Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Mj_joS5gqcC8qX_H7CZG6QKw13U.roa
File: Mj_joS5gqcC8qX_H7CZG6QKw13U.roa (raw, json)
Hash identifier: GBT5qXQEe/zGHqjehTOO6OzIqT5hGuTX34NlBQq+dQs=
Subject key identifier: 32:3F:E3:A1:2E:60:A9:C0:BC:A9:7F:C7:EC:26:46:E9:02:B0:D7:75
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01877A35DA0AF830802472AF024688ECC269
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Mj_joS5gqcC8qX_H7CZG6QKw13U.roa
Signing time: Thu 13 Apr 2023 10:42:41 +0000
ROA not before: Thu 13 Apr 2023 10:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 88.216.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:35:da:0a:f8:30:80:24:72:af:02:46:88:ec:c2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 13 10:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=323fe3a12e60a9c0bca97fc7ec2646e902b0d775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:21:94:c9:47:00:e6:4a:7b:36:af:bd:8e:
8f:ec:2f:ff:c5:2f:33:e1:f8:dc:dd:96:cf:d8:ee:
59:68:41:10:ac:c6:5d:5a:a8:ea:5e:b2:21:45:9b:
97:3a:68:e2:8d:2f:83:f5:28:84:89:80:ed:b4:89:
7c:60:97:6d:b7:ec:88:be:bd:83:05:27:82:d7:1b:
cd:31:11:ea:d1:7c:d4:8e:62:68:d1:86:2c:b6:9a:
7d:d1:d2:8e:aa:7d:e5:a6:7d:ba:9b:81:93:d1:a3:
36:04:f0:24:95:ae:33:d0:bb:af:38:90:f8:ea:0a:
38:ea:9d:29:c5:b6:c6:52:32:a6:b3:90:6c:07:0a:
00:fa:79:34:4e:d8:e9:10:e7:f4:e5:f4:f7:01:e1:
b6:21:b6:54:18:d0:23:0d:fc:78:05:29:b7:0b:ab:
15:6b:26:33:c3:06:32:c1:19:4b:f5:02:22:ea:be:
f1:84:a1:61:3d:64:9a:76:9c:c0:e0:c6:35:8e:2a:
2c:2f:ae:51:07:e6:0e:f4:fc:b6:c2:0e:db:4f:b8:
f8:a5:24:66:b4:f7:71:50:fa:a2:3c:e1:18:18:14:
38:e3:8a:8a:17:57:20:a7:10:73:2a:c7:00:8f:bf:
80:18:25:46:1b:15:09:6d:75:5d:27:53:66:b0:17:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3F:E3:A1:2E:60:A9:C0:BC:A9:7F:C7:EC:26:46:E9:02:B0:D7:75
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Mj_joS5gqcC8qX_H7CZG6QKw13U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.96.0/24
Signature Algorithm: sha256WithRSAEncryption
78:98:92:da:a4:f7:ea:3a:ca:45:2f:e7:74:6a:b9:64:1f:82:
fc:44:7c:05:c2:ba:e9:4f:d9:fe:10:23:6d:12:8a:7e:4e:e8:
65:ae:70:fb:8f:1b:3c:06:36:83:32:79:36:87:9a:ec:d3:d9:
08:8a:97:ec:96:9d:36:fb:09:83:df:78:33:f9:ad:05:81:dc:
0e:8c:e5:57:37:d2:b8:da:c4:fb:7b:84:c5:d5:36:8f:36:0a:
61:c1:c2:a4:fb:a3:38:e4:87:f7:4d:7a:0e:47:8e:f7:3a:27:
df:0e:81:66:42:af:8e:04:40:90:c1:2f:81:eb:87:28:b0:72:
db:44:14:45:b4:2d:1c:2a:b7:8d:50:50:3d:61:94:1a:b3:35:
f6:a6:08:a0:cd:39:1e:bb:df:6b:c1:79:0e:e3:3b:2f:31:38:
21:8b:ae:b4:91:8a:b6:b4:9f:91:fb:ab:77:f0:7d:4c:b5:68:
45:5c:97:83:eb:23:9b:ec:dc:a8:da:42:0b:b0:ad:65:b3:6c:
a7:4f:1a:fd:12:12:fc:17:1f:95:b8:8d:3c:06:93:9e:e4:d0:
5b:a7:18:67:4b:cd:bb:cb:56:74:9c:17:d4:5d:d4:82:f6:4e:
a1:a5:3c:d1:b2:54:b1:98:6f:ca:7a:25:3c:89:68:9d:2f:f7:
7e:a3:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org