Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mrDj1IX9IytrVIyrvAzHSlBiEQY.roa
File: mrDj1IX9IytrVIyrvAzHSlBiEQY.roa (raw, json)
Hash identifier: KAc87bFlJ/G339X6srZdH4smnOjIsdwuVnCqzkGr8yA=
Subject key identifier: 9A:B0:E3:D4:85:FD:23:2B:6B:54:8C:AB:BC:0C:C7:4A:50:62:11:06
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A82D06EDD905ED40C58AB3BFC19A6E0E1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mrDj1IX9IytrVIyrvAzHSlBiEQY.roa
Signing time: Mon 11 Sep 2023 05:56:52 +0000
ROA not before: Mon 11 Sep 2023 05:56:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 84.32.52.0/22 maxlen: 24
88.216.185.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
88.216.212.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
84.32.6.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.20.0/24 maxlen: 24
88.216.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:82:d0:6e:dd:90:5e:d4:0c:58:ab:3b:fc:19:a6:e0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 11 05:56:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ab0e3d485fd232b6b548cabbc0cc74a50621106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:8c:68:c7:3c:18:83:4a:61:b0:1c:78:d1:
b4:6d:71:25:7d:ce:4c:51:51:38:82:71:91:d3:01:
e7:f9:2e:f8:de:b3:ce:35:62:ec:28:f1:8d:46:8a:
25:7b:b1:10:8a:30:c1:0c:88:6d:b7:81:0d:56:4e:
1b:5e:2a:3c:33:43:98:b6:f0:73:fe:34:80:1a:a3:
8e:f0:9e:08:9a:08:2c:6f:ab:7a:39:69:ce:6c:01:
26:1c:cf:7b:a8:d3:3c:13:d0:c3:ed:f5:a4:2b:00:
5b:b9:a0:d6:80:2e:97:b2:c6:35:be:e8:c0:53:81:
57:47:e7:83:a1:86:b6:f2:05:28:a5:2f:70:3e:95:
10:c9:79:ba:c8:61:5a:e4:c5:c1:f3:ce:2f:45:c0:
b0:2d:93:0b:a2:f8:b5:1d:8c:9e:a8:dc:65:75:f3:
34:10:66:63:c0:b5:c2:44:76:90:6d:c9:86:bb:88:
1f:e4:7d:33:98:f0:0c:0f:da:86:38:8b:73:17:9f:
98:7d:04:57:bd:48:f8:1a:d6:c3:d7:36:33:0f:88:
ed:af:cd:d3:7c:b8:0c:25:75:ec:41:aa:17:1a:ee:
0a:6a:a5:ad:6f:2d:a2:b3:e1:a7:cb:de:2a:0f:7e:
c5:c4:5b:c3:77:16:e9:ef:52:e6:a0:ce:b7:b7:d7:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B0:E3:D4:85:FD:23:2B:6B:54:8C:AB:BC:0C:C7:4A:50:62:11:06
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mrDj1IX9IytrVIyrvAzHSlBiEQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
84.32.52.0/22
84.32.95.0/24
88.216.20.0/23
88.216.98.0/24
88.216.103.0/24
88.216.185.0/24
88.216.212.0/23
88.216.215.0/24
88.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
67:5f:f9:90:79:95:62:ec:ba:51:3d:ed:cf:50:3d:86:3d:6f:
c8:d5:50:06:ff:06:56:29:b4:2a:84:c8:8f:a0:b2:4d:10:ee:
11:7e:b1:87:6c:e8:cf:fd:7d:67:3b:f4:a5:79:8b:cd:c6:66:
03:bf:1a:08:b4:0b:2c:52:b2:f0:d9:67:9c:9f:c0:8d:57:2d:
84:ea:8e:d5:ff:ce:b4:26:ca:1d:d5:17:d7:75:5e:ea:70:7c:
37:41:fe:ef:d8:03:9b:f5:d4:9e:f3:10:94:3b:06:d2:e8:8c:
d5:87:ef:89:e1:4c:10:09:ed:3f:bc:8f:cc:83:6a:59:52:bd:
8a:3d:57:a0:37:9a:1d:f3:2c:d9:bd:e9:b6:5b:3c:de:4e:f6:
3a:40:e3:e1:14:34:de:0f:73:b3:69:7b:d3:71:bd:1c:9d:4e:
1a:f8:9e:51:78:6b:cb:29:a2:24:50:ca:be:e2:91:02:b4:ee:
d6:16:09:45:23:b0:74:c3:0b:cf:10:d0:e5:5d:f0:97:09:b7:
19:97:52:58:21:7a:09:7d:7b:be:40:7e:b1:fb:8b:d5:a8:a8:
b3:a5:9b:b4:10:cc:64:66:3b:c7:75:d8:ea:43:cc:b9:a3:ea:
02:c3:9d:cc:42:83:d3:60:82:44:59:d6:51:a0:84:c4:4d:e5:
09:46:5e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 07:04:02 2023 by rpki-client on console-fra.rpki-client.org