Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Jaa-fNUWvjwKeNzGonkzl2GT8dA.roa
File: Jaa-fNUWvjwKeNzGonkzl2GT8dA.roa (raw, json)
Hash identifier: XTn0nlrkcyJ8icKy6nT7L5gUXi5VBmCI8AYMsQ3sjaQ=
Subject key identifier: 25:A6:BE:7C:D5:16:BE:3C:0A:78:DC:C6:A2:79:33:97:61:93:F1:D0
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018751B95A924CFBF7903146D9FB8259B16E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Jaa-fNUWvjwKeNzGonkzl2GT8dA.roa
Signing time: Wed 05 Apr 2023 14:01:54 +0000
ROA not before: Wed 05 Apr 2023 14:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 88.216.224.0/22 maxlen: 24
88.216.22.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:b9:5a:92:4c:fb:f7:90:31:46:d9:fb:82:59:b1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 5 14:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25a6be7cd516be3c0a78dcc6a27933976193f1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:14:50:11:2a:dd:be:ac:15:a9:9c:f8:97:
03:ff:6f:2d:b8:bf:5e:1f:90:fb:ab:6a:6f:77:ef:
87:6d:02:13:a4:ac:0a:a6:2e:b7:27:14:30:a9:6d:
7f:38:5e:f0:48:43:9c:43:14:74:d3:aa:19:b9:ad:
69:57:28:50:e6:a8:f7:2f:84:9f:b7:0f:64:b4:d8:
78:3f:23:2b:12:a7:3d:57:50:db:33:6a:bb:27:43:
f8:5a:3d:c9:99:21:f3:a6:88:16:e6:c1:ee:9c:38:
86:69:c8:a1:09:ab:d3:ac:46:05:e9:19:74:03:56:
cb:91:06:15:b9:00:23:a7:9a:91:8a:e7:5e:59:23:
9d:d0:ea:ac:4a:bc:ba:96:b5:91:17:58:f3:d9:f2:
73:56:60:eb:1a:e2:e1:f3:09:87:dd:2d:74:4d:dd:
4d:fb:61:0f:db:86:a8:1f:c0:02:1b:7e:68:98:a5:
18:ad:a6:ea:70:6f:77:02:98:35:bd:e5:ef:2e:e0:
c4:fa:28:51:0b:96:7e:d0:b9:aa:72:ff:b1:70:ee:
67:0a:ca:65:e8:43:32:84:a5:80:5d:96:e7:42:a7:
ca:7a:57:60:bc:03:fc:b8:1b:f8:8b:f3:76:1a:b0:
d6:a1:c0:a4:90:3e:f2:e9:fa:df:ac:fa:3f:4e:a5:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A6:BE:7C:D5:16:BE:3C:0A:78:DC:C6:A2:79:33:97:61:93:F1:D0
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Jaa-fNUWvjwKeNzGonkzl2GT8dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.22.0/23
88.216.224.0/22
Signature Algorithm: sha256WithRSAEncryption
36:26:0b:67:ea:e8:b3:b4:5e:ed:3e:22:6d:15:d4:28:71:65:
2e:1b:cd:59:e8:4c:24:e3:b3:51:1b:16:11:76:31:7b:5c:28:
41:31:1c:e3:dc:9a:aa:1c:37:10:1a:94:ad:a0:a4:b7:7d:93:
a3:0d:d1:08:14:f8:59:b6:70:87:9e:5f:42:f3:c9:06:2c:98:
d2:2d:dc:21:18:f5:1a:17:28:91:d6:2a:fd:22:d5:16:3f:b5:
d3:b3:42:0a:f6:44:98:5a:3c:8a:ca:86:3f:47:06:90:72:c0:
69:3c:8e:01:e7:c4:09:5f:1d:2d:38:c0:6a:fc:3d:e7:2a:97:
c8:b8:2b:e1:36:ee:2f:4f:d3:c3:09:ce:13:49:fa:c7:9b:f8:
2f:69:3f:db:d5:f8:8c:5e:6c:02:13:d6:03:7b:bf:e0:38:fa:
e9:8a:6b:b1:3b:49:b9:d7:4b:5b:7d:81:c5:a8:cd:af:c7:51:
fa:2d:97:76:50:c9:26:65:2b:23:3a:f3:2c:2c:28:2c:85:4f:
74:bf:c4:1c:4a:f2:1b:39:6e:fd:74:34:fc:f7:19:67:8c:dd:
60:c7:d7:37:98:db:b6:73:f6:85:a5:ee:7c:47:f7:34:65:d9:
e8:78:82:e1:21:31:3c:82:f1:9d:50:48:04:d1:b7:19:9e:00:
49:b7:b8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:46 2023 by rpki-client on console-fra.rpki-client.org