Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Oe1WxVrM2GMgoF2MyNMeoqrSE30.roa
File: Oe1WxVrM2GMgoF2MyNMeoqrSE30.roa (raw, json)
Hash identifier: exJGpYk9eJgjLTgN2HxJDnYlR+sYSqew7PKIXxzp4/Y=
Subject key identifier: 39:ED:56:C5:5A:CC:D8:63:20:A0:5D:8C:C8:D3:1E:A2:AA:D2:13:7D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018745E3E28B490F6D4A607324E5295E3B92
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Oe1WxVrM2GMgoF2MyNMeoqrSE30.roa
Signing time: Mon 03 Apr 2023 06:52:55 +0000
ROA not before: Mon 03 Apr 2023 06:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 88.216.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:e3:e2:8b:49:0f:6d:4a:60:73:24:e5:29:5e:3b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 3 06:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39ed56c55accd86320a05d8cc8d31ea2aad2137d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:f4:b2:28:8a:ac:ce:45:95:d1:18:f7:7f:
ac:c2:e8:ac:e8:ea:27:48:66:06:41:ea:54:19:f7:
e2:cc:af:2e:0c:a5:f4:5a:f1:fe:70:31:4f:f0:35:
28:7c:ab:fb:58:5e:bb:56:e8:09:c5:61:64:f1:47:
d2:64:7e:78:8e:84:61:c7:7c:4e:f3:fb:55:69:26:
58:c0:ee:88:5b:d1:8d:74:15:97:33:7f:88:6f:b2:
79:c4:86:34:a4:a8:4d:9a:c1:d0:e2:99:7e:2e:84:
36:78:e2:c7:e5:68:60:87:59:24:58:51:19:82:0c:
30:1c:d1:f0:b8:d4:ee:f1:f4:aa:de:07:2e:22:ef:
a6:67:7c:b8:89:9f:ae:a5:89:b5:e9:96:3f:f4:b8:
6d:11:a9:e2:ad:21:2a:ec:82:5c:6b:92:c5:ee:da:
f1:af:10:0e:dc:90:ad:50:97:b4:b6:ce:9f:89:59:
66:95:2d:34:cc:9c:39:78:74:4e:e1:d5:40:06:68:
ca:0c:7e:53:d1:a1:52:6d:dd:15:f5:ca:ec:62:ce:
c0:3c:0d:83:7f:0b:70:c2:92:ca:05:eb:cb:d0:4a:
9d:91:1e:4a:b0:07:59:0e:53:01:92:a2:4f:db:95:
47:de:78:ce:08:ac:fe:20:bb:dc:92:d5:29:5f:93:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:ED:56:C5:5A:CC:D8:63:20:A0:5D:8C:C8:D3:1E:A2:AA:D2:13:7D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Oe1WxVrM2GMgoF2MyNMeoqrSE30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.17.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e7:d5:30:89:f3:3b:eb:2e:7c:9d:66:ff:3c:b9:95:f6:1b:
1d:64:a3:a6:fd:d8:1e:bb:d0:35:57:0c:68:43:99:b1:24:ec:
51:1f:ce:df:e8:81:22:cd:ae:47:1c:bb:8d:f5:4d:69:6e:b6:
0b:59:24:f8:08:4a:55:d8:ce:81:36:52:75:a5:cf:ad:85:51:
99:42:7c:c6:1b:76:66:c9:01:9c:fd:75:26:46:4e:9b:79:46:
41:0d:75:df:72:f7:6a:4e:dd:6d:0c:39:bb:e5:81:bc:98:96:
46:57:a3:0c:80:a2:c7:a8:b9:1d:38:7e:96:f4:a2:69:02:98:
ad:52:e1:d5:15:6d:77:30:cf:96:e0:14:44:b6:aa:29:03:e5:
89:14:89:17:6e:76:1e:59:a9:58:b0:f5:25:5c:6b:11:9d:50:
bd:0c:10:0f:05:5c:93:d6:75:15:05:84:da:7c:d5:94:0c:4d:
c8:ec:20:b8:02:f7:05:52:db:63:71:c5:17:3b:e3:b0:20:41:
ab:40:02:bf:02:5a:c3:19:58:62:63:69:2c:b0:80:3a:b1:b3:
c7:f4:e5:c5:ac:c4:58:10:62:f7:d6:c7:65:a7:cf:f6:3f:a5:
aa:a8:52:7b:6c:73:d1:7c:8b:c7:57:30:28:de:07:2c:dc:61:
79:eb:c4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:32 2024 by rpki-client on console-fra.rpki-client.org