Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GgWrU_R1PJOgFp5MnGfpiP2l3D0.roa
File: GgWrU_R1PJOgFp5MnGfpiP2l3D0.roa (raw, json)
Hash identifier: KrkhoNtWR40yC/u11RBTNGb83hw7Y7HEUSODHT+jzfY=
Subject key identifier: 1A:05:AB:53:F4:75:3C:93:A0:16:9E:4C:9C:67:E9:88:FD:A5:DC:3D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189AAD66FBE2A299A3C2790E71075C27A36
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GgWrU_R1PJOgFp5MnGfpiP2l3D0.roa
Signing time: Mon 31 Jul 2023 07:25:27 +0000
ROA not before: Mon 31 Jul 2023 07:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 84.32.85.0/24 maxlen: 24
88.216.102.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 08:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:d6:6f:be:2a:29:9a:3c:27:90:e7:10:75:c2:7a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 31 07:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a05ab53f4753c93a0169e4c9c67e988fda5dc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:45:16:f7:4a:59:d1:da:97:1d:f1:f4:aa:
0a:06:d4:8b:2a:c4:ba:78:63:2d:28:53:5c:5f:65:
c1:e2:e4:be:8e:98:07:f6:dd:d7:04:b9:f2:b0:fa:
37:3f:5c:04:44:f1:f6:aa:4f:94:0e:33:57:0c:ba:
4f:41:0d:35:82:cc:a6:cb:a7:15:d8:2a:6a:41:76:
39:a6:7a:4d:bd:51:02:29:9f:61:35:05:c6:da:e4:
19:f4:fa:b2:9b:b7:4b:6c:40:cf:8a:76:b9:36:b6:
d9:ae:2a:0c:62:4d:c5:d7:7c:ca:c5:15:64:db:d1:
f1:cd:f0:32:da:c3:83:1a:69:78:22:f2:f8:cc:19:
b5:f2:24:0a:df:aa:07:47:e0:80:6f:67:81:1f:ce:
57:e2:78:bc:55:a7:6f:a7:8d:6f:72:03:67:a9:1d:
f3:e8:66:5e:5d:42:74:ca:5d:de:8c:9e:a1:85:33:
16:d0:3a:3d:a2:28:6d:fc:92:92:94:31:f5:00:45:
ab:26:24:60:2e:ae:67:51:c8:87:b8:68:ee:37:15:
f4:8e:5f:41:e7:b1:f5:4c:b8:04:b7:43:92:f7:f6:
15:d4:d1:94:77:b3:c2:ca:55:81:df:48:cd:34:be:
d3:2b:34:da:08:e1:fc:ac:78:b8:b4:51:94:9d:07:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:05:AB:53:F4:75:3C:93:A0:16:9E:4C:9C:67:E9:88:FD:A5:DC:3D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GgWrU_R1PJOgFp5MnGfpiP2l3D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.85.0/24
84.32.221.0/24
88.216.47.0/24
88.216.102.0/24
Signature Algorithm: sha256WithRSAEncryption
98:4c:cf:3e:fb:8e:ba:b2:03:d8:6e:4d:60:97:1e:8f:3c:fe:
29:f0:31:19:e3:f6:6e:1e:36:73:15:4e:fc:6a:53:4f:0b:d0:
0d:0d:86:fe:59:da:c7:45:22:ed:77:03:53:b4:32:2d:17:b6:
fc:f0:6a:f7:db:25:07:1b:e0:68:83:9e:af:e6:c5:2e:80:1c:
a4:bf:51:b5:65:e8:f7:76:58:13:8f:f8:ae:50:96:fb:ac:ae:
52:c1:2d:ac:d1:98:44:68:e3:c0:3f:c8:7c:6f:f4:c2:cc:ae:
3c:25:87:42:5c:67:68:c5:b0:5d:97:c5:33:84:ed:7a:94:9d:
86:0d:b6:d1:46:f2:e0:03:ff:e9:a0:99:1d:f4:67:17:b6:31:
e6:74:96:6b:01:5f:9e:d2:9e:66:cf:61:4d:bd:13:b1:5a:3e:
ba:5d:95:15:c4:fb:c8:fa:71:f6:c8:2c:ab:d5:82:71:0a:5f:
5d:16:3e:2e:29:76:5f:98:ef:d3:0b:33:b1:3b:f9:cb:64:7e:
98:f5:5f:e9:eb:6e:99:3e:11:d5:4d:6f:fa:27:26:06:e6:3a:
a5:6f:d3:88:75:7c:a3:91:b8:97:05:34:62:09:af:64:98:64:
88:7a:62:f2:10:ef:3a:ab:94:48:7d:d8:f8:2e:00:f5:43:b5:
7f:7b:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org