Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pd4Z5DGgAMclN4ykrqPT3q10LLI.roa
File: pd4Z5DGgAMclN4ykrqPT3q10LLI.roa (raw, json)
Hash identifier: b0DciUjvmUoZY1HhIQx2UOUeZdhaoHK259Wpo4NpikY=
Subject key identifier: A5:DE:19:E4:31:A0:00:C7:25:37:8C:A4:AE:A3:D3:DE:AD:74:2C:B2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018654D99DFC72B64F42A299D4AD0672DAFD
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pd4Z5DGgAMclN4ykrqPT3q10LLI.roa
Signing time: Wed 15 Feb 2023 11:33:13 +0000
ROA not before: Wed 15 Feb 2023 11:33:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.190.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.218.0/24 maxlen: 24
88.216.108.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 12:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:d9:9d:fc:72:b6:4f:42:a2:99:d4:ad:06:72:da:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 15 11:33:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5de19e431a000c725378ca4aea3d3dead742cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:ed:a0:19:6e:e8:de:58:6e:75:fc:8f:9f:
89:c2:29:fc:22:61:88:fb:0e:62:2e:c3:1f:a3:c2:
57:45:f0:1a:e8:80:85:c2:e9:37:3c:ad:4a:fe:7b:
7e:8f:b2:25:f5:f6:b9:36:45:09:1a:8e:ad:a3:80:
dd:02:9a:2b:9a:8c:18:2a:89:f5:ab:e5:9c:2a:34:
ae:82:9d:5a:1b:5a:10:c5:f7:30:d4:46:af:25:e1:
55:2e:86:7b:4d:c1:5a:f0:77:dc:fa:72:64:2a:b9:
c9:97:69:82:eb:bd:f5:bd:d1:40:70:ed:01:49:1e:
9d:81:14:f8:f5:e1:86:a9:bd:0d:bc:30:e0:68:0e:
a1:64:08:32:c6:59:56:60:95:08:be:5f:86:73:8e:
9f:30:4c:30:ff:2f:e8:af:f6:0c:0a:dc:57:75:5d:
bc:fa:dd:4a:54:c5:74:d5:34:49:50:b1:57:46:a1:
b5:27:a7:25:92:95:d1:4e:d0:5a:ed:cf:41:e0:55:
16:25:dd:59:43:d9:da:4b:bd:55:87:95:1b:d8:91:
51:79:b7:56:86:25:d5:20:4a:4d:52:ea:7a:3d:67:
98:dc:74:95:ed:cc:e2:02:5c:45:ff:58:9a:fd:3f:
f2:76:92:fd:36:62:2a:18:4a:7e:89:fd:20:eb:6e:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DE:19:E4:31:A0:00:C7:25:37:8C:A4:AE:A3:D3:DE:AD:74:2C:B2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pd4Z5DGgAMclN4ykrqPT3q10LLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.76.0/23
84.32.79.0/24
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.218.0/24
84.32.220.0-84.32.222.255
84.32.240.0/24
84.32.242.0/23
84.32.252.0/23
88.216.17.0/24
88.216.93.0/24
88.216.108.0/24
88.216.128.0/23
88.216.132.0-88.216.134.255
88.216.190.0/24
88.216.213.0/24
88.216.215.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1c:f3:6e:f6:43:2b:92:09:7c:0e:77:bd:5f:d6:4e:a1:3e:
3a:70:59:0e:eb:6e:70:35:90:0f:ea:76:ea:e5:43:59:aa:a7:
86:42:dd:6a:b8:06:b0:aa:f5:5f:be:d4:48:5f:69:8b:66:99:
90:d8:e5:ff:54:7b:79:ad:85:67:bd:aa:40:ab:f9:74:1c:66:
f8:8c:43:ce:82:30:09:39:d6:63:2c:03:84:e6:7e:b7:d6:5a:
ea:4c:78:c9:8a:23:7c:cf:94:6c:14:a9:f8:f6:87:bb:29:0c:
f5:38:94:87:e4:9a:62:ef:21:21:29:18:ed:ee:42:98:54:12:
93:c9:5f:38:13:95:64:e7:19:d4:18:dc:0a:24:8b:09:cf:70:
cf:f6:63:f1:e4:74:ea:a5:cb:83:9b:35:88:42:2a:be:6d:10:
15:cd:7f:ec:7b:63:c3:9e:7b:96:5f:26:62:37:b1:b7:5e:fc:
93:d5:95:d8:e4:78:37:8b:ba:6e:6e:5f:0a:19:f0:0e:d4:08:
5f:be:e6:40:19:ed:3f:14:b0:a8:ca:a5:7e:9b:af:aa:75:36:
d0:80:bf:a5:73:21:71:0f:37:60:da:1e:d5:ce:91:b9:08:17:
97:f3:de:83:23:bf:91:d3:f8:60:8a:8a:71:b3:26:da:c6:b9:
fe:86:bf:9b
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISAYZU2Z38crZPQqKZ1K0Gctr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMjE1MTEzMzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWRlMTllNDMxYTAwMGM3MjUzNzhjYTRhZWEzZDNkZWFkNzQyY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmDtoBlu6N5YbnX8j5+Jwin8ImGI
+w5iLsMfo8JXRfAa6ICFwuk3PK1K/nt+j7Il9fa5NkUJGo6to4DdApormowYKon1
q+WcKjSugp1aG1oQxfcw1EavJeFVLoZ7TcFa8Hfc+nJkKrnJl2mC6731vdFAcO0B
SR6dgRT49eGGqb0NvDDgaA6hZAgyxllWYJUIvl+Gc46fMEww/y/or/YMCtxXdV28
+t1KVMV01TRJULFXRqG1J6clkpXRTtBa7c9B4FUWJd1ZQ9naS71Vh5Ub2JFRebdW
hiXVIEpNUup6PWeY3HSV7cziAlxF/1ia/T/ydpL9NmIqGEp+if0g624xOQIDAQAB
o4ICnDCCApgwHQYDVR0OBBYEFKXeGeQxoADHJTeMpK6j096tdCyyMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvcGQ0WjVER2dBTWNsTjR5a3JxUFQzcTEwTExJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjCBmwQCAAEwgZQDBAJU
IBgDBABUIB4DBABUIC4DBAFUIEwDBABUIE8DBABUILMDBABUINQDBAFUINYDBABU
INowDAMEAlQg3AMEAFQg3gMEAFQg8AMEAVQg8gMEAVQg/AMEAFjYEQMEAFjYXQME
AFjYbAMEAVjYgDAMAwQCWNiEAwQAWNiGAwQAWNi+AwQAWNjVAwQAWNjXAwQAWNjc
MA0GCSqGSIb3DQEBCwUAA4IBAQCFHPNu9kMrkgl8Dne9X9ZOoT46cFkO625wNZAP
6nbq5UNZqqeGQt1quAawqvVfvtRIX2mLZpmQ2OX/VHt5rYVnvapAq/l0HGb4jEPO
gjAJOdZjLAOE5n631lrqTHjJiiN8z5RsFKn49oe7KQz1OJSH5Jpi7yEhKRjt7kKY
VBKTyV84E5Vk5xnUGNwKJIsJz3DP9mPx5HTqpcuDmzWIQiq+bRAVzX/se2PDnnuW
XyZiN7G3XvyT1ZXY5Hg3i7publ8KGfAO1AhfvuZAGe0/FLCoyqV+m6+qdTbQgL+l
cyFxDzdg2h7VzpG5CBeX896DI7+R0/hgiopxsybaxrn+hr+b
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:31 2024 by rpki-client on console-ams.rpki-client.org