Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ws8dgpCtIvsiRp_eFBNA-_5t8Gs.roa
File: ws8dgpCtIvsiRp_eFBNA-_5t8Gs.roa (raw, json)
Hash identifier: /20RPc/EV0FOl/klc69Uznk8nd4lzoir/PBTV6LOs0A=
Subject key identifier: C2:CF:1D:82:90:AD:22:FB:22:46:9F:DE:14:13:40:FB:FE:6D:F0:6B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019482C3051F51D31F054E25614FF8AF96FB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ws8dgpCtIvsiRp_eFBNA-_5t8Gs.roa
Signing time: Mon 20 Jan 2025 08:10:06 +0000
ROA not before: Mon 20 Jan 2025 08:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 84.32.236.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 16:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:c3:05:1f:51:d3:1f:05:4e:25:61:4f:f8:af:96:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 20 08:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2cf1d8290ad22fb22469fde141340fbfe6df06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:65:71:ba:41:91:50:f3:c2:c3:19:d9:f5:3e:
8e:7b:b3:dd:70:39:87:5b:ca:f6:10:d8:c3:71:d5:
e2:0a:08:2c:d2:a7:a6:18:c7:99:27:b1:7b:d1:2c:
bc:cd:1b:e7:da:70:41:6b:80:3d:5a:03:1e:8c:0c:
10:5b:f9:f2:6d:14:5e:80:64:68:1e:f0:0b:0a:37:
5a:54:28:57:0e:8b:cf:c3:e0:92:bd:b1:b9:2c:ad:
44:4f:b1:c4:98:db:2d:41:d1:1a:60:2f:9c:0b:f9:
83:af:63:e0:97:0b:38:38:d4:87:df:67:da:3a:56:
20:5b:89:69:a7:48:dd:45:c1:ec:c8:23:7a:b8:3f:
3c:79:db:2e:d1:ad:a0:2a:82:71:ef:92:47:79:b5:
b7:82:7f:e2:3b:8d:01:c9:e2:b6:2d:fc:d8:d3:39:
08:42:68:db:08:15:3f:b5:fd:4c:fe:c1:77:88:c9:
48:41:73:de:1b:9b:a1:38:4f:3f:c4:28:2d:e6:23:
ad:f8:8e:62:79:03:bb:16:10:fa:9d:13:a8:10:82:
be:c8:8b:da:ef:0f:64:54:76:c7:3a:59:1e:28:1f:
e3:f1:f3:a2:d6:bd:38:64:96:f0:a8:58:1a:41:c9:
5a:e9:10:b4:6e:05:0d:39:af:a1:57:f4:e6:de:c6:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CF:1D:82:90:AD:22:FB:22:46:9F:DE:14:13:40:FB:FE:6D:F0:6B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ws8dgpCtIvsiRp_eFBNA-_5t8Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.236.0/24
88.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
45:31:b6:71:f7:f5:02:51:4c:b7:a7:a3:f0:e6:f8:fc:1a:3c:
bf:5d:16:d0:7b:36:36:fe:c8:64:ac:ef:cc:63:f3:ff:ca:23:
11:88:61:11:22:b4:0d:a4:a2:20:0f:bc:84:6c:68:ea:77:d9:
6f:2a:f2:9f:44:b0:6a:39:02:33:57:8c:97:f9:f8:5c:11:c1:
0c:a4:41:bf:86:05:a1:28:a5:a5:18:cc:a6:d7:52:b6:21:07:
78:f3:83:37:8d:6d:e9:eb:1a:af:8f:e5:f4:11:f7:5c:e0:23:
e4:46:20:4c:6f:54:a8:54:f4:90:8d:11:ab:e3:86:77:f3:02:
5a:7d:39:db:9b:66:de:dd:82:d0:9d:f5:a6:04:a6:e2:86:c3:
89:eb:44:9c:92:a6:25:44:f6:0f:ed:5b:15:20:b4:39:9e:dc:
0a:9c:20:13:ad:ab:ea:ec:39:54:b7:3f:a5:5d:d4:70:64:0e:
9f:ee:c4:93:9f:f5:d9:62:77:db:1b:ef:eb:98:09:9b:1a:82:
4c:3e:8b:4f:01:c5:86:f5:6d:8c:c5:66:ad:f5:15:08:1b:db:
67:d5:0a:89:e6:31:92:dc:17:10:f1:5c:d3:65:a7:cb:0b:1f:
c6:58:92:8a:95:a0:0f:dd:94:33:46:95:a6:90:3d:42:1c:58:
59:65:8d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:08 2025 by rpki-client