Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EWuxYNzZ6xWQENOdMD3gGvfcDXg.roa
File: EWuxYNzZ6xWQENOdMD3gGvfcDXg.roa (raw, json)
Hash identifier: Bn9iPFGOHTbWZKHhZbn0RXr7pibuNYSkeEJ9UmCIjUU=
Subject key identifier: 11:6B:B1:60:DC:D9:EB:15:90:10:D3:9D:30:3D:E0:1A:F7:DC:0D:78
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01876EBBEF2174C5751B475525941644FA0A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EWuxYNzZ6xWQENOdMD3gGvfcDXg.roa
Signing time: Tue 11 Apr 2023 05:13:42 +0000
ROA not before: Tue 11 Apr 2023 05:13:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 88.216.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 11:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6e:bb:ef:21:74:c5:75:1b:47:55:25:94:16:44:fa:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 11 05:13:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=116bb160dcd9eb159010d39d303de01af7dc0d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:fb:22:b5:2f:50:d3:ad:59:2d:5f:ab:b6:
0e:ad:60:00:81:1f:5e:7f:18:7b:1b:02:85:99:fb:
e6:d7:10:84:b8:14:fe:af:e8:e7:e8:b3:0c:83:64:
bd:c3:07:7c:2d:30:a2:0e:4b:c5:99:f4:64:e5:16:
19:ca:f6:b5:fd:21:ca:ab:32:fd:c3:97:5b:0f:b6:
88:25:e2:70:73:82:cd:7a:a3:39:a7:35:52:27:d6:
05:0a:7c:49:d9:2e:1d:f6:a4:e4:73:21:cf:97:db:
e0:fd:79:78:80:17:95:79:4c:87:c8:46:0d:cb:61:
d2:26:f2:83:7b:ad:15:61:67:51:4c:2f:1d:98:0f:
39:34:a2:ff:6c:ec:3a:a0:26:61:fe:da:c2:2a:18:
aa:92:f7:1a:22:33:09:6f:db:8c:e0:fb:70:29:ac:
92:4f:58:1a:e1:60:98:ce:87:b3:bc:57:18:49:82:
3d:db:3a:da:61:9f:61:03:c6:8a:2c:54:11:e5:f0:
63:51:be:1d:0c:55:29:1b:96:28:7c:be:08:26:6f:
b9:dc:69:62:b9:86:dd:01:50:b7:f8:56:9d:c3:05:
06:91:31:da:be:06:3b:c9:61:60:a4:4c:1c:f6:a3:
c7:9e:5c:94:e8:39:57:d2:47:55:63:59:69:ca:19:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6B:B1:60:DC:D9:EB:15:90:10:D3:9D:30:3D:E0:1A:F7:DC:0D:78
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EWuxYNzZ6xWQENOdMD3gGvfcDXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1f:0f:68:b2:aa:1d:c7:1a:83:40:9f:16:10:f2:01:6d:64:
56:64:f9:91:2a:61:1c:4b:d9:63:82:75:c1:a7:98:e7:65:57:
89:5e:89:38:17:53:7b:ae:88:56:b2:0d:cf:00:b9:a6:4b:f4:
cb:6f:4b:29:bc:71:b4:78:f5:fc:37:4c:96:73:d0:6d:4c:a9:
44:56:af:ec:8b:9a:1a:1b:41:50:dd:ef:92:22:36:77:d6:cb:
2b:4d:e5:76:73:5d:34:13:14:94:b2:23:14:71:c0:9e:d1:ba:
31:a2:a4:20:2b:dc:f9:6e:30:fb:9c:63:2b:ea:10:dc:99:1b:
2c:ca:69:c4:fd:77:56:f4:7c:2d:58:f7:db:62:1c:33:d2:76:
a4:4a:d6:b0:0b:7c:e0:ea:6c:c8:91:6b:bb:f4:ae:1c:de:32:
18:b3:33:08:f9:b9:cd:dc:77:96:9b:4b:a6:7e:8d:38:01:98:
a5:82:1b:a6:ef:86:6c:1a:0b:6b:f0:22:d9:51:40:c5:a2:54:
3a:56:39:eb:12:45:b3:4b:be:92:a8:a1:cc:6b:04:b6:f5:0e:
3f:67:df:90:97:08:99:44:e1:74:a6:b1:22:b8:f7:7b:ad:1d:
d8:51:f5:6f:84:75:fc:98:b8:10:c4:f8:26:36:eb:5e:16:c8:
98:99:11:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org