on console-ams.rpki-client.org