Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lVUQOVkuYmmG4heRdxCg-Za5YGs.roa
File: lVUQOVkuYmmG4heRdxCg-Za5YGs.roa (raw, json)
Hash identifier: F9jS6tSydZ35gaSrW9SKUCQyN6QcJTGn015GIuK0xl8=
Subject key identifier: 95:55:10:39:59:2E:62:69:86:E2:17:91:77:10:A0:F9:96:B9:60:6B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01862572409CBCDE50E654FFA18A35EC84CD
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lVUQOVkuYmmG4heRdxCg-Za5YGs.roa
Signing time: Mon 06 Feb 2023 06:38:09 +0000
ROA not before: Mon 06 Feb 2023 06:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.190.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Feb 2023 11:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:72:40:9c:bc:de:50:e6:54:ff:a1:8a:35:ec:84:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 6 06:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95551039592e626986e217917710a0f996b9606b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:86:96:50:32:e1:77:4d:25:70:a8:65:82:
1b:b2:a7:ed:85:a9:55:18:c4:5e:f6:dc:0e:23:b0:
a5:49:53:33:c8:3d:40:7d:21:7b:46:25:25:a7:28:
86:26:74:b6:23:5e:f6:73:04:ec:ce:07:6c:cd:47:
9b:ed:50:4f:68:15:1b:0b:75:11:6f:a9:e6:83:11:
f1:f9:87:91:61:41:9c:32:47:b5:00:88:30:82:be:
dd:a3:55:25:75:6a:84:7e:b2:57:6e:81:17:a5:4e:
a1:29:3a:23:c6:44:fc:c1:50:69:fd:e6:ce:86:0a:
1b:61:37:51:46:97:4c:3d:da:c9:d8:bf:8c:3e:2e:
91:90:a6:d9:2f:f8:4c:71:94:c8:d2:4f:b0:ff:56:
f6:07:e4:20:ac:b5:23:00:c9:13:52:52:c0:d2:0f:
46:53:cc:1c:0f:d5:f9:2c:5f:cc:55:8d:08:9e:ce:
98:5d:29:1f:b3:65:53:a5:23:61:15:69:1e:28:a6:
84:83:00:b1:0f:fd:6e:88:ff:ef:8c:0a:ff:11:51:
c7:5c:44:db:0c:9a:c7:ae:63:81:d9:ac:83:22:e4:
4f:c2:0f:27:3e:a5:70:55:ae:df:5b:5f:a6:1e:20:
6d:32:ec:6f:92:74:26:f4:60:74:48:68:37:01:b4:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:10:39:59:2E:62:69:86:E2:17:91:77:10:A0:F9:96:B9:60:6B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lVUQOVkuYmmG4heRdxCg-Za5YGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0-84.32.28.255
84.32.30.0/24
84.32.46.0/24
84.32.76.0/23
84.32.79.0/24
84.32.179.0/24
84.32.212.0/24
84.32.220.0-84.32.222.255
84.32.240.0/24
84.32.243.0/24
84.32.252.0/23
88.216.17.0/24
88.216.93.0/24
88.216.128.0/23
88.216.132.0-88.216.134.255
88.216.190.0/24
88.216.215.0/24
88.216.220.0/24
88.216.228.0-88.216.239.255
Signature Algorithm: sha256WithRSAEncryption
2a:16:a2:d9:78:95:16:f3:43:58:04:ec:5f:dc:bd:ff:17:f9:
43:09:bf:20:eb:e6:fc:0d:b8:15:82:21:71:cb:88:ac:4d:e0:
59:6d:fa:d1:1d:a1:93:c0:92:4c:c4:96:f0:2a:ea:cd:9f:98:
c6:f9:83:fd:5f:24:de:04:eb:79:e9:dd:1b:04:df:3f:fd:7c:
8b:15:c8:44:94:ef:33:dc:03:39:99:3d:5c:05:ef:48:27:49:
81:62:85:06:61:b8:19:4c:58:f2:2f:14:f4:11:b7:80:93:62:
1c:b7:ae:3b:55:1d:2f:8d:58:04:55:2b:31:37:e1:2a:7e:2a:
12:09:01:36:0c:c1:f8:5d:6b:0e:78:61:04:af:5b:3e:af:01:
a3:01:d1:e5:61:ca:ee:ed:8a:99:d0:04:b8:aa:97:28:dc:95:
c0:4d:2b:e1:f0:60:ef:90:a7:32:b0:4e:cc:02:fa:cd:2c:4b:
de:2a:16:5e:5b:4e:d7:84:f7:20:6d:9b:76:83:61:49:fd:7b:
43:e6:0c:0c:f7:a2:fb:23:c2:3b:71:76:21:0d:20:31:18:f0:
e3:f0:09:6a:cb:63:fc:58:2f:71:07:53:80:fa:6b:8d:64:40:
5f:0b:b5:96:8b:89:70:ef:2b:15:6b:63:9d:f5:ce:2a:49:bd:
85:0f:c6:78
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAYYlckCcvN5Q5lT/oYo17ITNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMjA2MDYzODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTU1MTAzOTU5MmU2MjY5ODZlMjE3OTE3NzEwYTBmOTk2Yjk2MDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbaGllAy4XdNJXCoZYIbsqfthalV
GMRe9twOI7ClSVMzyD1AfSF7RiUlpyiGJnS2I172cwTszgdszUeb7VBPaBUbC3UR
b6nmgxHx+YeRYUGcMke1AIgwgr7do1UldWqEfrJXboEXpU6hKTojxkT8wVBp/ebO
hgobYTdRRpdMPdrJ2L+MPi6RkKbZL/hMcZTI0k+w/1b2B+QgrLUjAMkTUlLA0g9G
U8wcD9X5LF/MVY0Ins6YXSkfs2VTpSNhFWkeKKaEgwCxD/1uiP/vjAr/EVHHXETb
DJrHrmOB2ayDIuRPwg8nPqVwVa7fW1+mHiBtMuxvknQm9GB0SGg3AbQmnQIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFJVVEDlZLmJphuIXkXcQoPmWuWBrMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvbFZVUU9Wa3VZbW1HNGhlUmR4Q2ctWmE1WUdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIwDAME
A1QgGAMEAFQgHAMEAFQgHgMEAFQgLgMEAVQgTAMEAFQgTwMEAFQgswMEAFQg1DAM
AwQCVCDcAwQAVCDeAwQAVCDwAwQAVCDzAwQBVCD8AwQAWNgRAwQAWNhdAwQBWNiA
MAwDBAJY2IQDBABY2IYDBABY2L4DBABY2NcDBABY2NwwDAMEAljY5AMEBFjY4DAN
BgkqhkiG9w0BAQsFAAOCAQEAKhai2XiVFvNDWATsX9y9/xf5Qwm/IOvm/A24FYIh
ccuIrE3gWW360R2hk8CSTMSW8CrqzZ+YxvmD/V8k3gTreendGwTfP/18ixXIRJTv
M9wDOZk9XAXvSCdJgWKFBmG4GUxY8i8U9BG3gJNiHLeuO1UdL41YBFUrMTfhKn4q
EgkBNgzB+F1rDnhhBK9bPq8BowHR5WHK7u2KmdAEuKqXKNyVwE0r4fBg75CnMrBO
zAL6zSxL3ioWXltO14T3IG2bdoNhSf17Q+YMDPei+yPCO3F2IQ0gMRjw4/AJastj
/FgvcQdTgPprjWRAXwu1louJcO8rFWtjnfXOKkm9hQ/GeA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:31 2024 by rpki-client on console-ams.rpki-client.org