Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qE7k_t0gk6fVGBPljkHDSOng6RM.roa
File: qE7k_t0gk6fVGBPljkHDSOng6RM.roa (raw, json)
Hash identifier: mOFSTrO394PgGAj2vQtFTZbFQkL/8O9DCs60BHEx+zc=
Subject key identifier: A8:4E:E4:FE:DD:20:93:A7:D5:18:13:E5:8E:41:C3:48:E9:E0:E9:13
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01866B0508A875545398BA8D4C23049A9E37
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qE7k_t0gk6fVGBPljkHDSOng6RM.roa
Signing time: Sun 19 Feb 2023 18:52:17 +0000
ROA not before: Sun 19 Feb 2023 18:52:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.186.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
88.216.108.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
84.32.109.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 14:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6b:05:08:a8:75:54:53:98:ba:8d:4c:23:04:9a:9e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 19 18:52:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a84ee4fedd2093a7d51813e58e41c348e9e0e913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:74:b9:3d:cf:cb:64:d9:86:cf:f4:ee:cc:
bc:2c:37:6d:6e:04:cf:d7:c5:6b:4f:90:60:df:ad:
ed:77:b8:8e:1d:b3:cc:43:ee:29:97:80:ce:ef:1a:
a6:68:f3:48:f9:47:14:d6:04:7e:47:2c:78:e4:77:
5d:f1:96:c9:63:7d:94:ae:99:1b:05:9f:5a:22:3d:
9d:82:35:6c:06:8f:fa:9a:32:b2:2a:04:6f:b0:ca:
9d:5c:02:ed:4e:17:16:a8:b8:3f:43:53:88:6f:fa:
d5:50:44:ee:3c:f3:35:ce:32:37:9c:5e:1c:a4:22:
8c:a5:78:52:32:3e:9a:10:75:7e:95:9f:77:18:50:
94:63:e5:95:07:7c:73:48:b4:8a:9a:24:6d:e4:4c:
50:f6:0d:76:51:ea:50:f6:03:e6:41:8d:33:4f:33:
c0:96:2b:36:65:e2:b1:8c:da:4f:30:e3:f4:7c:64:
a4:22:ed:7c:38:8b:62:42:30:7f:9b:a6:d8:bd:1c:
b6:86:09:94:d6:b7:f1:4e:62:ae:22:83:d0:29:e4:
43:e0:49:8c:2e:54:51:72:1d:5b:5e:47:e9:25:a6:
7f:da:5c:f7:0a:8d:07:0d:fa:d7:55:90:e1:df:bc:
61:a7:34:53:1b:18:b6:b3:19:4a:1e:bd:70:c6:65:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:E4:FE:DD:20:93:A7:D5:18:13:E5:8E:41:C3:48:E9:E0:E9:13
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qE7k_t0gk6fVGBPljkHDSOng6RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.76.0/23
84.32.79.0/24
84.32.109.0/24
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.220.0-84.32.222.255
84.32.240.0/24
84.32.242.0/23
84.32.252.0/23
88.216.17.0/24
88.216.21.0/24
88.216.32.0/24
88.216.93.0/24
88.216.108.0/24
88.216.128.0/24
88.216.132.0-88.216.134.255
88.216.186.0/24
88.216.189.0-88.216.190.255
88.216.213.0/24
88.216.215.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
10:2d:66:52:e8:be:a9:c7:56:51:5b:39:8e:fe:ed:4a:13:6f:
15:00:64:f4:1c:3d:8a:82:99:8d:22:cc:30:e9:ee:f7:91:04:
e8:34:e3:5c:10:41:b4:eb:57:db:84:b3:cb:b9:23:7e:97:e9:
28:e5:00:f6:38:4c:f4:a2:67:11:74:9a:f5:3f:9c:d3:c7:d0:
68:29:26:5a:17:46:71:4d:71:c3:3b:3c:f1:b4:19:df:f2:05:
07:84:3d:f1:80:56:73:81:19:c6:50:e8:79:57:49:fb:e9:cc:
e0:93:3a:04:22:15:93:d4:87:26:5a:93:eb:ff:15:3e:c5:bc:
77:7f:0f:c6:8f:0c:84:42:9b:38:b5:84:71:ef:87:a4:3a:8f:
a2:01:e1:eb:87:cf:5b:da:e5:33:2e:fb:20:6b:d2:e4:8a:3d:
76:6f:f1:3d:31:0e:de:b2:47:ed:1f:d1:35:85:48:cc:d5:12:
7f:c6:4b:3c:21:44:38:59:5d:69:b7:bd:9c:af:22:7b:88:e6:
cd:85:9c:51:f2:83:48:88:b7:74:28:66:72:7f:1f:24:eb:36:
81:fd:7c:c1:60:5d:64:f1:20:ce:65:1b:72:c2:bb:96:71:52:
b7:ba:7e:60:22:5e:49:81:4e:64:dc:1c:3b:da:c0:04:ab:d6:
de:72:21:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:31 2024 by rpki-client on console-ams.rpki-client.org