Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Nau4sEkw1hfe3Ap8LDOI92A01bY.roa
File: Nau4sEkw1hfe3Ap8LDOI92A01bY.roa (raw, json)
Hash identifier: BfKmybZMpTmwqLO6FjQjAMdBYXOj9Emw/TzFFP1kpHY=
Subject key identifier: 35:AB:B8:B0:49:30:D6:17:DE:DC:0A:7C:2C:33:88:F7:60:34:D5:B6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B036D6A245CA329D9281E8A04D57FDF7A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Nau4sEkw1hfe3Ap8LDOI92A01bY.roa
Signing time: Fri 06 Oct 2023 05:19:44 +0000
ROA not before: Fri 06 Oct 2023 05:19:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20454
IP address blocks: 88.216.134.0/23 maxlen: 23
88.216.44.0/23 maxlen: 23
84.32.46.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:6d:6a:24:5c:a3:29:d9:28:1e:8a:04:d5:7f:df:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 6 05:19:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35abb8b04930d617dedc0a7c2c3388f76034d5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:8b:fa:1e:f8:77:a0:46:e3:a1:d6:5d:21:
0d:30:7f:97:ed:6d:e2:5f:10:78:b8:ce:31:98:12:
dc:eb:73:5e:b4:cf:a6:36:54:a1:ba:b9:c1:64:57:
1d:85:88:4d:dc:03:d6:d4:95:8f:44:98:c8:e2:f6:
49:14:8c:28:8f:05:ca:1d:af:e2:8a:02:90:d8:0a:
e2:ec:0e:cd:0e:09:61:35:85:82:c1:ec:75:87:82:
32:ad:e3:41:17:66:03:49:17:34:ec:65:3e:cb:37:
09:2e:4c:89:8a:03:94:dc:6d:32:cb:de:36:02:f3:
bc:1e:01:d2:6d:18:48:e5:34:40:e6:5f:3c:b4:bb:
c7:55:a3:c1:79:45:75:72:ea:6e:0f:b8:8b:a6:59:
b6:1a:2c:87:95:c2:2c:45:2e:b8:a9:d2:d4:88:a0:
26:8f:9e:a5:ea:ef:a9:b3:0f:fc:20:75:ee:39:a9:
c3:6f:a0:fa:52:16:a0:70:4c:9d:13:ec:13:b9:b7:
29:b2:7e:e9:be:60:1b:01:9c:dc:7d:d0:a9:77:ae:
33:e2:d1:55:00:78:df:9f:f9:16:8a:bb:c6:1a:6a:
59:6c:ef:3e:81:30:e6:b2:fb:10:cd:8b:f9:c8:5c:
bb:2b:ba:24:22:ea:92:9d:34:5c:f2:f1:64:c6:e5:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AB:B8:B0:49:30:D6:17:DE:DC:0A:7C:2C:33:88:F7:60:34:D5:B6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Nau4sEkw1hfe3Ap8LDOI92A01bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.46.0/23
88.216.44.0/23
88.216.134.0/23
Signature Algorithm: sha256WithRSAEncryption
38:0e:33:87:b4:04:5b:b2:1d:88:fe:6c:b4:95:71:be:b2:34:
2b:68:31:be:b6:2d:7f:00:c2:ef:ae:72:8d:f7:6e:5d:c5:0e:
32:56:cc:f0:e8:a8:9a:33:5f:48:c3:35:6d:a4:d0:35:bf:b6:
7d:b5:0d:e9:e9:41:d0:cb:8c:d8:56:e4:39:ac:2b:ed:44:7b:
65:60:54:23:d5:03:75:90:e9:f2:fb:cf:16:a4:36:f4:d1:11:
ce:40:4a:6a:7d:9d:6b:cb:78:d8:70:ea:1f:63:a0:57:c9:d7:
1c:40:8b:a9:43:14:41:54:60:7d:19:01:0c:ee:e1:26:98:19:
0d:6c:8d:0e:24:6d:bc:41:09:18:0a:02:f7:37:e6:cb:86:cc:
e6:27:eb:dc:f2:9a:44:3b:9e:d4:14:29:72:b5:2f:b6:c2:6b:
11:25:98:5e:27:c8:88:fe:fa:88:41:0b:f3:3f:2b:68:48:9e:
53:50:65:d0:9e:50:66:49:00:c9:68:8b:48:0d:47:30:95:e2:
9f:fe:87:fe:16:06:68:74:86:01:cd:e6:5e:e2:30:bb:6a:36:
48:e8:2f:e7:50:8e:d7:8d:63:79:17:a4:ed:18:d7:04:49:36:
08:2c:59:27:a7:52:cb:3d:76:25:cb:36:5a:e6:8f:75:a1:c6:
ea:ec:fc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:50 2024 by rpki-client on console-fra.rpki-client.org