Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wTLG8ycLo9lWISHCfUVWBn9oADo.roa
File: wTLG8ycLo9lWISHCfUVWBn9oADo.roa (raw, json)
Hash identifier: UCLv13TxrIPbro31PSogX2jjTVZjRCv4/4uOcLlzswg=
Subject key identifier: C1:32:C6:F3:27:0B:A3:D9:56:21:21:C2:7D:45:56:06:7F:68:00:3A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0190B4FE2B42E157BA5F6B0FDCD427360DDD
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wTLG8ycLo9lWISHCfUVWBn9oADo.roa
Signing time: Mon 15 Jul 2024 06:04:34 +0000
ROA not before: Mon 15 Jul 2024 06:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204770
IP address blocks: 84.32.32.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.128.0/22 maxlen: 32
88.216.39.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
88.216.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 06:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b4:fe:2b:42:e1:57:ba:5f:6b:0f:dc:d4:27:36:0d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 15 06:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c132c6f3270ba3d9562121c27d4556067f68003a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:4e:b0:bb:51:0d:54:9b:54:73:ad:e5:70:
ed:14:a5:bd:12:7d:76:49:13:92:4e:29:a2:ca:50:
91:d9:65:da:f7:60:91:a9:aa:e7:80:ec:60:43:96:
ef:6c:4d:72:fe:67:13:13:27:00:85:47:db:b5:09:
4a:77:1a:fa:44:c8:ce:20:02:16:3e:05:2c:05:aa:
76:77:6e:34:bb:f0:ef:c8:b2:39:f5:3a:f6:ec:96:
ed:75:78:2f:ad:03:df:43:13:62:ba:c2:cc:af:70:
d4:2a:9d:d2:59:10:61:f8:a6:88:36:02:82:2e:e0:
7f:e0:8b:61:3c:1f:ed:e5:12:5a:ce:fa:d8:7e:e1:
8f:8e:06:f9:31:f6:66:13:ac:29:72:12:65:88:d2:
47:8a:5d:54:e0:29:5f:b0:13:f7:c4:47:5b:19:dc:
bc:d9:81:0f:b1:e7:2d:c6:ab:81:93:f8:6a:7d:d0:
37:93:c4:c5:44:49:72:53:d2:a5:f7:ef:b9:3f:86:
3e:47:59:fa:80:2f:83:cb:c9:bb:b1:88:d8:8e:ef:
da:95:1b:c5:8f:7d:17:26:a0:82:c7:27:f1:c1:72:
6a:77:ae:0f:96:19:15:0d:f3:b3:77:e1:23:97:7e:
04:01:12:4e:f4:44:f2:6f:e1:be:71:a3:83:45:1b:
6c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:C6:F3:27:0B:A3:D9:56:21:21:C2:7D:45:56:06:7F:68:00:3A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wTLG8ycLo9lWISHCfUVWBn9oADo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.32.0/24
84.32.34.0/24
84.32.71.0/24
84.32.128.0/22
88.216.39.0/24
88.216.198.0/24
88.216.210.0/24
88.216.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:30:64:8d:7f:a3:80:5d:35:3a:9c:e5:d2:a4:9a:ca:70:cf:
db:ef:23:7b:78:0f:75:85:77:62:99:be:f0:46:25:21:ce:64:
88:77:f6:c1:ba:27:c7:5c:ff:63:ae:ab:7e:4d:69:c4:e6:bb:
57:b7:fa:75:01:92:99:3d:ac:0e:8a:3b:d4:02:db:45:d6:2f:
ed:1c:e7:f9:ab:94:49:20:e6:c9:d0:eb:f8:ab:09:a6:5b:1b:
07:83:d2:de:a6:16:db:57:58:32:6f:fe:de:2e:a5:22:4b:c5:
d2:29:50:ee:e5:1e:5d:04:83:b5:77:42:1b:36:9f:ce:6c:00:
6e:68:6b:a8:ed:51:79:da:df:2b:b4:51:02:15:bb:6d:bc:fd:
c3:4d:72:c0:28:df:63:d9:58:1f:4b:1f:0d:ba:fa:be:d1:61:
db:f4:d3:f5:53:98:d0:20:4d:00:67:e9:63:c9:e3:66:59:9a:
0b:74:33:bc:62:90:bc:6d:51:35:e2:1d:a5:1a:05:c4:8d:ca:
8e:51:15:06:16:53:4c:14:2d:8a:87:35:cf:f4:67:b2:0e:de:
6d:e2:7f:30:a0:80:bf:19:03:e7:d6:a8:14:9c:7b:a0:a5:cb:
91:1a:3a:8e:9b:c0:be:f1:66:13:2d:2b:30:93:4d:35:d4:56:
30:cc:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 09:50:49 2024 by rpki-client on console-fra.rpki-client.org