Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C3SKYzfNe6egsGlkBdTzv_ASZFM.roa
File: C3SKYzfNe6egsGlkBdTzv_ASZFM.roa (raw, json)
Hash identifier: 87FHJJ8qtq6DiL/jDDM5gky1W97wmlRFjuGqqWSiVKo=
Subject key identifier: 0B:74:8A:63:37:CD:7B:A7:A0:B0:69:64:05:D4:F3:BF:F0:12:64:53
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0186C514B1F657CA251C0BFF7D5606C49BD0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C3SKYzfNe6egsGlkBdTzv_ASZFM.roa
Signing time: Thu 09 Mar 2023 06:35:13 +0000
ROA not before: Thu 09 Mar 2023 06:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207429
IP address blocks: 88.216.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:14:b1:f6:57:ca:25:1c:0b:ff:7d:56:06:c4:9b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 9 06:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b748a6337cd7ba7a0b0696405d4f3bff0126453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:68:dc:77:a9:bc:1e:c4:43:3d:8a:11:2c:
10:ae:c1:8c:05:66:9f:79:58:ab:67:20:24:9e:a3:
04:b3:cd:d4:7d:97:fb:53:13:8d:ac:53:61:41:ed:
c7:fd:32:e6:79:0c:21:5b:f1:df:17:8b:5d:e3:5c:
aa:9d:c7:0f:21:01:1b:8f:89:60:7a:a8:68:d0:a4:
7b:cd:b5:00:37:4b:f9:29:63:31:bf:b2:b4:e8:17:
b9:b7:51:7d:21:00:b3:b2:79:ad:07:55:ac:88:b5:
4d:83:c5:2c:b1:18:72:ce:c8:ce:90:a4:a2:c8:7c:
7a:2e:98:49:86:f6:6e:6d:e4:d9:7b:f4:6f:0b:0f:
78:bd:26:4d:5f:45:58:45:d2:a1:a3:57:13:3c:56:
9a:41:be:a5:52:82:3c:35:f5:b8:67:1c:7c:04:9f:
2d:6e:5c:33:57:8a:33:ed:8e:ee:8d:f3:9a:41:88:
7d:63:a4:57:09:8a:f3:4f:80:53:60:54:84:71:fc:
7e:86:8e:03:30:45:da:ce:fb:4c:39:66:47:6e:4f:
2e:43:5b:a0:33:c8:fd:cf:b3:f8:a9:a3:39:c0:f3:
3d:f0:c1:ac:e7:10:6c:76:56:16:83:10:be:db:b5:
d7:4b:e0:7a:4f:7f:8f:c5:79:89:65:4f:28:9f:7f:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:74:8A:63:37:CD:7B:A7:A0:B0:69:64:05:D4:F3:BF:F0:12:64:53
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C3SKYzfNe6egsGlkBdTzv_ASZFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.183.0/24
Signature Algorithm: sha256WithRSAEncryption
43:14:e0:af:78:08:25:0a:33:3e:c2:f9:26:db:5e:c7:90:41:
56:7d:6d:71:36:b6:27:ff:a7:2d:1e:ce:a0:0b:94:d5:d0:42:
c5:94:d7:91:f4:19:a8:fc:5a:46:df:d6:1b:f8:e7:30:b1:48:
2f:7f:eb:52:af:ef:a2:b6:5e:ed:5a:ce:96:b1:6a:11:6d:b3:
87:0c:7e:f6:ef:d0:fb:ae:cd:63:61:45:00:bd:99:b5:4c:9a:
1c:04:e1:34:98:1d:b7:d1:ab:46:81:c5:d6:46:30:cf:3b:4a:
a5:99:15:9c:e3:20:25:70:f9:c5:76:52:e1:2b:5f:94:57:85:
74:04:8c:ce:a6:1f:4a:64:53:38:2f:5a:51:6a:20:16:9e:54:
f2:eb:b3:0b:b0:f1:4b:d6:e6:d6:fd:22:55:f8:ac:ee:fa:54:
d4:4c:93:07:54:55:8e:ae:70:d2:b0:19:03:fc:26:d4:54:99:
fd:f2:f9:a5:d9:12:da:b1:f6:08:3f:1c:92:32:51:40:96:f1:
fd:ad:db:77:af:bd:f8:7a:77:46:dc:be:25:dc:b7:e6:67:78:
e1:34:c9:81:e3:70:51:47:c2:8b:a2:e6:b2:02:15:45:b1:6e:
33:35:02:ed:d7:96:5c:90:db:96:e3:db:84:59:60:31:88:b0:
c4:36:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org