Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v2TF02pSH40Gxu_wwEuI7cZxPmE.roa
File: v2TF02pSH40Gxu_wwEuI7cZxPmE.roa (raw, json)
Hash identifier: JgmyzP+q6rvFJnQ62JPArXEzaXkfjdGCKvsIgT7tPu0=
Subject key identifier: BF:64:C5:D3:6A:52:1F:8D:06:C6:EF:F0:C0:4B:88:ED:C6:71:3E:61
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01881DF8436BC5B942C2B776934BE4CD43E2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v2TF02pSH40Gxu_wwEuI7cZxPmE.roa
Signing time: Mon 15 May 2023 05:53:09 +0000
ROA not before: Mon 15 May 2023 05:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.63.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.32.0/24 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 May 2023 05:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1d:f8:43:6b:c5:b9:42:c2:b7:76:93:4b:e4:cd:43:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 15 05:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf64c5d36a521f8d06c6eff0c04b88edc6713e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:cf:e8:95:a5:dd:4f:95:36:e4:d5:33:27:
be:72:dd:e8:e4:8d:74:d1:26:0b:5f:52:f9:83:ee:
74:43:c2:b0:3d:5b:b2:49:7b:04:66:a9:cb:c2:16:
ba:16:a2:77:09:8e:3a:05:4a:6e:52:d6:f4:26:22:
81:19:11:46:9b:34:d1:9e:46:ac:0d:13:bb:2d:af:
68:27:d8:26:98:dd:2b:cd:41:31:59:d0:6d:b7:c6:
dc:78:fb:19:40:6b:58:20:41:f6:8f:b5:84:98:1b:
56:6b:1c:0e:0a:34:82:4a:33:4a:29:fd:c9:27:43:
04:2b:15:50:ae:77:d7:d2:1b:ad:67:52:23:52:df:
ed:e0:ee:e3:cf:44:c2:0c:68:ed:68:0b:00:ec:4b:
3a:f5:2f:ba:80:c6:11:be:b3:75:03:d8:0e:95:c4:
ee:89:29:c4:eb:3d:3e:41:80:9b:b2:98:e4:79:fb:
96:95:ef:16:37:a4:8c:60:62:c4:57:9e:e3:32:db:
27:c5:1c:74:33:e8:23:31:25:a3:2b:80:a9:94:2d:
d3:17:1a:c4:27:52:51:e4:b5:2b:d9:e6:a3:84:8f:
1d:f9:29:19:d5:f0:fc:ea:af:b4:3f:3f:47:96:ca:
74:47:c9:ad:15:a9:44:1f:64:72:3e:d2:97:6c:c8:
3c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:64:C5:D3:6A:52:1F:8D:06:C6:EF:F0:C0:4B:88:ED:C6:71:3E:61
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v2TF02pSH40Gxu_wwEuI7cZxPmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.32.0/24
84.32.63.0/24
84.32.95.0/24
84.32.149.0/24
84.32.151.0-84.32.152.255
84.32.174.0/23
84.32.178.0/23
88.216.2.0/24
88.216.34.0/24
88.216.41.0/24
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c1:17:25:15:7c:16:08:84:2d:5f:21:4a:92:09:39:d0:cc:
aa:8f:1a:9b:ff:09:81:14:30:d4:95:3d:9b:ba:1b:a4:09:24:
a9:62:87:fa:60:f9:b7:27:a9:2b:c5:01:bc:ca:14:86:71:f3:
28:ce:eb:6f:0c:05:87:9c:4b:51:28:e5:45:ef:eb:7b:e5:2d:
9a:ea:9a:db:89:be:43:d4:00:66:c5:05:02:11:5b:34:54:e4:
e0:55:d4:1e:4c:1a:d7:de:cc:0e:ac:a6:5d:4a:34:f5:eb:25:
4a:ec:7f:c2:b9:f1:64:b5:4a:7d:f9:43:ce:46:75:a8:1e:df:
41:92:44:b5:c0:0d:68:be:94:25:51:e2:68:a4:16:15:7d:06:
02:8e:37:9f:62:40:c8:39:9f:27:72:b4:87:be:cb:f8:c0:e7:
fb:05:92:18:4b:08:f9:0e:bd:de:c4:84:f1:a9:2c:7c:5e:88:
93:0b:59:eb:b5:eb:35:00:4d:bf:7d:f5:74:5b:aa:d4:34:7b:
c0:eb:c0:81:6e:29:00:65:c4:11:12:3f:1f:69:c3:14:dc:26:
d7:f3:91:57:9c:ed:47:95:a9:62:7c:7a:d4:3c:0d:7b:ca:b9:
9b:8a:a7:1a:28:59:8e:d5:1e:46:e3:72:44:21:42:7b:7b:bb:
d7:a6:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:33 2024 by rpki-client on console-ams.rpki-client.org