Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7oN3qaF9Fzu5SGA0w6Wt6WOyGCo.roa
File: 7oN3qaF9Fzu5SGA0w6Wt6WOyGCo.roa (raw, json)
Hash identifier: cBvK+arRPg4XA3cgeV3blFfmnPFRD9TamQWLBe/qphg=
Subject key identifier: EE:83:77:A9:A1:7D:17:3B:B9:48:60:34:C3:A5:AD:E9:63:B2:18:2A
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185E29AD11CC44F14D88CC224F0B6FB184D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7oN3qaF9Fzu5SGA0w6Wt6WOyGCo.roa
Signing time: Tue 24 Jan 2023 07:07:54 +0000
ROA not before: Tue 24 Jan 2023 07:07:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.90.0/23 maxlen: 24
88.216.135.0/24 maxlen: 24
84.32.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 09:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e2:9a:d1:1c:c4:4f:14:d8:8c:c2:24:f0:b6:fb:18:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 24 07:07:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee8377a9a17d173bb9486034c3a5ade963b2182a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:da:a3:cb:1e:c1:1e:cf:97:54:dd:a1:d9:
d1:f3:65:9b:5f:55:0a:2a:a5:6f:82:9c:e0:c6:e0:
f0:10:98:03:7a:aa:4b:22:c6:29:47:7b:2a:3f:21:
80:be:3c:67:51:c4:a1:45:02:e1:ab:ad:f3:45:65:
7d:37:de:b2:96:b7:dc:af:a2:16:72:c3:6f:91:0d:
ae:0d:17:f8:c0:fc:79:12:4d:7b:5f:f4:e7:5f:06:
fc:02:f4:8d:5c:fe:be:94:54:65:bc:d0:65:d5:86:
b1:e7:dc:08:d4:44:2a:3e:cf:35:90:ce:2d:c7:9f:
82:0b:df:02:47:c0:70:fb:49:6a:ea:a0:56:6f:4c:
59:38:3e:57:86:85:6f:30:77:31:1f:c0:22:48:75:
ac:52:cf:b6:31:84:07:00:7c:e1:3a:0e:ff:d0:b7:
b4:fd:be:0b:ab:f0:8c:88:12:31:3e:25:ae:15:d8:
dd:e7:d7:f0:7c:94:58:0b:fd:96:2c:9b:73:ee:e6:
a6:f9:de:bf:0c:0b:66:ae:2d:67:6c:c8:5d:f0:1e:
3a:19:9d:05:b0:c3:ca:46:9d:f9:fc:e3:43:9d:a9:
dc:12:37:fd:ad:1b:93:ce:03:ec:32:48:f8:cc:b4:
ff:2c:94:c7:ce:3f:16:03:0d:0b:35:0a:89:35:c6:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:83:77:A9:A1:7D:17:3B:B9:48:60:34:C3:A5:AD:E9:63:B2:18:2A
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7oN3qaF9Fzu5SGA0w6Wt6WOyGCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.41.0/24
84.32.90.0/23
88.216.135.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bc:8e:e7:63:fa:bd:a1:85:34:99:b0:15:aa:fb:4a:e1:69:
00:0d:4f:54:ff:69:72:55:54:22:e2:91:e5:1d:af:ab:cd:a9:
ff:f9:5c:fc:bd:3b:a0:87:45:ae:2d:b2:73:de:2a:31:21:97:
ba:c7:4a:de:e8:35:fc:8d:9d:0b:40:22:f4:7d:59:c4:ea:df:
82:2d:ae:34:f3:78:b6:6e:2f:68:bd:3e:8b:6e:06:30:b0:67:
e1:2c:f6:79:88:b2:4a:e0:a4:35:56:6e:01:6e:ee:4f:e3:cf:
00:35:22:e5:db:69:fa:2f:00:ca:f3:03:f0:07:ff:77:d1:dd:
51:c0:a3:21:5c:6c:c3:f5:93:b3:eb:09:64:70:7a:a5:1c:38:
25:67:cf:70:47:30:37:80:a3:28:63:ea:e6:f8:26:68:7e:e0:
c5:8a:dd:81:68:b4:b0:87:51:ad:f3:2c:e7:be:1e:5e:e9:df:
6e:a5:7b:73:c0:e0:19:5d:3d:4b:6d:08:b8:30:5f:bf:2c:c4:
ae:e7:8c:4b:92:e0:4f:b6:78:1f:14:7b:ca:92:ca:5b:f9:46:
80:49:96:90:4a:75:8a:37:0b:6d:bc:25:24:81:98:78:60:20:
05:f3:bb:55:60:d2:0c:65:6e:30:34:4b:dc:69:a1:0f:96:e3:
59:30:50:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org