Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GxTs7YObVVbuwgItRNAwBOBGsjw.roa
File: GxTs7YObVVbuwgItRNAwBOBGsjw.roa (raw, json)
Hash identifier: QJ6nEvKEpjyHXjorxxAo/5a7yGAjLX5D0xqrdiElUOg=
Subject key identifier: 1B:14:EC:ED:83:9B:55:56:EE:C2:02:2D:44:D0:30:04:E0:46:B2:3C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018742D51BE68690F623A7BE2A4AFCA9706C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GxTs7YObVVbuwgItRNAwBOBGsjw.roa
Signing time: Sun 02 Apr 2023 16:37:55 +0000
ROA not before: Sun 02 Apr 2023 16:37:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 88.216.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 05:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:42:d5:1b:e6:86:90:f6:23:a7:be:2a:4a:fc:a9:70:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 2 16:37:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b14eced839b5556eec2022d44d03004e046b23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f3:44:eb:33:d3:c0:01:00:81:b6:f5:60:88:
a6:e3:67:38:aa:11:af:6a:78:8a:b5:a6:d2:37:96:
b6:1e:d7:c4:8e:8e:a6:89:5f:94:1f:41:18:01:43:
23:4b:41:3d:af:21:9e:2a:48:dd:bb:dc:33:ed:22:
d3:79:c4:ff:79:d1:76:2f:32:4d:ee:bc:4d:f8:23:
2c:f0:ed:ea:a8:2c:9b:8a:7a:81:76:f7:5f:27:de:
1d:13:10:3d:26:9b:43:cd:72:0f:cb:3d:d8:c3:65:
2f:7b:e6:4e:9b:9e:5f:c6:ed:2f:ec:6f:3f:2e:d4:
ef:53:88:87:ae:f1:4d:4f:10:5f:70:04:ed:0d:fd:
59:c6:d8:45:11:b9:af:96:d2:92:5e:91:a9:8e:8f:
64:66:bb:58:9c:f0:e1:2a:87:e3:c6:e1:92:60:a5:
05:44:e9:59:b9:c2:5a:a4:40:2e:ea:ae:56:b7:10:
23:4d:15:fa:96:e6:4b:21:16:b2:b7:8d:43:24:a8:
54:e3:fa:42:ab:f5:7e:9e:5b:b3:da:1e:9a:c3:41:
33:70:d9:4f:4a:cd:ee:85:5a:6b:84:80:de:d2:cf:
7d:be:e6:fc:18:1c:83:d0:f1:1a:2e:7e:2f:2c:a6:
ad:4d:52:16:84:ea:10:37:da:41:55:ab:98:0a:a9:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:14:EC:ED:83:9B:55:56:EE:C2:02:2D:44:D0:30:04:E0:46:B2:3C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GxTs7YObVVbuwgItRNAwBOBGsjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.41.0/24
Signature Algorithm: sha256WithRSAEncryption
49:43:a2:0f:69:e5:5e:d1:b6:e3:75:e1:be:2a:2d:14:1d:79:
d5:fa:6b:f0:3d:84:19:ba:55:ae:60:83:6b:15:40:e7:2a:25:
c1:1c:21:ef:99:6a:0c:57:08:4c:09:7c:40:81:39:c8:be:28:
f8:24:8e:f8:d3:60:16:8a:32:a6:39:12:c6:ed:c8:cd:95:3b:
bb:3b:23:2a:7c:09:cc:97:07:00:6e:c7:f8:d1:ad:59:4d:c3:
9a:ad:79:83:82:42:cf:04:fb:37:4f:5d:61:91:10:88:7d:e0:
44:bb:dd:56:96:86:10:57:61:97:50:62:42:6d:95:ae:28:0d:
be:1e:c7:89:7d:96:1d:c1:10:16:44:74:bf:fc:0e:91:94:c5:
a9:78:f8:b6:0f:d0:47:3d:57:fc:3d:21:7b:e1:00:86:be:32:
e5:78:fe:72:52:61:78:49:5a:c5:ac:92:67:9c:00:f5:79:24:
ed:96:d7:59:6c:c2:b4:71:1c:44:35:99:57:29:81:0d:88:0f:
ff:10:27:9f:3a:de:5b:41:b4:ba:61:8f:9c:a8:43:7c:a0:ed:
c0:9c:bf:43:4f:c4:aa:27:d1:23:1b:bb:8d:2f:40:c2:78:56:
0e:f9:5d:23:45:1f:52:c6:2d:3c:e3:7e:d9:3e:c1:c6:9a:35:
11:a6:0b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org