Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wdYCKqBy9wAUmXj2rNuOOvOjXfs.roa
File: wdYCKqBy9wAUmXj2rNuOOvOjXfs.roa (raw, json)
Hash identifier: UE1W3KKZTv9smvK/GpZGqs36KJH6GoM64KEEJ4twnCI=
Subject key identifier: C1:D6:02:2A:A0:72:F7:00:14:99:78:F6:AC:DB:8E:3A:F3:A3:5D:FB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185B6039D1562ACAB31BB6312C395B8E1E0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wdYCKqBy9wAUmXj2rNuOOvOjXfs.roa
Signing time: Sun 15 Jan 2023 15:19:28 +0000
ROA not before: Sun 15 Jan 2023 15:19:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 84.32.52.0/22 maxlen: 24
88.216.190.0/24 maxlen: 24
84.32.6.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.42.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.252.0/22 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b6:03:9d:15:62:ac:ab:31:bb:63:12:c3:95:b8:e1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 15 15:19:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1d6022aa072f700149978f6acdb8e3af3a35dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:5b:a1:bb:db:35:13:fb:8a:e7:54:49:0c:
f1:cd:52:fa:56:74:49:78:35:36:d0:69:12:7b:cf:
27:11:cb:f9:07:8b:bb:7a:59:9d:80:7c:fd:3b:3a:
4d:31:71:1e:96:27:d8:17:af:16:cc:e1:d7:7c:98:
9e:cb:96:57:e9:c7:97:ad:18:aa:19:dc:1c:59:9c:
06:a9:b9:85:9d:58:43:0f:5a:6a:9f:92:c1:69:2e:
0a:e9:84:e0:bb:22:de:b0:01:b3:70:83:b8:c2:e3:
b6:ca:cb:7d:68:51:a8:ae:90:aa:82:17:37:80:40:
09:9a:02:f1:6f:9c:92:49:82:2c:d5:06:19:dc:5c:
e6:c0:fd:52:29:4e:78:1c:c6:06:1d:6e:0c:41:d4:
11:4b:e6:9e:72:b1:f7:cd:02:b8:4b:9c:30:9f:9f:
3e:d3:f3:c8:86:dd:2e:61:22:3b:eb:51:63:df:da:
e1:98:cd:77:ca:99:47:92:f9:10:e5:b6:66:0d:e7:
7d:ae:61:a2:8b:fa:57:1b:b1:f7:fb:ea:55:2c:34:
6e:38:e5:62:73:25:45:d7:ce:8b:d0:eb:05:e8:2b:
c5:bc:6e:0b:72:07:e9:29:28:b3:d9:99:5a:36:f4:
1f:14:85:35:1e:c2:05:6e:59:2a:33:a8:7f:a3:b8:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D6:02:2A:A0:72:F7:00:14:99:78:F6:AC:DB:8E:3A:F3:A3:5D:FB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wdYCKqBy9wAUmXj2rNuOOvOjXfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
84.32.42.0/24
84.32.52.0/22
84.32.240.0/24
84.32.243.0/24
88.216.17.0/24
88.216.36.0/24
88.216.40.0/24
88.216.43.0/24
88.216.98.0/24
88.216.190.0/24
88.216.214.0/24
88.216.228.0/22
88.216.240.0/21
88.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:68:06:e1:4c:99:3a:a6:0d:7f:f6:08:38:b8:12:ca:ac:b9:
f1:0e:8b:df:6e:01:3c:3d:2f:5f:1f:5a:42:3a:8c:bf:14:21:
af:a7:0d:0c:8c:76:75:7c:84:e2:13:e7:82:d9:ed:97:5a:69:
77:32:c3:27:80:1a:c7:9d:cf:b5:44:21:08:07:b2:59:fe:ea:
a1:fd:e7:69:06:a5:99:79:6e:27:41:9e:2d:56:27:2e:4f:6e:
8f:65:37:5c:09:1b:bb:6f:f4:17:80:eb:67:ba:ac:3f:e3:e5:
b5:71:25:60:e6:4b:81:fa:c6:2b:b5:e3:03:4e:cb:09:4a:52:
df:7a:a7:b7:03:ab:82:30:8f:c6:2f:db:77:96:78:28:07:68:
b9:33:51:37:32:4e:cb:1f:5b:81:20:a3:50:dd:61:f8:d4:f0:
eb:75:e5:02:8d:b9:5e:ea:6e:1f:2a:94:15:62:c4:a6:21:3c:
13:1a:05:4c:c0:44:be:21:29:f6:1a:37:0f:17:14:9f:20:c7:
c5:e4:2b:21:e3:5e:ad:64:fe:04:67:a4:a5:14:07:fa:f5:37:
3d:ae:26:67:09:e8:51:36:4e:9e:01:01:6b:c4:aa:e0:5b:7b:
c3:3d:4d:38:4d:86:f1:61:82:f2:e4:a4:fa:51:10:1d:36:4c:
b7:73:80:9d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAYW2A50VYqyrMbtjEsOVuOHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTE1MTUxOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWQ2MDIyYWEwNzJmNzAwMTQ5OTc4ZjZhY2RiOGUzYWYzYTM1ZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1ZbobvbNRP7iudUSQzxzVL6VnRJ
eDU20GkSe88nEcv5B4u7elmdgHz9OzpNMXEelifYF68WzOHXfJiey5ZX6ceXrRiq
GdwcWZwGqbmFnVhDD1pqn5LBaS4K6YTguyLesAGzcIO4wuO2yst9aFGorpCqghc3
gEAJmgLxb5ySSYIs1QYZ3FzmwP1SKU54HMYGHW4MQdQRS+aecrH3zQK4S5wwn58+
0/PIht0uYSI761Fj39rhmM13yplHkvkQ5bZmDed9rmGii/pXG7H3++pVLDRuOOVi
cyVF186L0OsF6CvFvG4LcgfpKSiz2ZlaNvQfFIU1HsIFblkqM6h/o7jJvwIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFMHWAiqgcvcAFJl49qzbjjrzo137MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvd2RZQ0txQnk5d0FVbVhqMnJOdU9Pdk9qWGZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAVCAGAwQA
VCAqAwQCVCA0AwQAVCDwAwQAVCDzAwQAWNgRAwQAWNgkAwQAWNgoAwQAWNgrAwQA
WNhiAwQAWNi+AwQAWNjWAwQCWNjkAwQDWNjwAwQCWNj8MA0GCSqGSIb3DQEBCwUA
A4IBAQBPaAbhTJk6pg1/9gg4uBLKrLnxDovfbgE8PS9fH1pCOoy/FCGvpw0MjHZ1
fITiE+eC2e2XWml3MsMngBrHnc+1RCEIB7JZ/uqh/edpBqWZeW4nQZ4tVicuT26P
ZTdcCRu7b/QXgOtnuqw/4+W1cSVg5kuB+sYrteMDTssJSlLfeqe3A6uCMI/GL9t3
lngoB2i5M1E3Mk7LH1uBIKNQ3WH41PDrdeUCjble6m4fKpQVYsSmITwTGgVMwES+
ISn2GjcPFxSfIMfF5Csh416tZP4EZ6SlFAf69Tc9riZnCehRNk6eAQFrxKrgW3vD
PU04TYbxYYLy5KT6URAdNky3c4Cd
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:34 2023 by rpki-client on console-ams.rpki-client.org