Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KjMte6S6tR8gI-PC1Lr_qP0iOQ4.roa
File: KjMte6S6tR8gI-PC1Lr_qP0iOQ4.roa (raw, json)
Hash identifier: ydN26Zj1e8BO5H1dhYweZp8W6D5sskpzLuseYtJUMTc=
Subject key identifier: 2A:33:2D:7B:A4:BA:B5:1F:20:23:E3:C2:D4:BA:FF:A8:FD:22:39:0E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01859544580AF05C025AE5AD08B1E1FCD916
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KjMte6S6tR8gI-PC1Lr_qP0iOQ4.roa
Signing time: Mon 09 Jan 2023 06:42:42 +0000
ROA not before: Mon 09 Jan 2023 06:42:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 88.216.208.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:44:58:0a:f0:5c:02:5a:e5:ad:08:b1:e1:fc:d9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 9 06:42:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a332d7ba4bab51f2023e3c2d4baffa8fd22390e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4c:cd:1a:0c:5d:53:1e:8d:e5:d5:2c:d5:e2:
67:38:69:51:18:77:b7:f0:1a:cd:61:18:02:2a:d0:
8d:d4:23:94:76:c5:81:8b:8f:f1:8a:08:7c:44:06:
69:48:48:a7:0b:fa:0a:b3:fc:72:28:39:be:10:57:
8d:66:9a:d3:3b:60:98:0d:eb:67:da:68:cb:b8:f8:
91:72:d3:5b:f2:8a:5c:2a:90:b0:6d:5c:7a:25:3f:
0c:d8:b6:6a:a5:4b:c1:09:64:55:c4:bf:99:a4:73:
7e:3f:e6:01:0c:a0:da:92:35:7b:3d:95:18:7d:33:
a2:5d:b0:79:60:01:81:16:3c:bc:fb:56:1e:32:a2:
de:06:87:22:ec:2f:84:fd:79:64:89:a0:c5:2f:f8:
06:9c:66:83:42:3b:17:05:ad:dc:df:a6:00:1f:9b:
d8:15:1e:48:82:fe:27:06:a4:d8:ab:4f:33:83:0c:
37:3d:e9:9a:9b:a5:de:3a:06:09:36:05:d8:03:68:
ea:f7:46:cb:c0:ac:60:29:84:19:96:36:97:c9:1a:
9a:a8:f1:57:a9:4e:67:b8:42:d3:27:ef:1c:93:9b:
d7:f9:42:78:ef:e5:a7:b7:70:6d:89:43:4f:06:2a:
83:0c:81:7c:5e:c9:ff:d9:78:0b:dc:75:b3:f0:50:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:33:2D:7B:A4:BA:B5:1F:20:23:E3:C2:D4:BA:FF:A8:FD:22:39:0E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KjMte6S6tR8gI-PC1Lr_qP0iOQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.246.0/23
88.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8f:2d:d6:b5:0b:11:2f:1b:32:7d:c3:cf:68:c8:ad:16:27:
22:e8:69:26:28:87:74:38:71:18:37:16:25:d5:08:46:42:f6:
2a:3c:f3:fd:f0:e4:51:8a:05:b1:93:4a:a8:24:e3:55:33:f0:
ac:cc:f1:fc:12:3a:3b:68:8e:9d:8b:15:7d:aa:d0:05:6d:ed:
97:1a:b3:6b:2c:db:02:01:37:fe:af:99:30:2e:34:d9:84:b8:
1d:5d:2b:c2:bf:ea:ff:6f:b4:da:0c:64:45:87:c4:33:b0:bb:
e4:07:a5:1d:cf:9e:29:3a:82:24:1f:ad:90:c5:22:da:33:5a:
b5:05:34:05:ac:43:b6:89:b5:52:8c:5a:41:2a:d1:54:d9:51:
a3:82:25:d4:5b:78:cd:be:83:f8:37:e8:8e:00:b1:71:bd:4c:
ce:3f:4c:91:1f:06:85:58:ac:75:77:d9:fd:bb:d8:8c:aa:0a:
98:82:27:c3:69:3e:b9:30:77:8b:f7:01:35:b1:6d:77:89:cd:
9f:5e:0c:f0:0e:f0:fd:28:fb:cb:8e:23:1f:a5:81:cb:79:4b:
70:3f:ad:bc:ad:2d:84:59:b5:7b:a2:19:16:be:51:f7:3f:29:
5d:28:97:57:5b:d0:a1:5e:a2:dc:5e:7c:4e:41:ef:e9:9f:5e:
8f:f5:60:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:46 2023 by rpki-client on console-fra.rpki-client.org