Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/64H6Rq3VdY9AFehxGvB1jHGs6_Q.roa
File: 64H6Rq3VdY9AFehxGvB1jHGs6_Q.roa (raw, json)
Hash identifier: 0qlw/1tCe0GE3ny65ROlHgqj1MoHhUG5S7UcoV0HCkY=
Subject key identifier: EB:81:FA:46:AD:D5:75:8F:40:15:E8:71:1A:F0:75:8C:71:AC:EB:F4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFBCF222ABF3D78DDDDF88C6C6E4CC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/64H6Rq3VdY9AFehxGvB1jHGs6_Q.roa
Signing time: Sun 01 Jan 2023 18:54:48 +0000
ROA not before: Sun 01 Jan 2023 18:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 88.216.189.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
88.216.18.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 18:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:bc:f2:22:ab:f3:d7:8d:dd:df:88:c6:c6:e4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb81fa46add5758f4015e8711af0758c71acebf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:05:d2:03:04:c3:eb:ad:b0:c5:27:78:47:f1:
68:65:14:9b:0d:44:78:5f:7f:ed:3c:01:a3:cf:9b:
ef:1f:88:7a:a6:56:62:90:be:35:4d:fe:06:7b:d8:
c5:77:ab:64:dd:a2:e9:57:ba:be:c8:79:e7:ee:7d:
29:a7:9e:45:34:ee:21:9b:36:a0:3d:d8:cd:85:54:
d6:1c:17:8a:25:e9:7d:ad:77:eb:d4:67:34:92:a5:
76:e6:0c:2a:37:59:e6:7a:fa:e7:80:fb:d0:6a:db:
cb:cb:4a:df:59:aa:72:03:bd:af:ed:1e:79:61:3a:
26:3d:0a:a7:1b:ef:c6:7e:d2:cc:15:6d:1f:33:6a:
16:a6:2a:e0:43:18:94:fa:d5:aa:ea:73:db:48:f5:
04:bd:99:20:de:11:35:0e:c4:c1:de:4e:3c:dd:61:
b9:1b:e6:d4:8a:b3:fb:8e:ea:6c:c3:63:a8:5a:ee:
a9:47:e3:61:96:c2:3f:db:3e:fe:c8:6e:e7:c4:d0:
21:e3:b6:20:7e:7e:aa:8e:33:4c:19:75:a8:02:6f:
22:67:cd:26:81:e6:d0:8c:04:15:06:c2:21:9d:2e:
56:88:a1:2c:58:c4:39:62:95:a1:f4:5a:c4:d5:6a:
a5:e8:ab:69:fd:91:c0:69:ad:49:47:93:e5:e9:34:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:81:FA:46:AD:D5:75:8F:40:15:E8:71:1A:F0:75:8C:71:AC:EB:F4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/64H6Rq3VdY9AFehxGvB1jHGs6_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.231.0/24
84.32.234.0/24
88.216.18.0/24
88.216.189.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5c:1a:13:1a:05:a2:2b:ae:c9:98:c4:e4:89:0e:64:d5:76:
55:74:1a:0b:b9:ee:66:74:c6:a8:af:56:17:05:94:b9:1f:c8:
1d:2a:77:0c:cf:4f:7e:52:0c:0f:8b:db:24:7a:20:26:cd:45:
80:a2:8b:95:7b:d2:b3:fd:fa:8a:29:44:4e:8b:f5:d8:89:45:
39:ec:47:60:9f:02:36:67:a9:5f:60:35:c4:de:17:54:e1:9c:
e7:95:83:4c:0e:18:c2:d2:9b:82:43:68:ee:e8:99:41:0c:22:
2d:10:4b:e3:51:08:10:cc:bc:40:f8:63:df:4a:a3:14:5b:3c:
9b:6d:02:5a:0a:57:09:e0:92:c6:5b:ba:63:96:f7:0d:3b:d3:
b7:90:71:8e:71:a1:2e:c5:b5:e8:ca:9d:2f:8f:e0:30:4b:b6:
36:54:41:49:a2:64:79:ec:d9:8b:53:80:04:68:4b:a9:05:a1:
e2:2d:06:e6:ab:43:a3:58:98:bd:2e:f6:79:e5:24:9c:bb:85:
65:49:1e:fa:8a:16:02:5e:cd:28:8d:59:b4:c1:56:f4:72:2b:
15:d4:56:0a:76:8d:7f:a5:11:97:ef:58:03:58:6d:71:7f:d5:
43:8c:3d:fc:70:03:4e:bf:99:0a:8a:b0:04:5c:d8:0c:c5:95:
8e:60:27:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org