Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Mk5GdjRU_xawg53Jf-coav8CgSY.roa
File: Mk5GdjRU_xawg53Jf-coav8CgSY.roa (raw, json)
Hash identifier: rgetIs6MxWILpZ2xanBjWjaHZijwmvc2JfJU2Zoi2Eo=
Subject key identifier: 32:4E:46:76:34:54:FF:16:B0:83:9D:C9:7F:E7:28:6A:FF:02:81:26
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC5014A03160F71B532AD4AFF5D02C8EB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Mk5GdjRU_xawg53Jf-coav8CgSY.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200017
IP address blocks: 88.216.108.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 16:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4a:03:16:0f:71:b5:32:ad:4a:ff:5d:02:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=324e46763454ff16b0839dc97fe7286aff028126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:3a:1a:07:06:ce:11:58:d2:e8:c8:ce:71:
c9:47:12:44:73:51:cc:0c:21:37:7b:de:83:19:16:
36:b0:ee:62:c6:f4:1b:72:f8:41:2c:9c:6d:d7:66:
de:09:25:8c:e9:97:b1:82:e7:85:d6:ed:78:a9:8c:
79:9f:a4:c9:f2:d0:7b:ef:6a:09:e3:53:14:69:22:
f7:95:fd:22:89:a2:2c:04:77:5e:7b:8f:05:4d:85:
52:4b:e3:38:77:dd:32:e7:d3:0a:58:36:54:aa:08:
cb:5e:89:e6:e3:d2:88:50:31:a7:6c:c4:45:f3:2c:
dd:59:aa:b5:a5:28:ef:b2:c7:9a:a5:ba:f4:ba:31:
e7:cd:44:c4:fe:cc:46:cd:87:a8:5f:12:07:a9:c5:
a6:93:be:91:f0:80:47:9b:23:2a:c5:5f:7f:0f:b5:
f0:41:2b:0d:0a:88:77:36:41:67:c4:5b:e3:2a:7c:
e1:72:5d:ba:f0:d0:2e:7f:cc:6b:d1:98:37:8f:1d:
66:da:ad:4f:d8:74:a7:de:dd:b0:34:11:d1:c5:68:
27:f3:0b:66:84:33:48:28:a3:ec:d9:20:37:42:31:
76:3d:73:11:ff:1f:8e:94:64:5b:f7:31:44:c4:32:
d8:99:dc:6d:e1:6a:11:97:80:70:38:12:22:27:a1:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4E:46:76:34:54:FF:16:B0:83:9D:C9:7F:E7:28:6A:FF:02:81:26
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Mk5GdjRU_xawg53Jf-coav8CgSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.148.0/24
88.216.108.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c5:a5:d9:0e:e4:62:e8:b3:07:5b:b2:df:90:d8:91:92:30:
c6:b1:c1:ee:de:16:3a:92:96:05:82:20:86:8f:33:c3:8f:f2:
92:64:c5:7e:e0:02:74:78:81:e4:73:37:34:d0:b2:7e:cc:20:
c7:eb:74:56:42:9a:99:c8:be:1e:b3:d5:75:c2:46:b9:3d:29:
13:a9:b2:b9:25:3c:23:1a:ea:c6:c9:27:b4:8f:dc:c7:67:22:
8d:7f:3a:42:de:fa:6c:85:64:52:b1:eb:e2:4b:a8:b6:a7:9d:
d3:21:c1:dc:ee:21:84:51:e4:5f:f7:10:c8:b0:a1:ed:7e:dd:
cf:56:85:bf:68:70:4a:f6:de:5d:1a:c6:9d:75:0e:b9:df:65:
35:d7:2e:13:2a:47:4a:3e:94:98:02:0d:de:b7:32:c7:5b:37:
e0:e7:cb:34:f9:37:ea:1e:29:ed:0a:1f:21:80:53:9b:de:fb:
5a:e7:37:d0:70:26:65:a7:18:1c:0b:68:86:90:54:7b:b9:d7:
6b:48:69:8b:c7:1d:b2:d3:03:fc:ac:f5:00:cb:ef:d8:7f:4f:
24:c0:68:fe:be:b8:e0:48:a8:f7:85:5a:af:09:b2:cc:35:ae:
ac:f7:98:2f:b7:fb:ba:c7:b3:7b:d3:d0:61:e7:fa:8d:93:c0:
65:f0:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:32 2024 by rpki-client on console-fra.rpki-client.org