Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0PH4spMHyCWaLppv_cL9SlZF2DY.roa
File: 0PH4spMHyCWaLppv_cL9SlZF2DY.roa (raw, json)
Hash identifier: YMF7va8NU27i8DAtTDyf6rroVYlDeXlp4cRJzOeBJrc=
Subject key identifier: D0:F1:F8:B2:93:07:C8:25:9A:2E:9A:6F:FD:C2:FD:4A:56:45:D8:36
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFD5237C4373F3AFE7277CEED527AC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0PH4spMHyCWaLppv_cL9SlZF2DY.roa
Signing time: Sun 01 Jan 2023 18:54:55 +0000
ROA not before: Sun 01 Jan 2023 18:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 84.32.235.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d5:23:7c:43:73:f3:af:e7:27:7c:ee:d5:27:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0f1f8b29307c8259a2e9a6ffdc2fd4a5645d836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d7:36:eb:62:6d:22:16:27:a1:76:13:3d:9f:
4d:cf:b7:7c:92:00:6f:bb:89:56:65:15:9b:26:dc:
f6:33:11:cb:06:5b:4c:40:2a:b9:ef:0e:20:08:02:
cd:2b:3a:e2:c0:4d:84:5b:43:b3:3a:a1:f8:dc:1d:
a7:80:38:3e:b7:9c:1a:a5:dd:a6:9b:66:d6:40:74:
9c:93:ec:37:1a:61:d7:c2:3b:2c:c4:35:98:fc:71:
f2:97:a4:31:e8:21:dd:5e:99:2a:e8:f2:51:72:8b:
41:67:cf:09:a3:de:0d:cb:aa:67:08:6e:a0:ab:1a:
3e:0f:e8:78:f7:a9:b9:5a:41:5d:51:e6:f6:04:bb:
78:1c:ef:a9:42:1e:aa:af:93:66:3d:ad:c8:68:fa:
58:e6:94:a3:93:29:06:b6:42:eb:69:17:98:db:42:
fb:6a:df:1e:8d:d9:17:bb:81:c9:a3:2e:e0:f2:07:
4e:d6:71:ab:78:2b:76:ef:e4:0b:6f:25:d7:89:35:
1c:7a:ba:a1:a8:0c:d1:fb:8e:f5:0d:5c:6c:a1:20:
91:36:ab:fe:21:02:33:89:27:f0:3d:5f:9b:3a:01:
87:72:94:3f:25:a1:41:67:90:ac:18:4e:2b:9e:17:
60:32:28:30:34:19:e8:75:fb:58:40:0d:c4:65:2a:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F1:F8:B2:93:07:C8:25:9A:2E:9A:6F:FD:C2:FD:4A:56:45:D8:36
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0PH4spMHyCWaLppv_cL9SlZF2DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.235.0/24
88.216.35.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e6:b5:56:39:75:c3:1e:96:c6:8c:2c:ce:5d:19:cd:8d:3e:
b6:6a:8c:d5:e5:81:d5:64:2f:ac:1a:48:db:60:5d:9d:d3:8f:
e7:da:41:68:c2:bb:f7:de:cf:24:b6:da:f7:3e:6a:3a:62:04:
20:f0:c0:f6:10:2d:67:3e:f1:88:12:4b:62:20:2d:79:d0:72:
ab:48:92:66:25:8b:40:42:15:00:53:07:5f:fa:3e:e7:e7:46:
2c:fa:15:c5:3d:07:ed:f2:c7:7e:03:c1:20:27:0c:a9:a0:64:
fd:98:e4:f0:76:98:4b:95:50:d8:da:75:49:a8:79:0e:e8:e2:
a3:a6:58:60:e6:0a:e6:ef:70:94:83:40:55:ec:68:0b:bc:29:
a7:a2:f4:e8:39:29:03:6c:97:09:97:e8:0f:68:5d:8c:54:a3:
96:4e:f8:8f:d1:9f:dc:89:95:db:b9:00:41:75:49:a2:c7:ba:
2b:8a:cd:05:61:3f:4b:aa:0c:fd:c9:04:18:fc:44:f5:ad:5f:
2c:ae:20:ea:cd:78:41:cb:aa:f0:79:94:47:7b:30:64:f0:ba:
1e:82:67:d7:12:dc:12:93:12:c4:54:02:5b:a4:b9:3e:5e:34:
03:07:31:c4:5b:58:d8:0c:1e:f4:af:4e:4c:45:9c:41:6f:00:
b5:25:a3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:26 2023 by rpki-client on console-ams.rpki-client.org