Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x0YK93iHWlzYVuNnzK9xr8jHZ_M.roa
File: x0YK93iHWlzYVuNnzK9xr8jHZ_M.roa (raw, json)
Hash identifier: UYLB4h8txabVYg0ibQjdO8smfL03kRsOkKN042OC+6c=
Subject key identifier: C7:46:0A:F7:78:87:5A:5C:D8:56:E3:67:CC:AF:71:AF:C8:C7:67:F3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018640E7A4DC1C1F299C91AE7A8429047A05
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x0YK93iHWlzYVuNnzK9xr8jHZ_M.roa
Signing time: Sat 11 Feb 2023 14:36:08 +0000
ROA not before: Sat 11 Feb 2023 14:36:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.216.190.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
84.32.220.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.255.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.236.0/22 maxlen: 24
84.32.76.0/24 maxlen: 24
84.32.77.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.30.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:40:e7:a4:dc:1c:1f:29:9c:91:ae:7a:84:29:04:7a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 11 14:36:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7460af778875a5cd856e367ccaf71afc8c767f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:b8:aa:11:e5:cd:5f:5c:18:05:94:eb:ac:
7e:77:08:32:f5:12:e8:97:3a:f2:d5:d6:16:77:06:
4c:f0:8a:81:30:08:5f:80:17:15:fc:00:2c:d1:b2:
61:90:c0:70:07:09:19:9e:b1:3f:21:f8:3c:ed:5e:
f2:c5:e0:ab:3e:5c:a7:43:44:22:7e:b0:72:13:a9:
92:31:99:05:69:90:51:aa:86:72:47:d2:a9:25:94:
8e:35:dd:f9:55:9d:88:6b:82:19:37:32:90:40:3e:
21:3d:e8:09:fd:9e:2b:04:6a:24:29:26:93:34:d1:
32:f8:e7:e3:ba:03:1b:dd:28:63:31:1f:98:2a:ed:
6c:83:ab:56:c6:2d:2c:b1:3b:66:c6:32:c6:48:5f:
10:cd:b2:5d:8b:a3:de:3d:fd:2e:fb:75:2e:1f:8f:
d3:65:1d:41:11:79:aa:82:03:39:64:d3:a8:72:2f:
d8:ed:58:bb:ff:74:09:13:73:f2:26:b9:21:f7:5f:
42:b5:c3:00:15:a7:b9:da:25:82:25:15:f7:82:07:
3d:b8:fa:68:e7:f0:65:56:e7:72:2f:71:4f:f8:67:
3e:21:61:67:af:39:66:73:3a:90:07:64:06:9c:30:
46:f4:31:9b:6b:6a:33:fd:99:29:a4:5c:64:96:cc:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:46:0A:F7:78:87:5A:5C:D8:56:E3:67:CC:AF:71:AF:C8:C7:67:F3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x0YK93iHWlzYVuNnzK9xr8jHZ_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.30.0/24
84.32.46.0/24
84.32.76.0/23
84.32.79.0/24
84.32.179.0/24
84.32.212.0/24
84.32.214.0/23
84.32.220.0-84.32.222.255
84.32.240.0/24
84.32.243.0/24
84.32.252.0/23
84.32.255.0/24
88.216.17.0/24
88.216.93.0/24
88.216.128.0/23
88.216.132.0-88.216.134.255
88.216.190.0/24
88.216.213.0/24
88.216.215.0/24
88.216.220.0/24
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:11:d8:0f:b4:5f:f2:86:98:87:96:22:12:9b:89:98:40:7c:
f1:4e:65:ac:ff:0f:f1:55:ec:35:e0:25:ec:54:01:19:91:53:
9d:b8:dd:0c:a4:38:db:b3:55:01:52:2c:d2:3d:ac:4f:c9:d8:
3a:21:97:2f:34:06:90:a9:28:56:bf:2c:51:2d:b9:5b:a5:22:
5b:72:91:67:60:4a:3a:a5:07:9c:62:99:87:49:34:10:a7:75:
2f:d1:59:6c:e6:c5:30:9e:64:17:c5:49:ed:3b:91:3d:8b:08:
42:0e:f0:b3:09:7d:d0:37:da:85:e8:f6:93:af:a5:41:08:9a:
2f:7d:3e:2d:16:fd:b0:11:9c:09:3f:6f:0b:07:d0:a0:39:6a:
45:b1:55:9b:9b:e9:56:6e:4a:6d:57:e5:99:33:c6:e3:15:0e:
fe:ec:c2:ec:42:83:de:82:98:6a:09:20:47:1c:e2:c0:50:0e:
11:97:da:77:5e:a8:4c:56:6e:7b:68:1c:9d:c5:8d:9e:45:db:
b5:92:32:08:0e:d6:c4:1e:93:77:78:e4:83:2e:10:4d:8c:1e:
d5:2e:7e:1e:98:af:22:ea:e9:66:b6:21:01:6a:1f:2a:22:af:
ad:ef:0d:f8:01:64:70:2c:0d:68:ed:bb:7d:cb:e6:ac:39:6d:
b5:45:2b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:34 2023 by rpki-client on console-ams.rpki-client.org