Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Q1aqksdpOjPlLe3NFVgQk-fKtVk.roa
File: Q1aqksdpOjPlLe3NFVgQk-fKtVk.roa (raw, json)
Hash identifier: AflwJmIYu2TOLnycD5ZmzAxnOj4DNxw0vb0ENGhJYdE=
Subject key identifier: 43:56:AA:92:C7:69:3A:33:E5:2D:ED:CD:15:58:10:93:E7:CA:B5:59
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018630C7236ABF47F9E8DEB5AAD553DE5731
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Q1aqksdpOjPlLe3NFVgQk-fKtVk.roa
Signing time: Wed 08 Feb 2023 11:26:42 +0000
ROA not before: Wed 08 Feb 2023 11:26:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 88.216.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Feb 2023 06:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:c7:23:6a:bf:47:f9:e8:de:b5:aa:d5:53:de:57:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 8 11:26:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4356aa92c7693a33e52dedcd15581093e7cab559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:61:08:53:3e:97:a3:7d:a4:a2:00:4a:07:
12:f3:07:e5:07:f9:10:3d:d6:f4:44:4a:5c:f9:0b:
b7:76:61:c5:98:6c:26:dd:68:4e:7e:31:bc:5d:5f:
83:ee:36:09:9f:12:ba:75:a2:cb:fc:15:32:92:40:
45:70:41:b2:21:82:51:b0:20:18:2d:7e:49:09:7c:
12:28:68:04:11:84:31:7f:f5:3a:47:13:f9:82:46:
45:b3:d8:ee:61:12:00:84:92:b4:ab:7c:f4:1c:8c:
8c:c1:31:c4:3e:c3:df:7c:9c:07:ae:6d:75:e9:36:
c5:1b:d2:ed:bf:18:3d:bc:87:a7:16:4e:95:fe:5b:
91:94:12:0c:0e:af:46:b2:0b:72:7e:4a:c6:8c:1a:
33:5e:23:0f:51:a1:86:d8:88:e6:32:30:a9:6b:bc:
2a:77:c8:b6:2c:aa:d0:28:e1:76:37:15:12:f0:10:
fe:38:8b:93:f3:a0:69:77:93:c3:c5:73:9e:07:14:
8c:1e:b1:fe:9d:c7:5f:7e:8f:c8:5b:7d:73:84:32:
0e:6e:ec:fc:76:01:81:42:ab:14:71:a4:d7:d1:65:
7d:76:41:e0:15:b6:c0:ee:d3:34:ee:3d:44:b7:85:
1b:da:a4:f3:1d:85:ef:11:09:c5:77:d2:fe:6c:03:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:56:AA:92:C7:69:3A:33:E5:2D:ED:CD:15:58:10:93:E7:CA:B5:59
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Q1aqksdpOjPlLe3NFVgQk-fKtVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.22.0/23
Signature Algorithm: sha256WithRSAEncryption
75:6a:71:08:8e:4d:96:df:ec:5c:90:a9:32:de:c8:7c:8c:eb:
d6:cf:d2:ed:f4:c6:a5:51:9f:a3:5d:50:69:8f:d5:b6:e6:0e:
34:70:05:d1:ad:93:eb:90:85:42:82:6b:67:13:55:55:9e:af:
98:db:24:36:04:7b:00:c8:f5:13:78:57:10:59:fc:d7:b7:02:
26:2d:97:11:77:57:f8:94:13:a5:be:f5:d1:2b:35:c0:c8:89:
92:c7:8a:ac:1a:13:66:d1:06:e3:61:1b:5d:97:9f:91:58:74:
66:af:c1:0c:e8:89:19:57:f2:95:19:d5:76:db:07:e3:8f:de:
49:fb:48:13:4c:87:f9:40:34:d3:39:b9:23:4a:f3:37:82:87:
b2:12:41:93:e0:22:f1:02:79:af:5f:60:89:62:9c:11:37:86:
33:b3:3e:75:1f:00:71:16:7e:99:dd:84:c2:25:dc:b0:0c:0e:
b9:f6:6b:13:6f:1a:61:02:70:f0:38:b3:8d:3a:54:6f:1c:49:
30:b2:66:91:35:61:21:0c:d4:1a:a2:75:65:24:52:f0:80:64:
44:8d:1d:2e:76:e9:78:3d:eb:88:d2:f8:8e:a0:a7:7d:49:11:
53:2a:cc:b3:aa:e3:ef:4c:8d:2c:5b:d9:29:f6:f3:9f:ce:97:
ef:04:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org