Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/sBbjS8gJmHamcmHOxkVHT4whnGc.roa
File: sBbjS8gJmHamcmHOxkVHT4whnGc.roa (raw, json)
Hash identifier: wtOkzRHBwMNAPDJN0SU5S/Swe1Ts8RoHvy/lGP/xo+8=
Subject key identifier: B0:16:E3:4B:C8:09:98:76:A6:72:61:CE:C6:45:47:4F:8C:21:9C:67
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01871272CF3F62FEFC4364A353B14C382C68
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/sBbjS8gJmHamcmHOxkVHT4whnGc.roa
Signing time: Fri 24 Mar 2023 07:08:46 +0000
ROA not before: Fri 24 Mar 2023 07:08:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.60.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.178.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 05:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:12:72:cf:3f:62:fe:fc:43:64:a3:53:b1:4c:38:2c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 24 07:08:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b016e34bc8099876a67261cec645474f8c219c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:fb:fa:a8:4a:5d:83:86:01:ed:44:7b:e8:
d7:1a:48:c5:89:7c:f0:99:6e:d2:e6:00:fe:3d:26:
75:88:70:9d:d0:02:d7:45:91:7a:e0:c1:0d:80:85:
6b:15:7a:d5:06:c9:30:43:ba:6d:1a:38:67:a6:4e:
1c:2b:ad:fc:33:e3:a7:3e:25:7f:62:bc:5d:dc:35:
93:1c:8c:d3:e1:67:b0:5b:0d:48:93:62:57:04:d0:
e5:3f:3d:fb:95:56:de:2b:f1:aa:79:32:6d:24:06:
59:41:5c:6a:eb:ab:c7:81:88:34:6e:54:ab:41:ec:
48:cf:b7:84:b8:01:fa:93:1c:32:18:ab:4f:b7:c0:
df:cf:18:cc:9d:71:0e:76:33:8e:5a:27:ef:ef:62:
41:02:f1:a1:b5:81:64:08:fd:f6:96:f7:69:dc:f9:
66:08:55:9d:7e:92:47:c0:b3:6d:58:0a:9d:28:42:
51:cd:2e:2c:a0:9c:12:57:34:82:75:7d:cc:58:49:
0c:5c:22:d9:31:b0:7a:72:a9:14:97:e5:0a:07:8d:
1a:08:4f:41:54:fe:bc:75:af:c7:85:fd:b5:1d:7b:
a0:63:72:f9:8e:cf:96:60:60:51:46:88:e6:da:d9:
5b:4b:4c:31:e3:f2:44:d9:12:d4:41:ac:c3:b3:dd:
e7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:16:E3:4B:C8:09:98:76:A6:72:61:CE:C6:45:47:4F:8C:21:9C:67
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/sBbjS8gJmHamcmHOxkVHT4whnGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.44.0/24
84.32.47.0/24
84.32.60.0/24
84.32.66.0/24
84.32.68.0/24
84.32.90.0/24
84.32.178.0/24
84.32.225.0/24
88.216.95.0/24
88.216.103.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:1d:93:35:7f:d6:36:af:7a:1f:19:96:c9:d4:96:8b:b9:32:
72:4e:ad:78:f8:7c:ea:36:95:8b:9d:cc:3e:80:d8:1a:db:35:
ea:cb:48:8a:15:0d:4d:0b:4d:9d:c7:94:cf:4a:03:2f:2e:83:
21:be:16:e7:c1:5c:de:62:57:4e:f4:53:b9:bc:74:f0:07:ab:
56:de:c9:6f:c3:52:d1:cc:a2:12:bc:06:09:8e:de:1f:26:52:
ff:16:40:d8:dd:5c:1c:6b:ab:f7:db:8f:b5:ac:0f:9d:9b:02:
9f:10:fa:8d:f0:5e:e6:ae:fb:01:66:ec:17:24:a5:95:03:38:
53:91:5d:e3:91:4a:8b:aa:96:a3:03:55:42:30:da:c7:60:b8:
73:9c:b2:a2:56:92:21:0c:e8:9e:31:72:26:d4:ef:d4:1f:10:
54:80:63:3e:fa:19:b3:3e:7d:bd:fa:d2:ad:fb:eb:d1:ff:eb:
25:74:b6:bf:42:a9:a0:47:42:a3:03:67:0f:ea:4b:51:69:f2:
99:f3:a8:11:00:ba:23:2a:00:e1:c6:7f:ec:a8:b9:c8:b2:3a:
c0:77:c0:0b:73:ba:22:aa:e5:00:bf:68:f0:00:07:9d:e0:6d:
17:e8:72:b2:5e:a6:7a:da:80:81:fe:8c:f1:82:33:36:31:ec:
9b:4a:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:32 2024 by rpki-client on console-ams.rpki-client.org