Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zofOyVebRbBb939amCw_dPlrUwo.roa
File: zofOyVebRbBb939amCw_dPlrUwo.roa (raw, json)
Hash identifier: pfwcCCPouGkq0k7GqybnrD4kw4Lx3DVTXblJpX1v/CA=
Subject key identifier: CE:87:CE:C9:57:9B:45:B0:5B:F7:7F:5A:98:2C:3F:74:F9:6B:53:0A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B2775881ECC9B759AD39ED219F8926DE9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zofOyVebRbBb939amCw_dPlrUwo.roa
Signing time: Fri 13 Oct 2023 05:14:55 +0000
ROA not before: Fri 13 Oct 2023 05:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54252
IP address blocks: 84.32.58.0/24 maxlen: 24
84.32.60.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.182.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.92.0/23 maxlen: 24
84.32.20.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:75:88:1e:cc:9b:75:9a:d3:9e:d2:19:f8:92:6d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 13 05:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce87cec9579b45b05bf77f5a982c3f74f96b530a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:e7:e6:46:fe:98:25:ed:fc:51:5c:11:00:
04:5d:e8:3d:d8:a4:2f:79:59:cf:7a:88:20:4b:32:
88:0e:60:99:97:75:e2:8c:98:30:51:62:53:ab:32:
3c:a2:c3:f5:43:bd:91:23:6c:a6:c8:a9:2a:5a:c0:
f6:c4:d3:8f:72:55:88:a3:65:65:70:d7:de:15:b9:
0f:ae:17:02:f7:68:35:c9:13:c1:48:a5:16:b6:ab:
8c:9d:d0:37:07:7c:3d:ad:a5:23:25:19:21:a7:9d:
c1:48:6a:05:ae:79:95:78:ce:5a:09:62:96:b0:12:
d0:04:3a:8f:af:5c:89:1f:51:1f:b5:83:1c:cc:bd:
99:41:4d:52:a4:8e:ba:62:f5:86:a9:13:f8:6e:e3:
6e:ae:cd:90:18:5f:f6:dc:f4:e3:ce:92:53:8d:38:
20:5f:8d:77:88:2f:c2:d1:d1:af:93:97:72:aa:36:
38:6f:5c:cb:65:40:8f:85:60:72:7c:4e:24:87:73:
a3:fd:ee:94:09:5d:b2:65:16:f3:9a:f8:24:31:7a:
1c:b4:ed:0b:b6:cb:cd:d3:76:8b:bd:09:15:d7:0d:
5f:d9:00:93:f7:f9:a3:ef:69:63:9d:f1:42:4d:92:
3d:cf:12:c9:0c:92:41:bb:7d:4a:2d:de:10:3f:e2:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:87:CE:C9:57:9B:45:B0:5B:F7:7F:5A:98:2C:3F:74:F9:6B:53:0A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zofOyVebRbBb939amCw_dPlrUwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.20.0/24
84.32.58.0/24
84.32.60.0/23
88.216.36.0/24
88.216.92.0/23
88.216.180.0/24
88.216.182.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:cc:9e:2e:41:b7:71:be:f5:60:be:e3:f8:b2:1f:79:6d:fc:
bf:93:3a:61:72:1d:a6:76:04:b7:6e:d5:85:a6:66:37:6f:cd:
0f:73:2d:d6:8e:79:15:d9:67:12:2b:7c:3a:1b:54:64:9c:bd:
84:23:d7:be:3d:d6:be:66:15:1a:2a:64:56:31:d3:d0:03:f9:
c3:be:e0:26:16:8e:a3:57:f3:78:ab:97:84:6d:2b:48:9a:06:
11:f4:cc:97:b8:76:45:08:5f:48:04:de:d8:4e:0c:56:8e:40:
82:8f:82:1f:1e:c6:4c:c0:a7:b1:c4:ef:8b:a7:ef:d3:07:6f:
5e:fc:1c:f6:b4:54:cc:95:e4:ea:d1:4e:d6:e4:22:aa:ef:78:
2b:34:46:55:24:fd:73:53:6d:82:60:e7:e5:12:01:bc:75:5f:
18:61:3a:84:c8:26:92:b8:5d:ab:a0:d9:91:75:30:53:0b:89:
e8:8d:c9:d9:38:48:df:71:ee:ad:27:00:68:79:44:30:5b:9e:
60:1e:11:fc:13:20:c4:42:b7:49:a3:c3:ad:1e:43:ca:bc:8b:
3c:e9:6e:03:62:55:33:73:76:b9:a4:a2:b8:d8:32:fd:c1:b4:
e4:26:c6:35:78:40:1e:be:95:99:4f:b9:1e:70:48:58:e8:1d:
f7:69:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 20:29:57 2023 by rpki-client on console-fra.rpki-client.org