Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Q56lTmhaNevUj8HZC2mD_pqy0MQ.roa
File: Q56lTmhaNevUj8HZC2mD_pqy0MQ.roa (raw, json)
Hash identifier: 6BDOsFK1jtmNQbERf4vqSu6PG45lFl5ZBSwtSQgU4Vs=
Subject key identifier: 43:9E:A5:4E:68:5A:35:EB:D4:8F:C1:D9:0B:69:83:FE:9A:B2:D0:C4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFB8EC169EF8F1B85EA85D9C41D791
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Q56lTmhaNevUj8HZC2mD_pqy0MQ.roa
Signing time: Sun 01 Jan 2023 18:54:47 +0000
ROA not before: Sun 01 Jan 2023 18:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 88.216.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:b8:ec:16:9e:f8:f1:b8:5e:a8:5d:9c:41:d7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=439ea54e685a35ebd48fc1d90b6983fe9ab2d0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:b9:c8:7e:1d:96:9a:e3:d6:37:38:8c:bc:
4d:f4:21:44:82:53:12:e2:44:e4:a3:be:68:55:2f:
52:1b:0b:76:cb:ab:35:f9:6f:0b:01:89:55:1f:c1:
6c:0e:87:c4:3b:31:e3:56:9f:c3:1a:c4:9c:44:fb:
dc:fb:de:17:8d:0a:9c:5d:e4:e7:a0:0d:2b:88:91:
ba:65:8a:d7:b1:33:dd:8d:53:c4:73:a6:5e:9b:fb:
b5:1d:36:8a:db:a6:75:38:8d:39:b6:e4:61:31:25:
37:78:b0:40:d7:47:07:0f:9d:e9:03:6e:1a:6b:cf:
ce:01:38:9b:47:45:27:0e:c4:e7:f9:36:39:f8:c3:
20:a2:d0:8b:4d:43:e3:79:78:ce:a0:b2:ad:b7:81:
4d:a2:11:04:2e:3c:08:7d:0e:4a:ae:74:1f:22:7e:
2a:f6:50:21:ae:db:f7:bf:98:98:16:c9:8b:78:da:
af:1d:d5:70:03:b5:0d:ee:63:31:70:55:51:dc:8a:
36:f6:2d:f3:be:05:40:f3:2d:4d:d6:4a:8a:ad:38:
93:ca:02:6a:7e:9c:56:4f:9b:21:c2:6f:75:e4:7e:
0c:39:26:18:31:22:7b:b1:63:c7:45:2a:0d:d8:50:
13:a8:49:6d:04:35:dd:c5:a9:eb:a3:20:35:7b:5d:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9E:A5:4E:68:5A:35:EB:D4:8F:C1:D9:0B:69:83:FE:9A:B2:D0:C4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Q56lTmhaNevUj8HZC2mD_pqy0MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.100.0/24
Signature Algorithm: sha256WithRSAEncryption
80:87:25:e5:12:fa:3b:1f:4e:b9:64:52:ea:74:4d:4c:f6:a3:
d5:6e:09:39:4e:92:ac:22:00:a3:04:6b:da:ff:41:1b:6c:2b:
e8:5a:a7:19:38:77:c9:4a:fb:f3:35:07:95:14:1a:41:dc:db:
2b:8d:cf:20:84:d6:dd:92:d9:06:23:f3:5d:b9:43:92:63:5c:
d7:09:0f:53:a7:91:5e:c4:8a:5a:e6:61:67:b6:ce:e3:90:72:
20:33:e8:fe:e2:74:19:5d:69:a6:e5:1e:d4:c4:73:74:29:fa:
57:61:a7:5b:f3:9b:bd:89:69:46:e0:1a:36:40:a4:f2:de:1c:
88:c2:c1:d7:88:7c:ee:a8:8e:5e:c6:bf:60:aa:13:88:a0:97:
13:9c:66:77:85:de:d1:e8:5e:70:b8:0f:4f:a1:2d:9c:89:3a:
12:ec:1e:92:2a:93:2a:86:97:4f:a4:ce:9c:ae:2c:56:33:2c:
19:ca:1c:14:2a:a3:83:7c:a1:8b:41:bf:5e:05:e8:c4:45:3d:
39:99:e0:17:5b:d7:d0:68:3e:3b:c3:de:69:d5:4f:42:3e:50:
c5:76:d4:db:eb:c6:0d:f3:46:06:f7:87:4c:a2:22:df:0e:98:
bc:58:f4:4c:90:ce:13:30:a0:1d:7f:79:0d:35:b5:e8:c8:97:
76:10:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:47 2023 by rpki-client on console-fra.rpki-client.org