Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4ilmCKzx17cjbdHDG9U2Xwhi-Rk.roa
File: 4ilmCKzx17cjbdHDG9U2Xwhi-Rk.roa (raw, json)
Hash identifier: KAMHCtZ55gt6QbSa/wdcTfQzVLb47+FeHybdREMIk4M=
Subject key identifier: E2:29:66:08:AC:F1:D7:B7:23:6D:D1:C3:1B:D5:36:5F:08:62:F9:19
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187D7491605B912AC22AB4CC1A52440AADF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4ilmCKzx17cjbdHDG9U2Xwhi-Rk.roa
Signing time: Mon 01 May 2023 12:28:23 +0000
ROA not before: Mon 01 May 2023 12:28:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 84.32.66.0/24 maxlen: 24
88.216.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d7:49:16:05:b9:12:ac:22:ab:4c:c1:a5:24:40:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 1 12:28:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2296608acf1d7b7236dd1c31bd5365f0862f919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:07:61:16:91:d4:b1:fd:eb:f8:97:c2:b4:
91:5f:66:1f:52:84:85:c1:b7:54:63:00:16:8b:5b:
77:28:7a:0d:63:12:0f:84:b4:61:1f:06:d5:38:71:
54:3a:1e:88:0b:73:7f:29:f7:70:91:43:63:40:95:
c1:df:9a:37:46:49:6f:d7:46:41:1a:3e:8c:80:19:
d1:f2:38:d1:61:c2:e9:fb:d3:bf:e6:21:b5:7f:72:
da:c6:9b:67:9d:05:bc:12:3d:d6:41:10:fa:70:1b:
c2:cb:37:31:ce:2f:9c:99:bf:53:b2:fa:a4:b2:2e:
b2:cd:82:9a:0a:e1:31:3e:7c:09:25:31:34:5d:b0:
46:14:fc:21:e1:22:38:a4:5a:e2:fa:27:81:47:3d:
13:0e:92:80:61:c2:a9:6a:e4:a6:66:b5:3b:c8:15:
54:f0:48:e6:3e:fd:e6:c2:2f:ca:ef:3e:4e:fe:94:
be:32:72:59:7f:80:f6:b8:c0:4a:8c:75:86:d2:2b:
e8:76:45:e6:47:51:95:76:f4:d0:6e:02:a4:98:67:
ba:c7:7c:de:24:d6:50:a1:c3:9d:dd:28:dc:2a:74:
fe:8f:75:6d:94:d0:19:df:29:4b:d9:59:f1:1e:3f:
3e:83:35:9a:ea:f4:70:49:7f:bd:ea:80:e3:8c:6f:
2a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:29:66:08:AC:F1:D7:B7:23:6D:D1:C3:1B:D5:36:5F:08:62:F9:19
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4ilmCKzx17cjbdHDG9U2Xwhi-Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.66.0/24
88.216.95.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f8:0c:8b:98:f6:a4:03:47:3a:98:bc:39:cb:3d:f3:ca:24:
51:86:b7:28:f1:ec:a0:64:ff:db:69:b5:e8:73:91:88:e4:dd:
95:64:32:ae:20:83:26:36:1b:9c:a5:40:4a:1f:5b:61:ad:66:
ba:da:d0:26:50:8d:29:01:63:4c:42:71:88:d8:75:ae:4a:3f:
4d:14:c3:66:36:44:77:a1:4f:f7:d1:d8:4c:4c:64:71:cc:85:
ff:f2:49:7f:a5:5e:6c:90:01:56:5c:86:8f:23:64:b0:6f:b3:
50:a7:b7:05:4f:68:a5:32:33:a9:1b:01:ed:3d:ca:ef:5b:79:
d6:ed:84:08:8f:77:98:39:1c:25:5b:a9:d8:2b:96:6c:90:13:
29:66:ef:61:05:f6:e1:fc:6b:b4:ba:ee:18:f8:c6:b4:be:28:
8b:1f:24:14:43:18:18:0f:57:a4:dd:7a:3b:0f:0c:2d:6e:7f:
2a:90:e5:3d:17:75:fb:04:f3:5d:eb:69:93:8a:fd:8c:d0:3d:
ad:ae:4e:dc:df:74:f4:4e:9c:fa:c5:0b:55:3c:b7:a9:47:e1:
4d:71:5e:ad:6a:33:2f:83:dc:c8:26:ee:43:3d:ee:ed:76:6a:
70:4d:51:ae:d9:24:72:a9:e2:72:b8:49:88:db:68:40:c4:86:
4b:2a:aa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 18:41:17 2023 by rpki-client on console-fra.rpki-client.org