Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9T-VhasB0hQRlzajmZ1J2yPoziA.roa
File: 9T-VhasB0hQRlzajmZ1J2yPoziA.roa (raw, json)
Hash identifier: 9ZFbcTQLO51895W/TJP5MuOU59dFoLYiM523zIF8NsY=
Subject key identifier: F5:3F:95:85:AB:01:D2:14:11:97:36:A3:99:9D:49:DB:23:E8:CE:20
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01866B042113AFC4C3C94683E986C8B20B08
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9T-VhasB0hQRlzajmZ1J2yPoziA.roa
Signing time: Sun 19 Feb 2023 18:51:18 +0000
ROA not before: Sun 19 Feb 2023 18:51:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 88.216.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Apr 2023 07:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6b:04:21:13:af:c4:c3:c9:46:83:e9:86:c8:b2:0b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 19 18:51:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f53f9585ab01d214119736a3999d49db23e8ce20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:fa:7b:5c:71:fb:a8:4a:a4:f8:b2:25:89:
8d:1d:41:fe:0a:28:9d:b1:86:c4:67:7a:ca:9d:0c:
0a:7e:d2:2a:3c:08:f0:73:c8:2d:d5:e9:6e:30:74:
11:f7:e0:d8:b3:44:17:14:33:71:6a:32:e5:dc:8a:
b2:03:be:21:d6:d4:61:5c:91:75:cf:97:55:67:5d:
b3:0d:10:0b:3e:02:3b:7a:a0:c3:cb:69:e4:f3:a5:
80:07:84:dd:b6:ae:31:6c:16:17:e7:a9:64:ed:7f:
df:25:c9:14:6b:a5:63:30:4f:7d:cb:12:e6:db:ab:
e9:ca:f1:0e:6b:43:d5:16:86:79:41:72:f8:2a:31:
c3:18:52:bd:5c:98:6b:da:51:b0:c6:95:e8:7c:a8:
ba:f3:26:e1:4f:24:3a:86:25:00:15:cf:aa:9b:47:
c1:61:be:71:e1:42:25:c5:20:d7:67:08:80:0f:2b:
64:c4:3e:62:4d:56:ef:82:82:bc:60:45:dd:f2:7e:
d0:86:2e:15:e8:1c:61:41:09:75:ed:30:3d:03:1f:
6d:1e:94:05:e3:06:d7:d5:d4:eb:34:e2:c2:94:be:
c9:0b:0e:1b:03:68:5d:a9:4d:0d:50:15:bd:3e:78:
f7:94:51:5a:56:b9:99:9f:35:f1:a0:92:6c:28:99:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3F:95:85:AB:01:D2:14:11:97:36:A3:99:9D:49:DB:23:E8:CE:20
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9T-VhasB0hQRlzajmZ1J2yPoziA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
53:e8:50:f7:e3:50:24:96:8a:d0:93:fe:0a:43:ce:05:e1:75:
f4:75:f2:3f:c2:96:e1:0a:d8:88:cc:fa:0c:a1:d2:11:60:15:
23:c2:b1:23:93:21:bc:f8:74:a4:b0:b7:15:bb:d8:df:e1:86:
38:ad:fa:93:ac:e2:67:fe:b8:c4:c4:6a:38:b0:53:3f:b5:68:
16:55:c4:32:14:76:a5:2d:1c:70:4f:a5:e7:18:b2:7a:89:7c:
52:08:25:3d:9f:62:df:b5:4a:f9:b5:75:e3:ae:57:43:04:39:
8f:5d:1b:54:d9:b4:85:49:14:66:f1:19:d3:dc:d8:2c:9e:95:
bf:d0:f9:67:a3:d2:d3:1b:11:2b:e1:82:41:04:26:7f:a2:5f:
29:1d:21:e3:9d:2e:a0:17:83:c7:20:92:44:72:37:f2:6e:5f:
63:d9:64:57:dc:16:6c:5b:88:97:29:12:14:da:40:ac:53:e9:
bc:ce:8a:44:e0:d3:ad:af:e4:7b:b3:bd:1a:c9:a1:78:da:27:
41:44:3b:12:6a:70:17:22:f0:a5:ac:7c:92:1b:b0:9e:58:ca:
27:2b:92:67:cb:e3:61:c3:f8:b1:9a:36:35:8e:d2:6d:9a:23:
37:57:75:8b:9e:87:1a:dc:34:ce:1c:e0:eb:1c:43:0b:bf:cf:
a3:de:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:25 2024 by rpki-client on console-ams.rpki-client.org