Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FNj05OCtAr_NDPatpJrMQ6inmcg.roa
File: FNj05OCtAr_NDPatpJrMQ6inmcg.roa (raw, json)
Hash identifier: 6W2Aq3k+schjkUlMRuMw1Awjf14ps1GcSpCgoZhOFCw=
Subject key identifier: 14:D8:F4:E4:E0:AD:02:BF:CD:0C:F6:AD:A4:9A:CC:43:A8:A7:99:C8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185AA0185ECA3FD42AA6C183018FEAD6A50
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FNj05OCtAr_NDPatpJrMQ6inmcg.roa
Signing time: Fri 13 Jan 2023 07:21:44 +0000
ROA not before: Fri 13 Jan 2023 07:21:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59895
IP address blocks: 88.216.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jan 2023 06:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:01:85:ec:a3:fd:42:aa:6c:18:30:18:fe:ad:6a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 13 07:21:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14d8f4e4e0ad02bfcd0cf6ada49acc43a8a799c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:d2:1f:7b:a8:a7:f3:4a:95:cd:23:a6:f2:
ca:88:3b:f5:cf:ed:57:dd:10:85:88:6f:77:48:06:
48:11:39:06:e5:fd:98:51:02:39:ab:11:e3:ec:2d:
0d:3d:d0:f0:01:21:8d:af:95:fc:92:80:b6:02:60:
a3:c5:09:3f:ad:be:84:6c:52:6a:ae:2a:c0:78:70:
09:40:d4:77:ac:73:97:b3:72:81:0f:96:29:b5:c8:
7c:73:9e:ac:4b:85:53:c7:80:b9:ef:cf:aa:10:42:
88:f1:b1:a3:41:ab:ae:84:47:c8:be:9d:bd:a2:14:
81:a9:a3:67:4f:7c:4b:4f:af:93:4a:1e:59:8a:33:
ca:1e:92:3b:c1:6a:7a:6b:37:e8:46:c4:e6:13:f3:
fe:5e:3f:d7:96:23:67:17:40:9a:18:37:d7:3e:a1:
0f:b5:e7:c8:c5:c0:e7:7c:c5:9b:2c:95:d1:83:26:
0c:eb:89:2b:1e:84:3d:82:1c:9b:a2:8b:c9:a9:c2:
78:9e:3d:f5:99:41:da:4d:e9:22:57:ce:0f:82:49:
91:81:1c:92:f5:bd:dc:49:c8:64:c0:98:62:10:fc:
af:12:ab:85:53:0d:08:f3:ae:0e:56:f5:60:ed:69:
3d:93:10:b6:de:b4:9d:86:9c:4e:d5:e3:9f:37:85:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D8:F4:E4:E0:AD:02:BF:CD:0C:F6:AD:A4:9A:CC:43:A8:A7:99:C8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/FNj05OCtAr_NDPatpJrMQ6inmcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.184.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8b:58:01:cb:6a:d0:05:b3:95:1f:f5:c9:d2:46:a1:ec:33:
91:b8:a1:3d:b4:89:40:b2:2a:94:08:9f:e6:01:b3:4e:0d:94:
a7:fd:ce:6c:de:60:7f:3d:3b:55:19:4f:f3:e8:2d:ff:49:71:
95:99:e6:43:a5:2f:c7:26:df:00:97:54:38:3a:1a:47:92:c4:
cb:6e:83:1f:6e:91:01:31:ae:40:95:92:56:d5:28:07:19:1a:
d9:2f:85:78:22:8a:71:81:40:d0:e9:bf:12:85:c0:5c:e1:2b:
0e:a4:e4:3c:e6:71:2a:76:2b:ac:c0:e4:76:62:00:ce:7b:ee:
92:ed:f1:c0:36:f0:26:71:f8:a7:af:a1:bd:44:8c:2b:ee:0f:
7e:b9:21:50:c5:43:a1:a8:79:84:95:1c:08:79:6b:e5:42:62:
83:39:e5:c1:97:1e:36:12:ad:33:d7:40:b1:15:a7:7e:78:16:
16:97:57:40:50:53:06:30:a8:ea:8b:14:30:12:e7:1c:fc:6a:
dd:fd:ab:6a:cd:4b:30:96:21:19:ba:31:92:b8:62:47:0a:54:
b9:44:31:f1:47:88:d0:e4:8c:ae:48:34:ba:3f:f3:29:b2:e1:
ac:c7:01:8e:41:5e:73:3e:ee:5c:b8:41:e9:22:29:d0:39:fb:
3a:ae:31:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org