Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/yBFBdqqRmsBIIEmvN2_DDJAZWrQ.roa
File: yBFBdqqRmsBIIEmvN2_DDJAZWrQ.roa (raw, json)
Hash identifier: qRmxlw3DuLiyH7TeQHlqakKO1VJAiuEyOkUbpMHkUzI=
Subject key identifier: C8:11:41:76:AA:91:9A:C0:48:20:49:AF:37:6F:C3:0C:90:19:5A:B4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185CABE3ED6689C571CE597B4E7CF2D02DD
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/yBFBdqqRmsBIIEmvN2_DDJAZWrQ.roa
Signing time: Thu 19 Jan 2023 15:55:43 +0000
ROA not before: Thu 19 Jan 2023 15:55:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.66.0/24 maxlen: 24
84.32.68.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
84.32.90.0/24 maxlen: 24
88.216.209.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.227.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.44.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.178.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:be:3e:d6:68:9c:57:1c:e5:97:b4:e7:cf:2d:02:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 19 15:55:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8114176aa919ac0482049af376fc30c90195ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:4a:9b:55:99:09:76:f8:24:04:46:d5:1e:
e5:af:bf:2c:73:55:4f:78:06:a6:d4:e6:1b:8b:f1:
d6:0e:38:41:c4:46:fb:f3:21:d0:46:f0:bd:51:16:
40:2f:a4:4a:06:4a:d0:21:3b:35:bd:e2:34:58:f5:
9d:86:07:16:05:d7:8d:11:c9:47:f2:1b:79:91:62:
d7:d7:ab:25:5b:7a:1d:8f:30:d2:4c:e5:4c:9d:4d:
cb:1e:60:7a:13:21:3e:a5:25:ae:eb:cc:c9:e0:7e:
5f:f9:48:53:56:85:4e:9e:a5:79:c8:1f:60:80:78:
80:b2:c4:f4:21:ce:bc:4f:eb:e7:a6:b8:ff:b9:26:
d4:ea:88:f0:4a:31:c5:e4:23:96:ad:75:d7:02:0d:
ee:42:68:26:8b:4d:fd:56:bd:bc:24:c4:6f:fb:c9:
a7:bd:d2:16:df:50:13:ef:8c:80:63:d1:16:3a:b1:
c6:68:ba:48:24:b9:b1:6b:1a:d8:dd:b2:cd:e6:fb:
eb:1c:f9:8d:69:41:65:0c:59:7a:e6:6a:4e:cd:79:
1d:a8:bb:60:44:24:7a:21:d4:08:42:9e:95:2b:78:
e1:30:94:66:f4:96:e3:62:a7:10:3d:74:13:9d:42:
77:f5:fb:78:15:0e:7f:af:a2:41:60:3f:ae:15:52:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:11:41:76:AA:91:9A:C0:48:20:49:AF:37:6F:C3:0C:90:19:5A:B4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/yBFBdqqRmsBIIEmvN2_DDJAZWrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.28.0/24
84.32.44.0/24
84.32.47.0/24
84.32.59.0-84.32.60.255
84.32.66.0/24
84.32.68.0/24
84.32.90.0/24
84.32.178.0/24
84.32.225.0/24
84.32.227.0/24
84.32.255.0/24
88.216.95.0/24
88.216.103.0/24
88.216.129.0/24
88.216.188.0/24
88.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
24:77:17:8e:6b:6f:f7:42:1d:12:22:c8:de:6c:6d:a9:8f:c6:
9e:9e:1b:0f:a5:99:8a:ba:f8:c5:a7:6f:4c:78:ae:84:52:36:
7e:cd:c5:6a:b5:af:33:ee:86:cb:4a:56:ac:58:53:cf:17:af:
27:79:d5:17:04:c6:e3:40:c4:dc:4b:5a:79:94:0a:d0:3c:4e:
49:6b:93:e7:ce:2c:2f:f0:b7:c4:ce:38:78:2a:ff:8d:5f:03:
8a:8a:09:a8:b4:bc:de:23:8d:54:10:2d:a2:32:74:2e:b4:d9:
2a:da:8d:39:76:61:6b:fc:78:cb:34:d2:07:8b:c7:66:b1:c1:
2d:3d:f5:99:b1:0e:86:46:e2:fb:35:ec:11:18:25:77:97:33:
60:d0:60:00:4c:8e:6c:d9:06:6c:c2:66:aa:d6:a7:a6:5d:f0:
7d:5e:45:6b:79:12:b1:54:7e:48:4d:5d:2a:6b:f3:d9:18:e2:
ee:5d:49:48:70:fb:b6:49:58:c5:1b:90:1b:e0:e3:0c:1e:40:
a1:f7:8b:a7:fd:fa:10:b0:f4:0c:6c:99:97:9b:2b:7d:a0:ed:
74:73:ac:b6:3c:31:bc:d5:76:00:d8:73:77:72:af:f0:3d:4f:
9a:f2:14:58:43:d4:97:1e:3b:7f:cc:ad:3b:3a:44:3b:52:a3:
a7:8c:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:34 2023 by rpki-client on console-ams.rpki-client.org