Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/y43zLPpr3jeC_IfX0ycReTKC8nc.roa
File: y43zLPpr3jeC_IfX0ycReTKC8nc.roa (raw, json)
Hash identifier: qCs2M+xM/yB31IQzWTRys5QEpNYllhFLwRrkhXk03es=
Subject key identifier: CB:8D:F3:2C:FA:6B:DE:37:82:FC:87:D7:D3:27:11:79:32:82:F2:77
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A615E9B9DB5A2DF74B28367556DE66BE6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/y43zLPpr3jeC_IfX0ycReTKC8nc.roa
Signing time: Mon 04 Sep 2023 18:05:04 +0000
ROA not before: Mon 04 Sep 2023 18:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.63.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
84.32.217.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.244.0/24 maxlen: 24
84.32.32.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:61:5e:9b:9d:b5:a2:df:74:b2:83:67:55:6d:e6:6b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 4 18:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb8df32cfa6bde3782fc87d7d32711793282f277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:f4:22:f5:da:3d:72:37:5e:fa:37:78:58:
45:ad:dc:f7:4d:87:7d:ac:57:e3:e9:8a:50:63:1a:
68:a8:10:d3:91:8f:66:82:c0:67:c1:73:7c:98:74:
ef:36:61:4c:cd:91:9f:a7:9d:d5:e7:94:9c:29:75:
65:92:d7:9e:0c:f9:23:49:b6:b6:b2:82:13:83:c8:
bb:56:fd:00:e2:b3:71:61:d6:5f:74:81:c6:fc:e2:
ab:24:49:bf:4c:fe:f6:5c:c3:6b:5f:9e:81:7a:05:
17:2e:f0:32:2e:13:f8:ae:b4:82:52:73:e5:1f:d5:
75:74:f0:a9:b3:d4:b1:63:93:84:55:9a:8d:55:c9:
ca:21:76:a0:78:37:ce:f4:ae:f6:fc:3b:6d:f9:6c:
ce:10:9d:8a:c3:54:5c:20:38:52:81:27:7d:37:c2:
63:a2:44:92:e9:a2:18:aa:b3:d7:c2:97:da:44:e2:
17:9e:b0:db:81:9f:94:99:55:13:a0:52:d1:4e:dd:
b3:9b:6a:d6:21:47:4b:18:92:fa:12:81:58:94:71:
9b:ea:9d:23:51:5d:a1:ad:6c:02:e0:73:4c:c6:07:
c5:f2:b5:9d:92:18:1d:27:e3:3a:9a:b9:a6:d0:a7:
44:57:6a:f2:a5:cc:14:87:9d:a6:81:4f:b0:ef:65:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8D:F3:2C:FA:6B:DE:37:82:FC:87:D7:D3:27:11:79:32:82:F2:77
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/y43zLPpr3jeC_IfX0ycReTKC8nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.32.0/24
84.32.39.0/24
84.32.63.0/24
84.32.149.0/24
84.32.151.0-84.32.152.255
84.32.154.0/24
84.32.156.0/24
84.32.217.0-84.32.218.255
84.32.244.0/24
88.216.34.0/24
88.216.41.0/24
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:3d:17:5e:8a:0f:88:28:3a:1d:ba:49:76:4f:49:c7:22:41:
c4:74:60:36:c0:9c:1e:99:c3:3e:d9:05:ed:29:ce:60:db:b9:
07:da:24:8e:4d:cc:c3:5e:a5:d1:76:74:5c:e5:b0:e6:a4:95:
57:f9:30:c0:f8:9a:27:4a:58:54:bc:b4:0b:a9:cf:44:57:6f:
29:93:ef:b9:fa:39:56:d6:34:a8:9e:75:7c:0b:0c:cd:67:86:
0b:e0:9f:c2:b7:a6:81:bf:2b:df:6d:51:cc:35:47:a8:a8:d6:
03:42:99:f6:48:59:fd:c8:ee:69:fc:0b:48:3f:93:51:95:a1:
7e:47:09:8b:91:d8:80:47:4f:d6:ea:48:a3:c7:ff:74:c8:63:
12:18:66:0d:c7:c4:f0:e1:97:81:18:a4:77:47:29:87:fd:c5:
c4:d4:7f:b2:00:d3:3c:77:ea:20:b4:7d:54:d7:5e:b7:5a:58:
ff:dd:3f:47:6f:b4:ae:e0:03:01:be:3a:3a:38:7b:d8:37:d5:
a8:c9:e7:f8:5d:10:1a:c1:09:e2:c2:2f:81:67:30:14:dd:72:
c4:53:02:d3:96:39:13:a7:8d:ab:99:23:dd:e8:9c:7e:e0:c1:
30:4e:f0:95:0d:f4:24:32:75:d5:e0:b4:7c:13:d8:7e:f6:51:
1a:ca:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 8 18:37:20 2023 by rpki-client on console-ams.rpki-client.org