Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1IxL3aJYYsPPJVKgW_txSv0oliM.roa
File: 1IxL3aJYYsPPJVKgW_txSv0oliM.roa (raw, json)
Hash identifier: EZLqrIcyV2/wJFxoGq64VWmWaxe4ZVkfdUqSQzvtUfA=
Subject key identifier: D4:8C:4B:DD:A2:58:62:C3:CF:25:52:A0:5B:FB:71:4A:FD:28:96:23
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187365BBD293C375BE45C96337414EAF511
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1IxL3aJYYsPPJVKgW_txSv0oliM.roa
Signing time: Fri 31 Mar 2023 06:29:54 +0000
ROA not before: Fri 31 Mar 2023 06:29:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 88.216.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Apr 2023 05:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:5b:bd:29:3c:37:5b:e4:5c:96:33:74:14:ea:f5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 31 06:29:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d48c4bdda25862c3cf2552a05bfb714afd289623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:2f:60:1b:da:90:0a:b5:45:f4:3d:56:c1:
2b:06:31:17:dd:97:f7:0b:b9:f1:5b:07:ab:77:84:
d8:13:87:66:c7:f5:17:f8:5a:cf:5a:bb:c8:6c:6d:
ee:35:0b:51:90:33:5b:e2:97:8d:9d:d4:97:6d:f4:
d1:92:35:73:68:24:53:ff:98:7b:f5:3b:c8:22:74:
2e:d9:e9:bb:2f:dc:b9:bb:23:99:49:bc:f7:11:91:
7c:ae:69:cd:8c:03:37:7c:78:ea:60:09:5a:22:58:
ae:2c:ea:37:82:f2:8b:5b:ca:3c:2f:72:fb:66:52:
c8:76:5d:21:a2:e9:01:98:43:97:04:9a:f6:d7:3a:
08:81:76:57:e1:1d:c1:e5:54:94:f2:90:26:87:a7:
3c:75:9e:1a:1d:eb:ba:03:92:2d:b0:24:7d:2f:4a:
e0:3c:ef:58:df:e6:7e:9f:30:1c:93:56:9a:93:da:
d0:ef:c5:5f:d5:80:6a:72:23:d3:5f:16:77:77:21:
91:f4:6b:a9:de:78:f8:44:e4:28:31:d2:cd:36:e3:
d2:e8:72:ab:bd:76:99:ce:27:21:c4:33:27:c5:33:
02:d4:82:9b:4c:1c:06:82:58:80:e0:15:ef:a9:2b:
bf:6d:3e:f7:55:33:f8:6d:9b:61:5a:1b:82:fd:19:
68:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:4B:DD:A2:58:62:C3:CF:25:52:A0:5B:FB:71:4A:FD:28:96:23
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1IxL3aJYYsPPJVKgW_txSv0oliM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.16.0/24
Signature Algorithm: sha256WithRSAEncryption
84:64:09:83:c5:bd:3b:64:4a:dd:c2:80:10:42:c5:2b:a3:e9:
cd:8d:dc:bd:d8:ef:a4:f3:5f:3c:82:46:33:6f:94:94:06:b9:
3e:e2:9b:ee:72:7f:f2:eb:fd:b3:d5:a4:74:7c:79:d2:2d:1f:
da:f8:a1:1f:f9:9e:4e:c0:3b:58:31:bb:c2:af:b5:bb:21:ab:
1b:af:2c:43:19:e1:4c:7c:02:60:f2:d7:b2:91:82:aa:7d:86:
02:77:66:d4:e9:7c:77:76:16:55:4e:5c:ab:49:da:54:38:79:
3a:cb:56:6c:b7:77:fa:5f:ff:24:e0:12:b6:0e:18:18:dc:81:
12:05:02:2b:e7:12:e6:8b:0d:db:12:57:98:a2:72:4a:58:b3:
3c:48:fa:5c:70:41:ae:50:46:30:08:4b:46:be:ad:f3:a7:c4:
e2:1f:a0:f1:0c:dc:d1:10:d0:3f:ba:6e:59:26:c7:71:12:68:
57:e1:82:05:77:dc:c2:7a:c8:78:99:d0:ba:f3:c7:87:6b:a9:
9c:a8:33:75:59:bb:c4:ae:89:a2:e6:84:3d:26:d0:58:29:d3:
ba:b9:c3:49:0c:d4:a1:c6:e4:ca:ee:bc:59:9d:59:fb:99:34:
3e:92:ba:4f:82:a2:f6:8c:c2:fe:0a:fe:46:15:8e:f7:c5:cb:
ed:c8:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org