Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-8YqfOR1n_vxNQ0jyugSosm-iGI.roa
File: 1-8YqfOR1n_vxNQ0jyugSosm-iGI.roa (raw, json)
Hash identifier: oLVqv0JoRKk6pMYkZCgprqPP/9wLln6kb/79VjCTtAM=
Subject key identifier: FB:C6:2A:7C:E4:75:9F:FB:F1:35:0D:23:CA:E8:12:A2:C9:BE:88:62
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFB3A714F21FEA4F4F078130D808B3
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-8YqfOR1n_vxNQ0jyugSosm-iGI.roa
Signing time: Sun 01 Jan 2023 18:54:46 +0000
ROA not before: Sun 01 Jan 2023 18:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12912
IP address blocks: 88.216.19.0/24 maxlen: 24
84.32.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 11:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:b3:a7:14:f2:1f:ea:4f:4f:07:81:30:d8:08:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbc62a7ce4759ffbf1350d23cae812a2c9be8862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:da:30:19:4d:10:cf:80:03:a2:25:b9:98:
8a:68:b6:57:f2:83:24:b0:30:a9:64:5b:48:65:64:
bb:cd:ea:17:fc:24:23:9c:34:fc:62:1f:92:c6:54:
aa:f4:41:2b:18:9b:b4:17:66:f5:67:5a:a4:e7:52:
43:4d:50:0c:72:e8:2a:78:bc:d1:7c:f7:97:d1:aa:
47:d1:d7:ca:04:f8:ef:06:26:01:09:4d:da:86:ef:
ad:9f:a1:2b:33:09:5c:06:c6:a8:69:ac:22:56:26:
cf:16:5e:6a:b0:ac:52:99:1b:c1:5a:8e:e9:c7:7e:
f8:25:ce:a2:b9:4c:14:aa:46:3f:8f:a8:7b:cb:71:
fc:6e:7c:d9:8b:aa:50:04:a7:cc:ef:f9:30:af:10:
14:87:21:63:c7:06:ad:f1:33:11:69:16:67:ee:8f:
46:b8:b8:56:19:ca:59:79:97:b6:2c:a6:06:52:b7:
54:0e:16:3f:60:e1:a1:e1:aa:eb:00:1f:74:45:d5:
f6:00:cb:05:ba:3c:5b:c2:9e:dc:fe:f1:2c:4e:c1:
84:ca:8f:94:2d:5a:a6:db:35:04:24:32:bc:c4:32:
db:7f:26:b6:9b:85:c1:ca:a3:76:43:01:d2:da:48:
3b:9f:e7:02:38:d6:2d:d1:64:31:b3:50:9c:58:69:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C6:2A:7C:E4:75:9F:FB:F1:35:0D:23:CA:E8:12:A2:C9:BE:88:62
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1-8YqfOR1n_vxNQ0jyugSosm-iGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.39.0/24
88.216.19.0/24
Signature Algorithm: sha256WithRSAEncryption
45:be:84:e3:e8:2f:42:5e:0f:84:1b:ad:b0:7c:c3:c1:47:2c:
22:f3:53:36:39:c9:e7:43:81:5a:2f:59:49:84:1b:97:fa:11:
3a:5a:26:f7:f7:71:a8:69:f8:3c:e0:d1:05:26:8a:5f:99:14:
21:4d:dd:77:f1:51:f3:63:0c:48:76:dc:e3:41:05:10:1c:ee:
5c:e5:eb:c4:55:ae:dc:4c:e8:dc:5f:79:de:92:d1:f5:12:53:
b3:e4:bb:d3:4e:20:fb:56:66:e4:2d:a2:ff:74:85:ca:35:36:
f8:91:d1:f0:10:b0:ee:ca:82:b2:14:6b:f0:26:e5:74:e8:62:
13:d1:3d:52:ce:74:1d:9b:7c:cb:aa:59:a0:5d:54:e0:97:98:
20:08:90:20:b6:1e:da:50:43:3d:1e:ad:79:28:e8:51:27:68:
e4:c0:e3:a1:4e:e1:6f:fb:55:b8:09:2f:28:38:ce:13:7e:60:
6b:de:ed:6f:55:aa:bc:15:c6:17:a2:a2:07:90:92:6a:60:49:
0d:75:fd:77:2a:b0:af:69:ef:d9:9a:40:bc:c7:61:1a:2c:22:
7a:dc:88:52:d5:64:ab:ba:fb:9f:19:f8:22:f5:da:e7:8a:4c:
b8:76:cd:68:93:86:90:cf:c6:33:a0:08:f2:a1:e7:85:ec:5e:
95:a8:03:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org