Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/M1zM6QXhikdHKYr6RjWx3ipsitw.roa
File: M1zM6QXhikdHKYr6RjWx3ipsitw.roa (raw, json)
Hash identifier: OG+EXvdjXoL3lTQBNrOpNgViiX/K98Qhp9avIvCUKTs=
Subject key identifier: 33:5C:CC:E9:05:E1:8A:47:47:29:8A:FA:46:35:B1:DE:2A:6C:8A:DC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0194C80D5D98B190B54739A8970CB47E8E1C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/M1zM6QXhikdHKYr6RjWx3ipsitw.roa
Signing time: Sun 02 Feb 2025 19:05:06 +0000
ROA not before: Sun 02 Feb 2025 19:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62164
IP address blocks: 88.216.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 09:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c8:0d:5d:98:b1:90:b5:47:39:a8:97:0c:b4:7e:8e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 2 19:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=335ccce905e18a4747298afa4635b1de2a6c8adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:de:5c:2c:ee:6d:c4:b2:ba:fc:1c:73:fa:42:
02:96:76:b0:4a:d0:f9:fc:8b:8c:21:57:32:e2:93:
29:c8:e6:24:07:a3:23:7d:0d:9f:a7:f3:e4:83:e8:
8e:68:69:98:a5:e8:0d:a1:04:0e:1f:1a:bb:04:5f:
4a:b3:f4:82:22:e9:47:42:44:4c:35:7e:f2:52:e1:
a0:92:04:86:ef:ae:e5:43:30:4a:77:01:2e:0a:2f:
93:fd:b4:69:b0:0a:ac:e0:83:0d:d8:14:0a:ad:d8:
b3:b2:69:7c:89:88:cb:07:56:2d:70:fb:0b:88:b0:
c3:80:4f:26:c3:5d:a0:93:c3:c4:84:0b:5b:b7:a0:
df:1a:f6:a8:04:10:37:0f:66:ae:f9:10:b0:aa:8b:
ab:2c:67:e7:0c:74:47:dd:22:c2:81:71:02:1f:65:
49:7b:38:20:90:51:4f:49:30:5b:a9:7d:89:36:3e:
94:37:48:07:0a:3b:c8:f8:87:5d:58:bc:89:2f:d9:
76:1d:d6:31:14:9e:c9:56:57:31:75:87:7f:11:97:
5d:95:cb:42:64:8f:b1:45:dd:8c:8f:67:ac:1c:7a:
f7:fd:bf:45:dc:c0:cd:56:e5:a1:bf:c9:c2:b4:37:
1b:87:3d:7e:03:59:59:bd:f9:c6:04:a2:d0:87:85:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5C:CC:E9:05:E1:8A:47:47:29:8A:FA:46:35:B1:DE:2A:6C:8A:DC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/M1zM6QXhikdHKYr6RjWx3ipsitw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.99.0/24
Signature Algorithm: sha256WithRSAEncryption
44:50:6f:d3:5b:aa:3a:38:19:1e:e9:93:e9:56:af:e4:1f:a6:
3d:0c:e5:e1:bb:45:61:73:0c:23:41:44:da:74:a3:9c:41:af:
f2:40:13:9c:2c:40:fe:10:63:9a:42:13:63:7a:f6:36:b9:ea:
44:e9:36:a3:9a:87:e6:51:ba:5b:8d:48:05:f6:88:1a:2e:d8:
f7:68:d4:db:af:20:91:d4:28:20:ca:86:17:47:e2:79:b2:ef:
81:78:24:a4:e5:76:4b:22:37:41:f8:ab:0c:34:e4:e0:7a:38:
66:28:52:8b:5e:f3:d4:70:9a:29:a7:81:3e:2f:6a:cf:b7:35:
ef:db:40:50:a0:23:52:2a:6f:7e:b4:87:19:c9:ad:2f:a9:e3:
89:79:d4:8c:a6:62:b2:fe:01:b7:99:cb:dd:20:95:49:d6:06:
93:09:83:48:33:21:1c:29:97:6a:d8:dd:a2:5b:d2:2d:e2:fe:
38:a5:5e:80:1b:5e:b1:75:05:5c:02:d1:6d:5d:ee:b2:d8:63:
ac:e1:c2:1e:b8:d2:92:7a:71:1a:00:5f:38:5d:9f:8c:3a:f1:
c5:19:3f:dd:e0:f4:c3:d5:15:2d:b1:eb:fe:74:a1:49:30:21:
bd:ef:0a:28:4e:0e:d9:36:3a:6e:1c:14:0f:dd:7c:99:11:e3:
9e:fd:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:36:03 2025 by rpki-client