Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rrR3UZ45twxl7jsFV4h6k7KAzXE.roa
File: rrR3UZ45twxl7jsFV4h6k7KAzXE.roa (raw, json)
Hash identifier: lCYDSUR0qYVHORQuBuwL8PO/sC20ixw0XIJsEqXJsiw=
Subject key identifier: AE:B4:77:51:9E:39:B7:0C:65:EE:3B:05:57:88:7A:93:B2:80:CD:71
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018E37475455C84AC205A8931548B18DABCE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rrR3UZ45twxl7jsFV4h6k7KAzXE.roa
Signing time: Wed 13 Mar 2024 10:06:45 +0000
ROA not before: Wed 13 Mar 2024 10:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 10:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:47:54:55:c8:4a:c2:05:a8:93:15:48:b1:8d:ab:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 13 10:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aeb477519e39b70c65ee3b0557887a93b280cd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:34:f1:ff:af:43:de:15:7d:fb:fe:4c:4f:df:
6a:22:0a:76:05:d5:76:aa:09:f4:cb:23:62:8f:57:
e4:cb:6b:f4:87:c9:09:5c:39:4e:0a:a5:dd:7b:22:
b6:90:06:45:78:f4:6b:2a:c8:37:5b:c4:38:ee:60:
4c:73:49:11:f8:90:41:26:a7:03:7d:e1:6b:b7:42:
82:e5:70:75:00:69:dd:40:19:46:05:d6:c1:ab:c2:
bc:93:c6:65:b2:12:17:35:e3:1f:5f:68:6b:6b:41:
ec:41:fe:8a:64:f2:4e:38:bb:ae:71:8f:48:cb:44:
72:c4:f7:cc:8e:a1:07:b3:7e:72:33:81:49:38:51:
dc:0b:1b:2f:40:2e:1e:41:48:e3:de:ba:fc:e0:a0:
f7:a7:9d:f4:68:98:4e:4e:74:ec:34:69:ca:34:53:
18:f4:fd:a3:43:f3:45:83:e0:ad:87:fa:49:df:6f:
c2:82:2f:53:fc:aa:6c:d3:02:64:93:74:03:c4:ea:
99:0c:02:71:92:b6:7b:5d:33:83:26:05:6e:e9:95:
b2:60:fe:19:d1:b3:38:22:18:5f:71:61:bc:f0:95:
35:5f:f9:b4:96:60:c7:6c:17:d1:a2:43:d1:2c:ec:
28:79:43:9a:d4:3d:31:35:41:d1:eb:31:8f:2f:85:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B4:77:51:9E:39:B7:0C:65:EE:3B:05:57:88:7A:93:B2:80:CD:71
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rrR3UZ45twxl7jsFV4h6k7KAzXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0-84.32.27.255
84.32.46.0/23
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.210.0/24
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.188.0/22
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:ec:26:a7:e0:d3:13:87:34:08:87:b8:94:66:58:10:42:8c:
68:92:8a:4c:89:17:c7:2d:5d:b1:20:60:82:21:c1:83:e4:f3:
50:b7:18:21:db:c9:ea:6e:70:7f:0a:49:b8:ac:a7:29:9c:29:
73:d7:a1:37:ea:fb:c4:e4:4a:de:33:db:8b:ca:25:27:da:b9:
ca:47:61:99:13:2a:cb:4c:f9:3e:71:f7:b6:37:1f:ca:2a:33:
f0:1a:bc:04:74:49:7c:26:89:69:ab:7e:00:17:91:ba:0f:6a:
74:0b:41:49:ac:8a:a9:26:16:c3:9b:93:09:89:94:5e:5a:48:
55:67:4f:79:cd:9b:fa:0c:bc:d5:bd:a0:b9:52:c4:83:8b:0b:
04:fe:6b:f5:9b:47:dc:5e:2f:9b:81:7f:85:28:40:7b:fd:a6:
38:db:dd:31:88:ea:65:2d:8e:3f:76:95:75:1f:af:ff:03:37:
fc:f5:d8:b1:1d:93:0b:50:d3:d6:69:30:07:e4:80:96:80:18:
6d:81:5f:28:13:0d:a1:0a:2e:5f:75:80:2e:7a:42:67:9c:0c:
7f:1f:d1:90:6c:ba:f3:a1:6d:75:8d:e3:98:3b:e8:ed:88:99:
e2:38:54:71:30:64:4f:17:44:0a:11:04:54:d2:93:a5:19:56:
10:f3:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 14:29:40 2024 by rpki-client on console-fra.rpki-client.org