Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IREcQ_aGvsnzLnIIAs6m43UMDfs.roa
File: IREcQ_aGvsnzLnIIAs6m43UMDfs.roa (raw, json)
Hash identifier: 4oNBWx82rhpVnMcTVlBDTeZNl6U90alZ45bTMzcMFI4=
Subject key identifier: 21:11:1C:43:F6:86:BE:C9:F3:2E:72:08:02:CE:A6:E3:75:0C:0D:FB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185A249D0549533C3DB6E48613052B8E31E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IREcQ_aGvsnzLnIIAs6m43UMDfs.roa
Signing time: Wed 11 Jan 2023 19:23:44 +0000
ROA not before: Wed 11 Jan 2023 19:23:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 88.216.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Jan 2023 15:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a2:49:d0:54:95:33:c3:db:6e:48:61:30:52:b8:e3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 11 19:23:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21111c43f686bec9f32e720802cea6e3750c0dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:a6:42:3e:48:18:03:af:58:4f:b2:b6:5b:
ba:cd:0d:5b:e3:43:12:64:64:af:b4:37:5c:84:f6:
cf:ef:e9:6a:0d:56:c2:f9:f9:5b:1d:b6:1a:d1:bf:
f6:92:61:78:0f:29:5f:7a:10:eb:f7:9a:ff:d1:b3:
95:07:af:26:36:6a:30:09:b6:5c:49:83:b8:f6:07:
d5:c0:27:00:28:76:9f:db:92:fb:47:b0:0a:76:f8:
be:97:88:28:64:7d:43:8f:b3:47:cd:62:8e:fe:02:
b3:7d:e4:57:eb:53:90:a3:b7:4d:f2:a8:31:18:0b:
39:d1:cb:ef:4a:5b:47:e1:ee:18:8a:f6:3c:07:80:
f2:f0:71:f1:1e:91:63:38:3c:0e:7b:36:b5:25:4a:
63:9c:53:3c:d2:df:2d:e6:f2:62:0c:75:00:81:31:
da:e4:4c:2b:25:a1:98:73:20:ea:9e:e8:8f:46:ad:
9c:2b:89:cb:ca:b0:ec:c5:89:1f:43:b7:98:b1:d5:
f7:44:5d:5f:ca:96:bf:21:3b:96:e0:86:8c:1e:41:
8e:21:ef:0d:1a:4e:bb:50:63:bf:72:9a:1e:2a:01:
44:98:ab:4f:1b:9a:e0:7a:8f:1c:20:f2:2d:73:01:
cd:e4:e6:32:44:03:1d:3f:bb:27:f6:1b:ad:be:5e:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:11:1C:43:F6:86:BE:C9:F3:2E:72:08:02:CE:A6:E3:75:0C:0D:FB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IREcQ_aGvsnzLnIIAs6m43UMDfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.16.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:25:79:3c:cd:a3:76:44:76:e8:f0:05:e9:35:cf:58:6d:be:
79:08:7c:29:0a:6e:28:a1:0d:32:93:ea:61:7c:eb:02:17:08:
85:47:91:76:22:48:e1:2f:ff:28:c6:d5:ff:3c:cd:fd:2b:48:
a0:4b:7a:73:c5:69:cd:6c:79:a0:75:21:8a:7d:1f:89:12:68:
33:b4:94:a5:d6:35:de:3b:8f:2f:a5:e6:c5:ac:51:c5:69:10:
38:30:e4:bd:c1:92:7e:91:21:8c:d5:1d:ce:f4:e0:7a:61:8d:
6c:6d:fc:f7:e0:89:30:0d:2e:7e:4f:6f:0b:ac:2f:79:e8:69:
57:28:00:e7:42:4d:16:4a:4b:6c:06:15:5d:14:ea:85:69:77:
7e:b8:a6:9b:14:da:b4:99:ab:4b:0a:3f:78:05:23:08:9f:20:
63:95:d9:11:2a:22:6b:de:4f:4a:09:32:63:72:a1:f5:6b:e4:
1a:81:9b:66:e7:9a:5f:94:52:ed:75:c4:0f:97:c4:d0:9c:c5:
69:48:33:4d:cd:45:8e:08:3f:b8:e0:21:69:69:61:06:7d:d3:
44:6e:84:93:4c:83:12:8c:aa:87:0e:2e:d1:1e:88:75:f2:14:
f3:09:2e:95:15:da:c0:9f:d1:dd:fd:72:1d:b2:10:24:1c:a1:
93:82:2a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org