Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v8CNVlJXL_UwOUnqc-xQSNSFbNY.roa
File: v8CNVlJXL_UwOUnqc-xQSNSFbNY.roa (raw, json)
Hash identifier: Jl2mfynsVkbJN3HqgEjd89EggUD++ejQECEovmM+Yk0=
Subject key identifier: BF:C0:8D:56:52:57:2F:F5:30:39:49:EA:73:EC:50:48:D4:85:6C:D6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01962380E577E27958529C9335C6979C9EDC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v8CNVlJXL_UwOUnqc-xQSNSFbNY.roa
Signing time: Fri 11 Apr 2025 06:19:31 +0000
ROA not before: Fri 11 Apr 2025 06:19:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.59.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.208.0/23 maxlen: 23
84.32.214.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.66.0/23 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 18:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:80:e5:77:e2:79:58:52:9c:93:35:c6:97:9c:9e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 11 06:19:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfc08d5652572ff5303949ea73ec5048d4856cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:50:33:c8:8e:a7:a5:e6:1f:ac:2f:db:f6:7b:
ed:ce:63:89:8b:d2:b0:aa:6f:00:fc:bf:a0:97:35:
30:d9:6b:e4:f2:97:ba:79:b3:2a:f0:1c:89:3e:53:
85:dc:ec:6c:31:29:d3:17:89:b0:fe:15:a8:ae:86:
7b:91:5a:61:72:98:3f:96:7a:bb:ac:7a:52:aa:40:
ac:aa:2a:67:54:36:6c:58:2e:a8:34:92:85:8e:49:
41:a7:80:b3:3b:8e:17:3d:b4:7a:60:56:b9:82:2c:
1e:fb:42:a1:92:49:ee:a4:80:c9:2d:aa:db:11:32:
74:8b:56:9e:0f:45:e5:d2:35:6c:1b:35:78:58:76:
35:eb:61:a4:fe:ab:12:51:17:c2:1f:65:15:25:03:
25:9b:88:bd:eb:31:ad:6a:d3:84:d9:9d:75:56:9a:
a7:52:e5:9c:ca:32:80:dc:b9:12:59:e8:85:8c:00:
8c:31:58:b2:b5:ff:16:0e:b1:0e:21:72:0f:c4:6e:
62:b9:5c:56:87:32:5b:42:4c:5d:ff:cc:01:b7:ec:
26:29:f4:8a:eb:2b:f0:60:97:10:93:59:2b:e7:3c:
26:65:0c:a2:87:b2:1c:b3:fa:e0:b8:e0:24:0e:86:
af:e5:74:a9:85:ac:d8:3b:af:ae:6e:8e:c9:7f:78:
48:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C0:8D:56:52:57:2F:F5:30:39:49:EA:73:EC:50:48:D4:85:6C:D6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v8CNVlJXL_UwOUnqc-xQSNSFbNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0/22
84.32.46.0/23
84.32.59.0/24
84.32.148.0/22
84.32.174.0/23
84.32.208.0/23
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.66.0/23
88.216.93.0/24
88.216.130.0/23
88.216.134.0/23
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0b:11:70:90:b7:c7:51:14:86:c7:12:9d:d2:a3:5a:e3:03:
8c:06:0f:62:29:44:55:a1:96:48:45:94:15:2b:ae:82:bf:ab:
d8:59:aa:91:1e:e8:51:1d:73:2c:71:e9:1a:b8:72:7a:a3:69:
47:cc:6c:ad:4b:43:5c:20:5a:d5:b7:d8:27:90:8c:40:5a:78:
e3:d3:3b:fb:94:75:9d:16:54:16:67:2a:d0:7e:af:b9:7d:a9:
a0:64:a6:6b:09:90:51:7e:36:54:82:96:a3:9d:09:87:40:a2:
46:ad:a5:ae:07:d1:10:66:91:8e:5c:d6:4d:22:a7:c0:62:7a:
af:3e:44:aa:06:12:a1:ff:f3:57:47:1e:31:fd:3d:9e:6c:45:
81:cc:b9:d8:45:e3:65:df:41:b5:e0:ec:72:bb:b7:21:59:68:
6c:59:1d:b7:6c:89:4d:16:a2:47:5d:f8:7b:e0:c8:6d:59:d4:
da:05:67:67:65:4d:13:0b:8c:03:ab:99:12:ac:a7:5a:78:dc:
95:4a:23:a2:dd:4f:f4:e0:dd:cd:a1:04:28:f0:47:26:57:de:
68:04:73:d1:76:b8:ef:04:5a:fb:cb:c6:19:a4:32:d0:d2:6e:
b0:6b:c1:66:2f:0f:22:84:78:89:6f:28:69:29:6a:eb:f3:67:
a2:ee:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:30:36 2025 by rpki-client