Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DrQ2JeDUHFSnDK6K265gK5PS_pM.roa
File: DrQ2JeDUHFSnDK6K265gK5PS_pM.roa (raw, json)
Hash identifier: PFeb59h3yhC/1OZA353WI+Y0wHZOHCpfIsrxzaRhPmY=
Subject key identifier: 0E:B4:36:25:E0:D4:1C:54:A7:0C:AE:8A:DB:AE:60:2B:93:D2:FE:93
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188F675864C6B0B3E5331B92FFEBE1A6D1B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DrQ2JeDUHFSnDK6K265gK5PS_pM.roa
Signing time: Mon 26 Jun 2023 06:47:57 +0000
ROA not before: Mon 26 Jun 2023 06:47:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 88.216.104.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 14:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:75:86:4c:6b:0b:3e:53:31:b9:2f:fe:be:1a:6d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 26 06:47:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0eb43625e0d41c54a70cae8adbae602b93d2fe93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:31:29:bf:c7:b0:6c:62:55:9b:29:3f:2b:
e9:42:9b:fc:99:f3:69:cd:1a:c1:39:7e:e8:e9:28:
d0:f4:ff:e6:16:a6:9e:8f:59:6f:b4:b6:32:60:8d:
9b:e6:70:9b:d2:cd:80:b8:7c:df:8e:0d:1d:58:55:
b5:07:90:3c:1a:12:d7:f7:25:91:e3:3b:4a:94:bf:
22:4f:dc:a0:7d:5b:ce:0f:57:fd:0d:c1:26:12:10:
5d:bb:ce:73:26:2d:06:77:fa:dd:d7:49:27:4e:bf:
ff:8c:30:ff:0f:99:e8:a9:21:a9:e8:1f:bf:c5:3e:
7b:dc:05:bb:81:38:9d:68:57:2f:43:61:0a:eb:9e:
7d:cb:49:91:ec:37:37:41:f1:78:9e:93:21:30:1f:
c2:98:89:0c:50:54:3e:35:44:40:9a:e5:5f:3a:86:
9c:5f:dc:07:50:30:e5:f9:6b:67:c1:dd:b2:4d:ea:
0b:3c:5b:05:3d:df:12:e3:6c:fe:07:4f:15:fa:19:
21:ca:f7:25:3a:b0:25:0c:44:8a:5f:5c:e6:77:52:
c6:f6:e5:16:32:26:a4:41:fa:28:fb:c3:21:54:3f:
13:fe:b0:70:aa:b2:06:03:af:78:9d:25:b3:4f:29:
16:4a:c5:06:d7:26:ff:9c:8a:c1:a4:27:96:c7:49:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B4:36:25:E0:D4:1C:54:A7:0C:AE:8A:DB:AE:60:2B:93:D2:FE:93
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DrQ2JeDUHFSnDK6K265gK5PS_pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.104.0/24
88.216.110.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e7:2d:a3:db:8b:ed:24:40:08:61:90:c5:e8:ed:5a:a3:6f:
94:00:ac:bd:87:e7:10:ed:5d:15:3f:0a:8f:68:e2:4a:f9:53:
6e:ba:cc:0a:8f:d2:24:ed:6e:44:0d:c0:5d:41:3a:26:8c:73:
79:0e:ba:5e:60:21:a6:a2:45:f8:47:09:b2:50:22:10:4f:f9:
29:26:f0:88:56:00:c5:c6:bd:49:0e:ff:93:f9:e2:f6:ce:5d:
2f:31:8b:14:bd:b8:59:a4:49:98:62:09:0e:8a:b2:7c:0a:d4:
07:bc:1f:01:57:02:28:29:b5:b8:1e:e3:57:6a:7c:f7:74:6c:
c2:e9:e9:4d:de:3a:5a:6f:97:13:a7:5c:a9:26:fc:0e:89:a3:
a5:87:49:cd:89:19:6d:92:f5:57:17:5b:72:99:32:7f:a3:d4:
9a:19:44:f3:f2:57:b0:e9:bd:a5:a8:ba:8f:04:69:2b:fd:49:
df:77:8c:7c:60:f7:ec:6e:1c:ee:3b:ef:a5:4a:3b:65:e1:8f:
c9:44:8d:16:5e:20:e8:68:28:48:e1:b3:60:e5:4d:5c:9f:c5:
86:db:60:7d:c5:00:ad:cf:f6:3d:06:b0:27:9b:30:d3:a6:58:
4c:d5:7e:87:46:eb:32:55:da:19:33:b1:11:ef:20:8b:2a:a5:
2c:e5:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:25 2024 by rpki-client on console-ams.rpki-client.org