Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NhE6M5DfND39wrUjnvRQza46Rm4.roa
File: NhE6M5DfND39wrUjnvRQza46Rm4.roa (raw, json)
Hash identifier: ZffIueHyA1QqWGKRH1a5R8OHwWV9lTD02uMFT1MQhb4=
Subject key identifier: 36:11:3A:33:90:DF:34:3D:FD:C2:B5:23:9E:F4:50:CD:AE:3A:46:6E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01861624B7DB804DC97B158702100239FE44
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NhE6M5DfND39wrUjnvRQza46Rm4.roa
Signing time: Fri 03 Feb 2023 07:19:10 +0000
ROA not before: Fri 03 Feb 2023 07:19:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 88.216.212.0/22 maxlen: 24
88.216.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:24:b7:db:80:4d:c9:7b:15:87:02:10:02:39:fe:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 3 07:19:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36113a3390df343dfdc2b5239ef450cdae3a466e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:0c:b7:13:86:41:a0:9a:5c:e0:86:12:a8:
eb:d0:0d:22:82:f4:b5:fe:7c:6d:7d:2b:c5:18:02:
45:30:49:21:91:24:b8:5e:64:56:3f:58:4b:f2:51:
4e:d0:76:ce:fd:43:d9:25:87:fb:67:fa:9c:f6:8a:
79:25:bf:21:14:be:f1:30:00:26:79:8f:8f:0c:4c:
ab:8a:ea:76:6b:93:17:6e:46:68:b8:8f:60:f4:54:
20:a2:ed:cf:0f:d4:9c:05:19:a8:88:70:ca:db:8d:
7c:03:16:c0:bf:65:d3:d1:2f:8e:0f:27:19:91:8c:
78:01:d7:d9:36:3a:97:8c:e9:49:21:54:29:7c:ec:
f0:e8:7b:f9:d7:2c:44:a4:09:66:b8:a7:69:de:b6:
ff:ec:56:3d:ff:dd:19:9e:f7:5c:92:e6:cf:1e:df:
39:15:83:15:bd:df:8c:38:7d:86:19:25:07:2a:e6:
33:15:60:41:28:e1:7c:a7:11:05:12:47:f7:d6:96:
7d:87:e3:24:7c:8d:e3:f3:6e:11:87:58:af:d7:07:
4e:dc:47:18:2c:86:e8:fe:66:90:24:f9:8a:38:8c:
59:ab:ac:5d:9e:07:a1:65:ae:13:a2:82:81:6c:0c:
2c:2b:63:5f:14:a0:ac:81:04:51:4a:60:cd:9f:4c:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:11:3A:33:90:DF:34:3D:FD:C2:B5:23:9E:F4:50:CD:AE:3A:46:6E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NhE6M5DfND39wrUjnvRQza46Rm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.21.0/24
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
55:8d:c5:bb:05:1a:1b:60:e7:31:bf:e7:29:f7:89:ce:22:33:
2b:a2:b8:f1:c7:b5:d3:24:01:6d:df:5d:cd:81:ba:dc:ea:6c:
81:a1:a3:4b:31:71:ac:ca:6c:e0:e2:51:81:79:b5:d6:74:26:
9d:ce:88:e3:7b:8c:0f:79:fb:54:d3:40:e5:cf:1f:17:57:af:
bc:6d:50:9c:32:21:d8:75:df:3c:ed:28:a2:24:0a:63:79:80:
71:44:ee:77:5b:87:fe:95:71:47:e4:b2:79:cc:3d:71:45:67:
e1:6e:d5:30:81:cb:a0:a0:14:9f:40:36:39:99:19:b4:e8:44:
e4:f5:c7:8d:fd:cf:9e:84:98:fb:73:55:20:89:80:a1:6f:bb:
9b:30:ee:94:d3:69:15:6c:2e:5d:bb:47:8e:f1:a5:4a:f8:a7:
e3:18:92:b5:2e:20:d1:a1:54:52:23:3f:4b:de:ce:df:fd:9a:
54:ab:14:1b:53:a3:2a:9b:a4:df:cb:18:ee:fd:f5:e3:50:4f:
c8:aa:bd:e6:6b:f0:28:83:7f:36:fb:0d:10:c4:bc:d3:de:02:
de:7d:cb:e5:a2:10:fa:f9:ef:22:59:98:4e:60:40:02:6c:b9:
dc:09:bc:c2:c7:1a:97:a2:6a:4d:d3:88:1b:f7:30:48:80:21:
4d:a4:69:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:29 2023 by rpki-client on console-ams.rpki-client.org