Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4rD0HM_6UeZG9LgYhrTSO_DyLHU.roa
File: 4rD0HM_6UeZG9LgYhrTSO_DyLHU.roa (raw, json)
Hash identifier: ksraaRVLpV0rNHDmvUBQ9Eq2Gl4i2y4hOQTam4tqA3s=
Subject key identifier: E2:B0:F4:1C:CF:FA:51:E6:46:F4:B8:18:86:B4:D2:3B:F0:F2:2C:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C2441CEB9C14D079431F62309AD1AA205
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4rD0HM_6UeZG9LgYhrTSO_DyLHU.roa
Signing time: Fri 01 Dec 2023 07:22:21 +0000
ROA not before: Fri 01 Dec 2023 07:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49716
IP address blocks: 84.54.50.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:41:ce:b9:c1:4d:07:94:31:f6:23:09:ad:1a:a2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 1 07:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2b0f41ccffa51e646f4b81886b4d23bf0f22c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:c7:0b:01:e6:31:6d:ca:72:c1:13:57:24:
f9:0c:15:f2:c0:0d:61:b0:bd:e7:e1:97:70:bf:ea:
9a:1d:3d:f3:cc:44:37:e3:b1:15:ea:82:62:a9:e4:
33:d6:e1:ee:01:1d:73:23:7b:96:c2:64:8a:ad:49:
cc:5d:07:18:a2:8a:5e:3a:0a:ce:6b:1d:6d:67:0c:
32:0d:15:e7:11:89:a8:55:ca:d8:1d:63:fd:ce:f2:
3b:33:4f:4d:f3:13:04:dc:17:d1:5b:cb:77:6f:2d:
43:df:03:ee:8e:cc:9e:6b:ef:6c:cd:f3:c5:c4:41:
46:b5:03:e6:ba:15:0f:e5:0e:6f:73:85:6c:6a:96:
95:0f:fb:4e:1c:88:a6:7e:99:1b:ba:22:66:36:b3:
fc:09:65:a9:98:b8:58:49:b8:27:34:2a:14:22:f7:
91:26:10:b3:f8:34:11:e5:0e:84:9c:5c:32:49:8e:
34:dd:cd:16:7b:7f:e4:29:8c:1d:e6:7d:33:c3:36:
a2:81:c3:d6:c6:23:7a:eb:58:05:d1:54:fa:d1:23:
21:b4:8a:6c:f2:a9:c0:28:48:6c:ad:db:3a:b0:50:
42:01:89:a7:10:21:b9:1f:d5:3d:c7:e4:a8:48:2d:
2c:88:a0:62:7b:50:44:bb:be:5b:bf:87:c3:5f:ca:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B0:F4:1C:CF:FA:51:E6:46:F4:B8:18:86:B4:D2:3B:F0:F2:2C:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4rD0HM_6UeZG9LgYhrTSO_DyLHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
84.54.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:31:b8:a6:59:d7:0f:70:0a:c2:05:f3:9b:a2:ef:2a:61:7c:
67:81:28:cf:1e:ae:d6:28:8a:ff:80:94:13:9e:47:91:ff:9b:
e8:1a:84:9d:24:7d:e1:70:9f:b8:79:a6:37:49:68:4e:d6:73:
30:04:a4:64:11:80:10:db:54:09:d6:72:f2:ce:08:f1:b1:e0:
9a:af:c7:09:46:38:1d:8d:8e:24:07:f1:9c:c0:c9:be:e5:c5:
a8:11:8a:14:58:49:9b:57:d0:44:c6:91:a2:3a:37:f5:a0:00:
e7:24:90:09:2e:f9:46:2c:04:50:e2:38:d4:aa:c7:9c:09:22:
61:f3:65:a0:76:e5:fe:bf:ba:10:02:cb:d5:97:59:61:16:57:
c1:33:bd:06:99:52:72:b3:38:8d:ad:1f:25:b9:dc:04:ac:7f:
35:f9:85:d8:ec:87:4f:b6:7b:3b:a0:29:21:5d:84:ee:ea:9d:
ff:01:f6:08:ca:d5:bd:d0:53:95:ac:2a:20:8a:e5:44:e3:24:
82:3b:7e:43:3b:e2:4a:73:88:27:90:d4:bf:fd:11:56:fc:70:
47:2b:98:a9:af:06:41:54:7a:94:af:10:78:db:26:83:03:50:
f7:76:0a:b4:42:b7:a2:15:f1:50:a4:d5:e8:ab:2b:9b:41:2d:
ac:88:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 16:32:43 2023 by rpki-client on console-ams.rpki-client.org