Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6ixTo_sqOmMiGmognT6B4YJo9Ec.roa
File: 6ixTo_sqOmMiGmognT6B4YJo9Ec.roa (raw, json)
Hash identifier: fYUL3UvQSms2bUfEjR+woJlMdFujHyvcZ/hNVzWfH3M=
Subject key identifier: EA:2C:53:A3:FB:2A:3A:63:22:1A:6A:20:9D:3E:81:E1:82:68:F4:47
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01857C772BF41F7ACF19F0841AE8D7DD01D4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6ixTo_sqOmMiGmognT6B4YJo9Ec.roa
Signing time: Wed 04 Jan 2023 11:07:42 +0000
ROA not before: Wed 04 Jan 2023 11:07:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 84.32.52.0/22 maxlen: 22
88.216.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 07:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:77:2b:f4:1f:7a:cf:19:f0:84:1a:e8:d7:dd:01:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 4 11:07:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea2c53a3fb2a3a63221a6a209d3e81e18268f447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:4b:04:8f:c2:87:1b:8c:e5:2c:75:83:b1:
0d:4d:6f:da:5a:19:20:2d:a8:ea:7f:c9:d6:37:af:
d8:1a:8d:4f:52:05:e7:05:41:ec:e4:5d:68:d8:9a:
33:ee:b0:5f:f3:0f:7c:61:f3:54:36:ce:41:da:44:
8c:2b:65:85:99:db:54:8e:bf:6f:11:24:ac:7e:fd:
1b:bc:e6:89:0c:ea:50:8f:6d:0e:78:93:c6:8c:b6:
68:89:a6:a3:2c:fb:ee:9f:81:e6:da:fa:d7:89:f2:
30:18:a8:71:62:7c:31:ba:14:e8:80:8c:52:4e:e7:
4f:7d:8e:63:63:a8:a4:0d:eb:bf:f7:36:15:85:1c:
1d:0b:9e:9f:49:3f:73:7f:c6:1b:7b:33:14:9f:ef:
e8:d6:a0:b0:18:1a:da:4b:3c:de:6a:a7:2e:44:83:
ec:fb:44:6f:c9:72:84:53:2b:1e:e1:b8:15:96:6c:
f8:f4:74:26:44:c9:ed:70:39:0d:c8:d3:37:1c:87:
77:99:ad:23:05:14:de:e1:97:60:00:dd:b5:ef:c6:
f1:dc:bf:1c:ed:4e:57:fc:c1:d4:1f:2c:3e:12:a2:
32:3c:87:c4:22:bf:b6:ea:47:32:59:77:46:c0:fc:
e4:cb:dc:18:e9:6a:38:c9:e5:be:5c:39:00:59:73:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2C:53:A3:FB:2A:3A:63:22:1A:6A:20:9D:3E:81:E1:82:68:F4:47
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6ixTo_sqOmMiGmognT6B4YJo9Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.52.0/22
88.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
88:72:33:e7:7b:96:5e:d2:09:57:13:ac:57:b0:db:9b:50:4d:
ad:d1:9d:2f:8f:e4:7b:52:f0:15:99:01:62:4f:19:27:6f:75:
8c:d1:8e:53:19:23:75:6a:76:21:08:54:4d:4d:d3:a8:24:af:
35:3a:bb:83:5d:ae:c5:92:9f:aa:0d:00:88:84:39:30:6f:14:
35:b9:da:eb:3d:8d:38:b0:27:d6:ab:21:c4:c9:37:8d:ec:9e:
f7:c4:e4:12:2d:9a:1c:21:96:09:1a:c3:9d:5e:c6:d7:c4:e6:
58:14:8f:53:2c:09:c8:fd:e9:25:dc:be:c7:f1:aa:ea:5a:84:
ae:4a:fe:45:ca:b6:dc:81:3a:86:6f:67:65:fe:2a:61:d3:79:
3b:7a:f9:33:af:85:67:2c:3a:cd:ee:5f:8a:51:cf:d1:3e:ba:
67:2e:15:b0:e6:68:d6:19:c5:d2:cd:b4:3b:67:1b:4f:42:dc:
ff:82:79:6d:92:03:35:0d:c0:77:f2:c9:25:33:42:1a:59:ff:
f4:33:59:61:56:bc:45:03:63:fb:4d:d0:56:be:d8:ca:d2:8f:
9a:b8:82:0d:89:69:4e:e1:44:a1:55:4a:f5:54:4b:c2:64:5f:
d0:cb:cb:74:4c:e1:1f:d0:d1:fc:e2:c7:cb:08:a8:da:b7:68:
69:13:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org