Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IpgejtYuq9tmDG6oR8MVt3Ia2TI.roa
File: IpgejtYuq9tmDG6oR8MVt3Ia2TI.roa (raw, json)
Hash identifier: 5A4Db4nk5fRuBs9bJV/IKtO8OrP6zAxVM/wwW9tai68=
Subject key identifier: 22:98:1E:8E:D6:2E:AB:DB:66:0C:6E:A8:47:C3:15:B7:72:1A:D9:32
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018586DFAF62BCCC7BD1874DC2888CF90A99
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IpgejtYuq9tmDG6oR8MVt3Ia2TI.roa
Signing time: Fri 06 Jan 2023 11:38:04 +0000
ROA not before: Fri 06 Jan 2023 11:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60800
IP address blocks: 88.216.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:df:af:62:bc:cc:7b:d1:87:4d:c2:88:8c:f9:0a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 6 11:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22981e8ed62eabdb660c6ea847c315b7721ad932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:7a:e1:db:96:af:07:11:02:24:05:75:a8:
7d:07:3a:4a:d1:8f:49:59:84:0f:80:32:d0:b0:9c:
4e:a9:cf:4b:1b:b4:66:d3:af:b8:8d:ab:a8:c0:70:
ae:f5:4f:bf:fb:30:76:5d:68:e7:26:60:09:f8:26:
a4:76:7a:be:6a:05:71:60:2d:c3:55:cf:ad:86:d3:
08:74:d4:f5:0b:cd:b2:c0:fc:be:17:b6:a4:08:b6:
c8:95:7b:29:37:d4:6a:95:3e:5b:e1:be:0e:12:19:
22:60:90:6b:1f:34:38:de:59:7e:84:04:b8:c4:8d:
de:33:d4:a7:37:19:ed:3f:2d:c5:9b:62:ed:68:3e:
e9:eb:cc:04:51:e9:0e:a0:0f:33:b6:eb:26:c7:ac:
03:f7:0c:c2:5f:59:a8:01:55:3e:10:42:e6:85:0f:
84:1e:69:3b:d5:80:1b:1a:08:2c:c3:12:5c:4f:71:
da:13:f2:ec:88:3a:29:b3:f6:a6:b3:91:a6:fa:3b:
b6:05:51:c9:06:55:4d:31:ba:42:3e:7e:8d:00:96:
75:57:16:1a:6f:61:6e:8c:6f:0a:bf:72:93:98:54:
9c:d2:b7:3e:54:f4:50:73:f6:37:78:29:c7:92:aa:
18:0d:8e:76:51:cd:f2:50:ae:3b:14:71:ea:59:ed:
7a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:98:1E:8E:D6:2E:AB:DB:66:0C:6E:A8:47:C3:15:B7:72:1A:D9:32
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IpgejtYuq9tmDG6oR8MVt3Ia2TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a6:c5:9a:27:77:e9:23:ac:81:9b:ea:75:b4:2d:98:da:60:
25:54:dd:d5:24:3a:96:ca:a1:13:b4:3d:49:dc:b9:89:c8:c2:
0f:f7:f6:0f:8d:38:46:2e:04:04:c5:45:40:8d:02:04:e6:b2:
71:ed:80:72:8d:86:ba:4e:71:01:22:35:33:6e:2b:a3:27:42:
9f:87:78:60:db:38:43:f0:18:ae:ce:78:b3:56:2a:df:7e:4e:
dc:85:a8:13:82:36:75:a8:1d:9c:e3:cb:50:f0:9b:4a:2e:96:
c9:47:0b:2c:c4:e1:1b:03:5b:61:3a:22:63:1f:68:13:d6:34:
cb:d3:b3:1b:fc:63:93:be:0c:04:b0:12:48:29:09:02:c7:d3:
29:7a:51:de:63:30:52:56:6e:d9:e2:31:30:47:5e:59:2e:90:
fd:92:8f:69:f8:03:2a:82:be:3d:b5:51:f7:27:18:16:6f:7a:
a7:4c:53:bd:c0:b7:b1:50:d5:72:fe:cc:7c:49:c6:21:fa:f7:
5c:c9:f6:e4:9d:39:2c:4b:e8:89:f1:55:59:ec:4f:71:41:7a:
ec:a1:e2:80:91:83:68:75:75:0a:84:0a:2e:59:b4:94:7b:d3:
23:c9:48:16:75:ef:0e:be:1d:93:ea:57:22:68:60:b7:59:90:
90:a6:75:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:46 2023 by rpki-client on console-fra.rpki-client.org