Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/O1YTra0O6L_OcQo3Agy50URWZ4I.roa
File: O1YTra0O6L_OcQo3Agy50URWZ4I.roa (raw, json)
Hash identifier: fGy5GmozMqGHjPwjFJ7QJZ1ilYYQJSp70rU1I7uSYAc=
Subject key identifier: 3B:56:13:AD:AD:0E:E8:BF:CE:71:0A:37:02:0C:B9:D1:44:56:67:82
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188F672C6DB85AC1175865D5959ABB1D668
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/O1YTra0O6L_OcQo3Agy50URWZ4I.roa
Signing time: Mon 26 Jun 2023 06:44:57 +0000
ROA not before: Mon 26 Jun 2023 06:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400529
IP address blocks: 88.216.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:72:c6:db:85:ac:11:75:86:5d:59:59:ab:b1:d6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 26 06:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b5613adad0ee8bfce710a37020cb9d144566782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:59:6b:f8:ed:c8:6a:1f:43:d3:b9:b0:9e:
22:85:ed:f2:19:3a:e8:f5:0b:e7:60:dc:2d:c8:f6:
0f:2a:67:65:92:36:7e:e2:9e:7b:2d:a9:c5:41:45:
97:70:70:90:2d:50:4b:fe:ae:37:9d:f5:77:41:af:
fa:9a:90:a0:6d:d1:68:60:a8:c8:17:a3:6c:14:77:
48:43:1a:40:d3:65:2f:ac:ce:ec:fe:f6:1a:cc:f9:
76:60:77:e6:35:ba:2a:b5:56:d9:50:42:8e:16:f3:
5e:39:cb:81:0c:e2:4f:82:49:06:a1:7a:51:f0:9e:
b5:30:c6:f6:1a:8f:c5:53:4c:e5:ef:c8:84:ef:28:
75:65:81:8f:a1:ca:bb:7b:d3:62:4a:71:b0:f8:1b:
00:74:51:6a:da:3c:aa:5f:42:83:e2:1c:14:26:40:
20:b1:c1:44:1e:b2:cf:50:22:65:ac:3c:2b:2b:fd:
a2:46:37:d0:ff:7e:7e:ca:36:15:9a:fb:72:49:68:
6a:da:be:88:a0:2f:03:0c:de:43:c5:5b:2a:ad:b6:
8a:81:e4:a5:ed:1a:81:91:b7:35:90:88:67:fe:66:
c4:f4:1e:a1:b6:48:ae:5d:e7:ff:7c:cb:ce:35:15:
18:8a:02:39:b0:f5:fb:f9:f8:29:71:ae:92:fe:d7:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:56:13:AD:AD:0E:E8:BF:CE:71:0A:37:02:0C:B9:D1:44:56:67:82
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/O1YTra0O6L_OcQo3Agy50URWZ4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:40:0b:e5:5d:b8:39:f5:7c:df:2b:0f:d4:3f:a0:68:b6:4d:
80:88:1b:b2:73:e7:5f:19:45:13:28:da:d9:f0:d0:be:1a:dd:
92:1b:f2:b2:bd:ab:a2:1d:c4:cd:58:70:31:5f:7c:19:9f:3a:
27:50:d3:6a:06:44:5b:ef:40:4c:e6:ae:4a:50:9a:28:e6:86:
97:25:86:af:eb:5e:da:bb:ff:bb:85:5b:e3:b2:81:9d:05:35:
ee:5e:2c:aa:61:26:62:09:38:f8:cc:56:bb:b6:9e:2f:17:f1:
c2:2d:f7:e9:b5:ce:79:87:1b:56:ea:c9:8a:be:da:ff:b8:89:
d2:e8:02:00:b1:f8:6a:fb:b3:f1:13:d4:5e:7b:cb:59:fb:05:
7e:77:23:08:1b:ee:2e:e8:42:80:c6:02:5a:8a:14:70:1f:a4:
3b:16:7c:75:1f:bf:66:03:1f:77:b3:08:85:fa:3e:77:2f:27:
b5:55:29:c6:5d:52:55:b4:9a:29:82:3f:57:ac:42:1c:8b:d5:
38:fb:19:52:74:20:ab:d2:f0:d2:fc:25:21:5a:29:25:24:d4:
06:23:a3:c9:bb:85:fd:f8:1a:82:af:59:1c:ef:5a:48:87:df:
c7:55:c9:54:7e:be:c4:99:26:c5:fc:a2:28:29:b1:1b:50:65:
34:7a:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org