Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Ge4v_3aDdN0UICyFSxTd_RUD40E.roa
File: Ge4v_3aDdN0UICyFSxTd_RUD40E.roa (raw, json)
Hash identifier: KcskLv9aKtiOPTJP5oSQMllEOT1A9pe1s0LDJm3HznQ=
Subject key identifier: 19:EE:2F:FF:76:83:74:DD:14:20:2C:85:4B:14:DD:FD:15:03:E3:41
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185FCDF41C436ED65B45F7ED9DA6C6960A4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Ge4v_3aDdN0UICyFSxTd_RUD40E.roa
Signing time: Sun 29 Jan 2023 09:32:47 +0000
ROA not before: Sun 29 Jan 2023 09:32:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 88.216.17.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fc:df:41:c4:36:ed:65:b4:5f:7e:d9:da:6c:69:60:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 29 09:32:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19ee2fff768374dd14202c854b14ddfd1503e341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:f1:08:85:4d:ab:6f:a1:62:d4:3f:0f:0d:
89:81:49:c5:f3:1a:a1:21:b9:1b:c6:81:8e:ef:85:
08:f6:63:6d:70:87:61:1b:58:2e:30:cf:62:f3:06:
9e:f8:12:31:b1:49:3e:c0:33:0a:94:2d:1a:15:c5:
04:23:6d:80:7a:b8:a0:6f:e1:e0:27:16:13:b3:7e:
bf:2b:79:a8:0d:05:fd:f3:f0:7f:8a:61:c0:ce:11:
88:88:56:6a:bd:de:46:3b:0f:f0:46:47:bd:b9:7e:
5d:66:8e:38:ce:b8:8c:da:be:8e:53:40:ed:65:6e:
ae:f5:42:b7:7e:75:e1:c3:0c:3d:59:26:56:cd:5f:
2b:39:fa:bc:ae:16:6f:e6:71:80:13:db:a1:87:a4:
ff:60:a4:a5:67:bf:ab:17:6e:29:26:66:cf:19:d2:
0e:b6:97:be:ef:b6:51:f2:0e:c2:ee:45:80:1e:b9:
72:1f:16:5d:88:a3:29:4c:7b:43:6a:66:0c:60:3a:
ce:9f:6b:53:da:fd:7f:20:ab:e1:4a:e9:98:e3:bb:
39:c7:9b:01:08:ab:e7:da:f5:8e:80:76:ff:bc:39:
d6:98:a2:4a:18:b1:5a:bf:eb:8a:dc:40:0c:21:e8:
42:d4:30:91:43:06:41:fd:eb:68:bc:6c:07:6e:ac:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EE:2F:FF:76:83:74:DD:14:20:2C:85:4B:14:DD:FD:15:03:E3:41
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Ge4v_3aDdN0UICyFSxTd_RUD40E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.26.0/23
88.216.16.0/23
88.216.133.0/24
Signature Algorithm: sha256WithRSAEncryption
11:83:cd:54:17:90:e8:20:74:22:08:8d:e8:8e:c8:18:8b:2f:
08:34:a7:a5:ea:d3:a9:18:c3:ff:6f:75:a7:77:4b:ec:59:8d:
b9:42:3e:0e:e9:51:8c:9a:23:fe:0f:eb:d0:eb:9a:2f:28:38:
9e:c2:e4:ad:88:77:49:71:3e:49:dd:ea:ee:7b:27:fc:88:df:
20:6c:b1:ca:d7:1c:9e:c2:91:30:3d:6b:50:59:27:ae:04:ac:
c9:43:a4:12:00:fd:22:26:f6:c3:6c:e3:76:6c:77:c9:ee:15:
b5:42:2d:a4:34:74:e2:d8:70:0f:36:a3:7e:8b:e3:de:fd:a8:
1e:03:b1:b8:b4:e5:ad:6b:5a:02:ff:67:e0:91:e8:15:52:74:
1a:9f:e5:b5:d6:03:ef:42:a1:f4:d8:e0:d3:a8:7d:a5:b8:3d:
53:ec:e6:2d:28:f1:00:8d:b1:49:5c:41:59:16:1d:7b:5a:f1:
0a:ee:e1:07:b7:66:c3:9d:37:11:c6:45:f7:1c:93:5b:9e:c3:
a4:46:3a:ca:5b:4d:42:74:d2:25:b8:9b:43:78:cb:b5:51:84:
4d:cc:06:63:cd:e1:b0:1d:c6:1a:ee:56:f5:1a:15:a1:d3:e7:
bd:68:77:de:e6:0b:3d:3c:a6:9b:58:a1:49:7e:a6:8d:f6:62:
8b:ae:18:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:46 2023 by rpki-client on console-fra.rpki-client.org