Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8LAiyiuXGrIUXGwwzgRMGrNm7hA.roa
File: 8LAiyiuXGrIUXGwwzgRMGrNm7hA.roa (raw, json)
Hash identifier: kUi5BNa/NtkLdr/PauGcgj1LHOf0Fs15+XHuWMMRpD0=
Subject key identifier: F0:B0:22:CA:2B:97:1A:B2:14:5C:6C:30:CE:04:4C:1A:B3:66:EE:10
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFB2B7AEF1A6C858E1945A95857FC7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8LAiyiuXGrIUXGwwzgRMGrNm7hA.roa
Signing time: Sun 01 Jan 2023 18:54:46 +0000
ROA not before: Sun 01 Jan 2023 18:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 88.216.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:b2:b7:ae:f1:a6:c8:58:e1:94:5a:95:85:7f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0b022ca2b971ab2145c6c30ce044c1ab366ee10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:bd:fc:47:f5:af:00:d3:89:7f:f9:74:ae:
f3:b7:76:e1:86:b6:23:85:fa:14:61:f9:2a:de:40:
dc:ac:f3:bd:5c:82:c5:d2:bb:47:b5:f8:a9:b5:2f:
cd:11:67:2f:ae:8e:83:36:08:5a:d8:c7:4b:35:5f:
90:3a:b5:e0:44:7d:ad:11:69:99:9d:51:6d:62:09:
3b:b4:1d:e9:b2:ed:87:0c:32:01:b4:ab:6c:8b:14:
f0:b3:b4:dc:8f:c1:e3:63:d9:c4:b9:96:27:11:4c:
f7:62:40:69:d8:70:eb:79:b2:56:06:47:70:ea:97:
43:9e:95:25:df:8a:35:c1:74:03:e7:39:ee:83:40:
6e:83:4b:8a:a2:79:ad:8a:33:cc:6a:30:fc:4d:f7:
36:98:f3:16:4b:c4:44:9e:63:ac:d2:69:ca:11:6b:
18:86:83:60:fd:d5:38:3f:a6:9c:3d:11:7c:44:5e:
9a:eb:e8:fd:d7:8e:04:60:82:b6:a2:b8:6e:a1:20:
e1:29:37:16:bb:74:f1:cb:2e:c0:1d:31:48:5e:e7:
e7:79:f8:3d:b1:fc:c1:e3:2a:fd:a2:5a:07:d5:ca:
99:73:2c:79:92:8b:53:e9:a9:f2:92:5d:90:cb:6d:
5c:a3:77:9a:30:1b:80:52:60:a3:09:d3:d8:57:74:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B0:22:CA:2B:97:1A:B2:14:5C:6C:30:CE:04:4C:1A:B3:66:EE:10
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8LAiyiuXGrIUXGwwzgRMGrNm7hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.97.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ad:a7:cf:3b:3d:4b:1d:2d:3b:82:6b:9d:d5:e7:c4:73:3a:
51:44:75:e0:85:59:d4:4e:15:d3:a6:4c:23:d6:92:98:45:59:
f0:c7:93:cd:af:66:f8:41:67:4d:d9:38:8c:92:eb:d5:bf:09:
de:d7:ce:df:93:61:6d:ac:5f:b0:d8:f8:f7:c9:d2:48:4a:ee:
f1:b0:cc:3e:84:f8:64:fe:ca:48:20:d6:d8:03:2a:53:5f:a0:
35:1b:de:b6:62:97:17:90:27:65:57:d2:18:14:9b:21:be:4e:
f8:0b:f7:2d:27:e9:76:50:08:d3:07:9a:98:64:97:cc:69:4a:
d1:fd:ef:52:e1:cf:4e:60:f9:8f:c1:d2:8a:91:02:31:29:f0:
82:83:43:49:a3:8a:7c:5e:ed:8d:da:1e:17:57:7b:98:7f:73:
a9:68:3a:75:ce:7e:8d:8a:5c:7f:54:1a:b7:36:4b:97:e8:a3:
61:93:8a:41:c5:59:1a:2d:f7:13:0f:8e:eb:ed:48:2d:77:2f:
ae:1c:91:80:66:8c:6a:a0:34:be:7e:4d:bb:55:e3:64:fa:3b:
e5:76:e0:e1:ef:b1:62:46:8a:03:c0:2c:00:e3:e0:c9:85:9d:
41:05:1c:e0:5f:71:26:d3:a0:13:b0:10:61:c3:e9:30:5a:6b:
76:2c:4b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 16:34:31 2023 by rpki-client on console-fra.rpki-client.org