Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/my5cH9K96S_DTIKCd0Hf1vu7jBA.roa
File: my5cH9K96S_DTIKCd0Hf1vu7jBA.roa (raw, json)
Hash identifier: 4vH6uYdaAdHxIgrJ1knFj7sJrbsu5XGkZvBndNdVsUg=
Subject key identifier: 9B:2E:5C:1F:D2:BD:E9:2F:C3:4C:82:82:77:41:DF:D6:FB:BB:8C:10
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01892F0F116410A8AABDD33BC61F59988896
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/my5cH9K96S_DTIKCd0Hf1vu7jBA.roa
Signing time: Fri 07 Jul 2023 06:34:23 +0000
ROA not before: Fri 07 Jul 2023 06:34:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 84.32.76.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:0f:11:64:10:a8:aa:bd:d3:3b:c6:1f:59:98:88:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 7 06:34:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b2e5c1fd2bde92fc34c82827741dfd6fbbb8c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:2d:6c:23:f7:d6:85:36:a5:ca:9e:f0:a8:
24:6a:7c:57:45:1d:e4:21:d2:7f:a9:bf:6b:a3:da:
85:02:48:6a:92:6a:f2:e1:50:cd:8e:b8:63:fb:7f:
b2:cc:62:dc:50:e0:12:5b:f4:82:b4:e1:33:04:d4:
81:3e:62:03:39:f8:20:b3:35:b2:be:fe:21:b7:a9:
17:2e:9a:c0:84:cb:d2:a7:34:e9:d4:de:ed:98:ff:
47:c9:59:05:32:26:a9:9f:a1:15:5a:a7:93:14:bb:
3f:11:05:de:2a:c0:5a:d9:62:bd:21:6b:21:ac:a6:
c5:3b:16:26:06:79:10:d2:c3:4e:89:56:b4:b7:cf:
f7:8a:62:f1:0d:d5:03:78:ad:90:60:4b:67:9e:ef:
66:dd:ca:c6:3a:55:3d:a5:d6:c2:bf:3d:62:99:fc:
92:f2:b6:17:3a:be:fd:4a:e4:dc:9a:45:31:35:07:
fa:6f:77:d8:c1:8b:2a:80:96:88:c0:f1:74:a6:2d:
6a:8f:c1:42:de:66:ec:a7:97:80:92:71:68:7e:f1:
7a:b6:22:70:64:0c:e6:d0:53:36:4a:a5:d8:64:4f:
62:7c:38:fd:a8:41:cc:e4:17:11:e8:5a:cb:74:e4:
ae:0d:8b:19:db:83:b4:4a:f3:c1:6e:1a:cb:b7:44:
53:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2E:5C:1F:D2:BD:E9:2F:C3:4C:82:82:77:41:DF:D6:FB:BB:8C:10
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/my5cH9K96S_DTIKCd0Hf1vu7jBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.26.0/24
84.32.76.0/24
84.32.79.0/24
84.32.94.0/24
84.32.155.0/24
84.32.210.0/23
84.32.243.0/24
84.32.255.0/24
88.216.190.0/23
88.216.198.0/24
88.216.211.0/24
Signature Algorithm: sha256WithRSAEncryption
67:25:4f:5f:71:d7:b3:d9:dd:83:91:16:6b:3b:4f:18:0e:be:
d8:f9:8e:f2:59:4c:8f:20:ce:b9:61:24:af:e8:95:d4:3b:c1:
dd:03:e6:f0:d8:a7:e1:65:ec:ca:ae:24:33:d1:39:39:41:71:
35:47:cb:08:69:2a:4f:88:f0:76:d5:b0:ba:4d:01:0e:ce:a4:
f5:56:65:1e:ae:d3:06:55:05:e0:77:9f:13:c4:a6:d1:73:7a:
ad:ad:b3:72:73:3b:98:61:b8:3d:ff:bb:60:99:f4:d1:a8:7c:
74:e0:5c:b1:e6:ca:22:27:1a:2c:14:88:e1:9d:46:22:a2:a1:
a8:9e:a6:7e:e3:2c:99:65:56:22:de:0c:1d:f0:35:87:e8:c2:
38:58:fa:7e:1f:21:e2:75:f8:65:4c:0a:86:c2:d8:06:91:7d:
a9:51:59:5e:1f:40:4e:03:39:04:fe:f1:ae:4d:42:f4:b3:22:
43:6d:8a:da:4f:c4:24:e1:d3:20:7b:9c:64:b5:49:8c:29:bb:
50:63:40:84:2c:8c:5e:ce:52:84:1b:98:9a:6b:3f:a8:9b:41:
90:69:38:24:24:51:56:9c:1c:98:37:0a:09:7f:42:c9:4e:ae:
f2:64:22:1d:fa:46:c5:93:69:e9:29:1b:4a:6e:cb:38:61:9e:
53:a4:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org