Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KuWd_OTGIg3O9s_jXjRTv8oWZGw.roa
File: KuWd_OTGIg3O9s_jXjRTv8oWZGw.roa (raw, json)
Hash identifier: 1PSwC569VP71tVutrDGazk77FxrT8yQ7GICbKIzddZk=
Subject key identifier: 2A:E5:9D:FC:E4:C6:22:0D:CE:F6:CF:E3:5E:34:53:BF:CA:16:64:6C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188F673B1D8715D13966FC14AE7B2AB0C89
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KuWd_OTGIg3O9s_jXjRTv8oWZGw.roa
Signing time: Mon 26 Jun 2023 06:45:57 +0000
ROA not before: Mon 26 Jun 2023 06:45:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 88.216.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:73:b1:d8:71:5d:13:96:6f:c1:4a:e7:b2:ab:0c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 26 06:45:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ae59dfce4c6220dcef6cfe35e3453bfca16646c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:50:d0:fb:b7:26:19:63:c7:d2:7a:50:b0:06:
d2:de:d8:de:9f:62:3b:ce:c2:79:28:ac:0e:80:9d:
63:41:be:de:ca:80:9a:15:80:01:e3:1a:30:76:90:
42:7e:2e:fd:31:ea:4a:79:39:d5:e0:a9:83:48:32:
ed:85:c2:16:44:b2:c3:98:88:26:0c:c6:3e:3c:c1:
aa:eb:5d:1c:df:03:91:72:a2:8a:7b:93:97:96:d3:
6f:6c:d0:8b:50:03:58:eb:85:2d:e9:77:a2:59:3c:
1d:b6:76:d1:37:d4:4a:31:d9:85:49:f5:18:e6:07:
75:6e:44:8f:84:ed:b9:25:d6:6d:7e:aa:b1:de:80:
dd:60:b1:a7:ea:18:a1:df:d0:2c:85:59:2d:da:cc:
36:dd:1f:5e:01:51:69:0a:f0:71:db:18:04:f0:11:
63:63:a8:8f:ef:26:ad:bd:37:41:cd:d2:cb:93:d8:
e7:e7:bb:ee:74:91:f4:3c:eb:f6:97:b6:b4:f8:7f:
b2:47:0a:fa:9a:9d:e7:34:7c:fc:ed:cc:23:ed:27:
fd:53:3f:1e:0d:6f:02:20:53:a0:6b:67:bd:93:a7:
a1:c3:21:0a:38:cd:e3:e3:ac:d6:8e:aa:f0:5c:1b:
28:8c:7b:85:12:2e:3a:56:58:dd:cb:59:75:35:93:
e4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E5:9D:FC:E4:C6:22:0D:CE:F6:CF:E3:5E:34:53:BF:CA:16:64:6C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/KuWd_OTGIg3O9s_jXjRTv8oWZGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.38.0/24
Signature Algorithm: sha256WithRSAEncryption
84:af:8d:89:92:a1:b7:10:78:c6:9e:79:b5:db:b4:f2:8c:cf:
ae:0e:e0:93:c2:63:a5:a3:e9:ad:d3:ee:14:37:88:0b:7a:96:
fa:98:cd:34:e0:b6:c9:e8:8c:0f:a4:42:58:42:da:34:df:53:
f3:c5:f2:3d:83:d1:cd:47:d7:55:d7:53:c3:c8:82:b9:3f:23:
3f:45:41:c3:4e:74:f8:2d:09:63:31:d9:35:59:62:ef:71:fb:
b9:9e:06:2b:4c:cc:7a:f6:61:81:22:e6:e3:0a:9d:72:5a:d2:
90:9c:4c:22:45:38:55:56:4d:ab:3b:f8:c6:69:80:8c:67:99:
2e:bc:ea:2d:cd:42:49:ad:58:46:1b:f5:9c:da:f3:87:51:62:
0d:d1:38:ca:76:3a:c7:a8:5c:1a:dc:30:0c:ff:d4:2c:61:61:
10:6c:10:60:c5:4a:52:4d:99:28:4e:1d:8e:a8:76:a3:ce:01:
0d:91:bc:43:da:ef:e4:1a:12:5c:3d:65:f5:86:45:94:df:66:
5b:c6:e7:e6:e3:9e:be:14:f5:de:01:5e:a6:c1:08:c0:c3:3d:
f4:27:85:2b:79:38:80:2a:4f:35:c3:ee:31:18:27:99:6b:7b:
62:8a:40:05:a3:a5:84:3a:98:03:11:7b:fd:61:43:ce:23:62:
48:bd:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:46 2023 by rpki-client on console-fra.rpki-client.org