Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/y6cyf-VyOEogHQICUvoA9oH-blA.roa
File: y6cyf-VyOEogHQICUvoA9oH-blA.roa (raw, json)
Hash identifier: urvY7LGMByPq4yZqFytNig/DoV/KgXv6P/51fu5a1hU=
Subject key identifier: CB:A7:32:7F:E5:72:38:4A:20:1D:02:02:52:FA:00:F6:81:FE:6E:50
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01863A09D40D8B0516755EDFCAD9263A9F7F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/y6cyf-VyOEogHQICUvoA9oH-blA.roa
Signing time: Fri 10 Feb 2023 06:36:08 +0000
ROA not before: Fri 10 Feb 2023 06:36:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 84.32.58.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
84.32.216.0/24 maxlen: 24
84.32.219.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
88.216.67.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:09:d4:0d:8b:05:16:75:5e:df:ca:d9:26:3a:9f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 10 06:36:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cba7327fe572384a201d020252fa00f681fe6e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:87:44:db:4f:41:4e:7e:8b:52:71:a1:59:
cb:ab:31:8a:ae:c4:0e:d9:a6:e5:73:e6:be:d2:a2:
92:9e:92:f1:b8:cb:0d:7d:f6:75:67:99:ae:8b:38:
5d:25:18:1d:a0:7d:94:b8:2d:df:bf:aa:19:a3:1f:
d6:5d:06:1f:5e:0a:14:14:60:27:d1:0a:5e:89:e7:
e1:af:8d:af:d9:9a:83:c6:be:e1:67:5a:8d:1b:55:
4d:2e:5f:6c:93:04:70:0d:42:8b:1e:4a:f2:2e:8b:
50:24:61:37:dc:bf:93:d6:66:80:f1:d8:83:54:1b:
d0:43:38:db:4e:c5:f8:7b:8b:47:29:69:a2:83:c2:
98:2f:42:c9:cd:0f:5f:5d:04:65:ad:12:d2:ca:f1:
92:c7:9c:56:40:55:c0:a5:40:fb:15:df:83:d9:5e:
8e:ff:93:af:ce:51:39:4a:fe:ed:67:9c:4a:fd:ba:
52:35:a9:44:07:90:df:f8:e7:6d:79:30:e0:0d:62:
21:45:5e:64:92:c0:6f:9e:98:1e:b2:7b:33:60:e4:
c7:e2:ba:9d:41:5a:36:c9:f1:b5:6c:0e:c2:33:f1:
38:bf:c1:6e:4c:67:04:25:02:7a:2d:e9:b5:fa:73:
51:9d:d7:7a:45:6c:38:18:8b:5a:2e:96:18:fd:ba:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A7:32:7F:E5:72:38:4A:20:1D:02:02:52:FA:00:F6:81:FE:6E:50
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/y6cyf-VyOEogHQICUvoA9oH-blA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.9.0/24
84.32.25.0/24
84.32.28.0/24
84.32.49.0/24
84.32.51.0/24
84.32.58.0/24
84.32.70.0/24
84.32.213.0/24
84.32.216.0/24
84.32.219.0/24
84.32.226.0/24
84.32.234.0/24
88.216.66.0/23
88.216.100.0/24
88.216.106.0/23
88.216.109.0-88.216.110.255
88.216.128.0/24
88.216.188.0/24
88.216.222.0/23
Signature Algorithm: sha256WithRSAEncryption
43:13:26:6a:37:a3:7d:95:9d:eb:3d:97:95:ea:ba:c6:0a:dd:
d3:18:97:6f:19:46:53:d8:1e:80:3d:6e:64:5c:6a:16:79:2d:
25:23:46:f4:b1:2e:b9:af:38:86:dd:98:a4:3a:38:b4:af:17:
8d:7c:83:7d:9b:95:34:fb:62:4c:3c:c0:62:a3:74:f6:07:f6:
a3:bf:ab:16:42:a8:67:ee:db:ab:7a:45:72:7b:4f:51:35:9e:
52:57:d4:ea:bd:de:48:4a:2e:22:6e:1a:f6:a5:28:69:5a:90:
89:74:5b:0e:6b:30:71:9f:43:33:b1:09:e4:79:1b:99:08:78:
50:66:7e:1e:84:02:15:bb:72:87:2a:c4:ee:b0:09:9f:ff:f1:
32:c9:27:63:9f:e9:a3:47:93:76:51:69:01:a3:75:86:e6:53:
6a:9c:f9:5d:bf:e7:3b:0d:06:87:d4:8a:f6:38:bd:0b:37:4a:
b2:15:45:43:2f:b0:7f:32:4a:9c:6d:fc:a2:32:ff:9d:e0:9a:
9e:00:95:95:24:1d:21:7d:fa:47:57:e5:2e:2f:2d:df:e0:51:
09:db:02:45:b3:38:33:c8:f9:b6:25:21:f1:85:08:7c:ee:24:
22:f3:b0:5b:1a:57:0f:1f:ed:65:2c:6f:a7:e1:f7:af:95:14:
1c:d8:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:34 2023 by rpki-client on console-ams.rpki-client.org