Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8tY6pIYDxfpeWVaRMBF6DzxriiE.roa
File: 8tY6pIYDxfpeWVaRMBF6DzxriiE.roa (raw, json)
Hash identifier: 8/arqiY+g9H8a1//PtiiCSLen6z49IMoLbXMq9GKLOE=
Subject key identifier: F2:D6:3A:A4:86:03:C5:FA:5E:59:56:91:30:11:7A:0F:3C:6B:8A:21
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01882638821FF1D882EE64869753A0F855FE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8tY6pIYDxfpeWVaRMBF6DzxriiE.roa
Signing time: Tue 16 May 2023 20:20:17 +0000
ROA not before: Tue 16 May 2023 20:20:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 88.216.104.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 May 2023 07:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:26:38:82:1f:f1:d8:82:ee:64:86:97:53:a0:f8:55:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 16 20:20:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2d63aa48603c5fa5e59569130117a0f3c6b8a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:e9:89:07:d4:e7:9c:20:b3:5e:16:0f:84:
30:1a:c8:3f:b9:0c:40:f6:ef:2a:d1:08:4d:09:35:
54:e7:21:38:27:a4:7c:ce:f2:a1:eb:58:fb:05:9c:
f5:ea:8e:82:51:dc:07:35:f9:b9:39:98:8a:a5:ad:
ff:d8:79:b0:cd:07:d9:71:36:99:19:83:39:c4:af:
cc:71:b7:d8:33:5e:e1:bc:4c:85:3a:4a:2d:91:28:
15:05:58:46:03:38:ce:5c:14:c4:93:b5:f1:ae:c8:
6f:ef:c4:a4:db:f0:0d:b1:30:28:6d:58:cf:99:e5:
03:24:3d:5e:bf:b5:f3:e6:31:31:73:b6:23:09:48:
f1:0d:63:6a:e3:c0:83:43:ea:0d:46:d3:bb:5c:f7:
35:9f:87:68:c9:e3:6d:1e:1b:05:68:e7:f0:a8:2d:
57:05:9f:04:16:a0:fd:ba:f1:3b:17:00:59:dd:e0:
50:cb:2b:38:25:fe:ef:1d:fe:53:b5:d8:4f:1d:13:
90:a7:81:ec:31:96:6c:fc:07:09:b9:ec:f0:05:4b:
bd:33:5a:22:13:d5:e4:d7:11:f1:ef:0e:b3:e8:3a:
9e:a6:b4:31:69:d5:81:6d:58:09:2c:92:a3:c3:df:
ef:73:c5:3a:04:a4:c3:4a:a1:0b:c8:e3:04:35:98:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D6:3A:A4:86:03:C5:FA:5E:59:56:91:30:11:7A:0F:3C:6B:8A:21
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8tY6pIYDxfpeWVaRMBF6DzxriiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.150.0/24
88.216.104.0/24
88.216.110.0/24
Signature Algorithm: sha256WithRSAEncryption
55:08:13:6a:12:2b:79:02:a1:61:d5:f1:91:b1:f6:e7:65:5f:
86:24:25:2c:ff:b9:57:16:2a:21:4a:76:a0:49:21:96:d2:82:
a8:3f:f9:85:2d:b8:36:e0:a3:d4:c6:46:0e:58:6f:53:e9:40:
cb:3a:1d:ab:45:9b:83:9b:17:ef:b5:83:e5:bd:27:8e:9c:7a:
f5:22:63:9e:81:e2:35:81:b5:d4:60:4b:6b:e9:8b:d0:63:d0:
f7:d6:80:95:9f:51:7f:67:e2:55:8b:69:fe:5d:50:fb:c9:eb:
c4:9e:80:64:27:b9:2b:a2:1e:2e:b2:f5:28:e5:91:da:f1:11:
0f:23:fb:ea:d0:68:c4:75:cf:23:ca:b0:ac:3b:b5:94:7a:75:
99:f3:24:46:d5:fc:34:de:6f:bc:6a:09:e1:87:1e:0c:af:9d:
74:93:50:38:c8:59:16:c2:00:3b:44:eb:6a:a5:d4:d7:c9:dd:
be:24:fe:26:6e:6c:09:25:d3:64:5b:ae:09:e3:ef:0f:48:18:
aa:41:81:c8:05:61:4c:5b:93:ef:28:db:2c:77:27:f6:43:18:
42:6e:0c:a8:99:37:54:46:34:76:6e:7e:6f:4e:6c:40:60:0b:
98:a8:f8:89:75:f5:bc:cc:1c:46:c9:2d:61:69:e1:68:21:1b:
43:f1:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org