Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9NYuKvxzenBtP6Ym5nA1UTDRyrg.roa
File: 9NYuKvxzenBtP6Ym5nA1UTDRyrg.roa (raw, json)
Hash identifier: tOfhzXXOnEh4OSw08tZCPshnCBu3SQ/vHoPxxCoXfu4=
Subject key identifier: F4:D6:2E:2A:FC:73:7A:70:6D:3F:A6:26:E6:70:35:51:30:D1:CA:B8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188DC5DF3D747B9D9379B38056DCF764370
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9NYuKvxzenBtP6Ym5nA1UTDRyrg.roa
Signing time: Wed 21 Jun 2023 05:12:04 +0000
ROA not before: Wed 21 Jun 2023 05:12:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 88.216.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Dec 2023 14:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:5d:f3:d7:47:b9:d9:37:9b:38:05:6d:cf:76:43:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 21 05:12:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4d62e2afc737a706d3fa626e670355130d1cab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:12:c2:2a:b2:1a:cd:b4:81:d9:6a:67:78:26:
de:cd:1e:7d:6d:13:37:dc:43:21:93:48:e3:a0:ca:
37:35:13:c8:2b:c6:88:7d:45:dc:f9:9a:a3:81:2f:
ce:60:b3:a8:85:cf:de:f8:c5:72:67:36:45:76:34:
de:b7:20:46:26:5a:56:d1:00:2c:d3:5c:45:ae:ed:
63:33:5b:3a:40:55:ab:a9:be:be:f2:6f:33:be:aa:
1b:39:f5:da:ae:ab:14:66:b3:37:1b:d3:4c:18:8f:
7c:d2:db:ce:0c:67:0e:07:03:f4:66:60:8d:4d:90:
47:99:7b:86:b0:87:86:14:e0:c9:40:65:e7:16:40:
eb:f2:93:7b:2b:e0:8b:fc:5a:4f:b1:cf:1d:9e:36:
22:dd:e3:07:8a:23:60:59:ac:6e:3f:bd:6b:69:5e:
3b:85:c4:c2:8e:f3:62:13:96:3d:f4:82:7b:63:59:
82:c3:43:cd:eb:59:29:55:78:69:d9:d3:0e:d2:dd:
25:00:bc:98:8b:06:14:95:10:0c:c0:ff:81:a8:a7:
47:0e:14:c5:44:db:08:5e:9e:65:3a:d3:27:b5:b5:
49:34:01:08:ad:5f:68:c0:3d:11:38:06:23:e2:df:
c8:04:db:e0:15:ee:86:22:e8:86:c7:48:fd:71:7c:
9d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D6:2E:2A:FC:73:7A:70:6D:3F:A6:26:E6:70:35:51:30:D1:CA:B8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9NYuKvxzenBtP6Ym5nA1UTDRyrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fb:90:b9:80:f9:55:8f:41:bf:98:2b:75:7a:96:78:e4:9e:
80:45:d8:90:f6:c6:cd:d1:9e:a1:20:26:72:ac:27:6b:a8:91:
98:d3:60:7a:9b:72:d3:a3:67:49:5b:54:5c:8e:f3:d0:1a:62:
ee:20:29:a4:cf:5b:09:06:f9:f6:72:37:74:ee:72:e3:26:8b:
8a:81:d0:8c:6c:33:a5:45:7f:0b:5d:4b:88:a0:21:e5:46:d4:
e3:a2:b4:6c:31:ee:dc:d2:5c:5c:33:23:be:1f:0c:f9:a7:67:
63:9c:da:5d:c5:ab:5b:f2:b6:9a:e1:32:6e:3e:23:61:54:04:
6c:bf:a0:ff:3c:dc:e4:5c:58:df:55:52:b5:14:5a:50:42:e6:
35:3d:15:42:23:7f:c6:a3:56:ee:46:2c:4a:99:1d:d0:97:ab:
82:cd:25:60:cf:d2:be:5a:5f:66:2e:2c:eb:56:fe:13:64:2e:
50:05:ad:a0:19:f2:0c:21:28:1d:0c:42:ee:aa:0d:31:39:51:
90:e5:65:2a:41:31:2b:bd:57:5b:42:9f:53:a6:f5:0b:69:be:
25:f3:d3:27:cf:39:0f:7c:a8:2e:18:4d:df:c2:29:7b:6e:8e:
23:40:b3:85:2d:eb:5e:85:c8:e3:d3:3f:90:36:1d:b1:79:ed:
02:f7:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org