Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Q_qHQjp082ppz85CftW7Pl4Z85k.roa
File: Q_qHQjp082ppz85CftW7Pl4Z85k.roa (raw, json)
Hash identifier: 7HWhqTIRqEW9elSiPgaL6/3+z9nH1KhMhap8+Bqthcw=
Subject key identifier: 43:FA:87:42:3A:74:F3:6A:69:CF:CE:42:7E:D5:BB:3E:5E:19:F3:99
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189AAD5845FA68C68B270E5096788505B44
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Q_qHQjp082ppz85CftW7Pl4Z85k.roa
Signing time: Mon 31 Jul 2023 07:24:27 +0000
ROA not before: Mon 31 Jul 2023 07:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 88.216.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 11:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:d5:84:5f:a6:8c:68:b2:70:e5:09:67:88:50:5b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 31 07:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43fa87423a74f36a69cfce427ed5bb3e5e19f399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:d8:b2:70:98:2a:d0:3c:c9:3f:c9:da:b3:
7c:68:3f:ff:dd:10:be:25:f0:4b:b0:a5:bb:2f:9b:
96:a2:4f:74:e4:f1:45:bd:81:f5:b8:6d:02:d0:b3:
9f:77:b5:b1:32:31:86:8d:ba:79:e0:53:db:09:68:
40:60:dd:0e:bd:14:85:6f:93:dd:33:b5:1d:3c:bc:
70:f2:7e:7d:7a:71:ec:ae:49:f1:fa:d4:d3:5f:9a:
02:ae:9a:08:50:52:88:b7:cd:66:59:dd:7e:f6:dd:
6f:c8:50:42:28:b8:e7:c1:85:23:8f:94:1b:a3:41:
62:f7:fb:74:5c:ba:24:fb:0c:29:0c:bb:62:4b:79:
a7:27:a9:1a:25:10:ba:3f:42:25:74:c7:50:68:4c:
34:48:bf:30:c7:23:de:7e:50:9e:cc:0c:28:16:31:
9f:f3:2f:2d:e4:66:85:4c:fc:66:13:54:47:95:fb:
54:56:91:9d:2b:1f:ee:10:a7:1d:01:62:57:3e:50:
46:0e:bc:1c:68:42:ad:a7:9a:c0:67:b4:d4:64:67:
f3:d2:93:b0:9d:fa:44:fe:07:bf:58:7b:81:a4:c2:
ea:df:99:11:8a:07:3a:e4:b1:6b:63:43:11:5f:75:
99:9d:c3:92:bd:6b:aa:73:aa:37:ac:48:e5:00:08:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FA:87:42:3A:74:F3:6A:69:CF:CE:42:7E:D5:BB:3E:5E:19:F3:99
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Q_qHQjp082ppz85CftW7Pl4Z85k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:08:da:ac:10:f1:eb:7d:37:32:47:06:04:b4:08:f7:e8:77:
27:2e:15:50:d7:e9:a6:55:fb:ff:b3:5e:1d:2d:84:29:de:3b:
b7:e7:0d:e6:fe:98:f4:5e:e5:9a:96:d8:5c:a5:5f:e9:c7:d5:
d0:c5:c8:6c:2b:37:a4:5c:8c:3e:d6:75:d5:7a:c4:a0:06:3f:
c0:44:28:ed:6d:ee:b9:1c:97:5f:16:4f:d4:7f:c9:03:49:2f:
64:11:91:6c:ec:48:b9:76:47:db:12:5e:72:82:c9:dd:10:d8:
b3:ca:da:d0:c3:49:ef:b0:35:49:3b:b6:91:14:99:6b:ee:09:
82:df:da:8a:ae:fc:37:24:21:a2:79:d1:93:88:68:7c:59:94:
d7:12:24:cc:40:40:5a:79:c2:24:42:2d:8f:bb:43:56:e3:38:
01:b1:3b:fc:30:32:4e:14:a7:17:d2:01:49:91:75:6d:f7:77:
9e:37:39:7c:21:1c:ff:0d:7c:20:55:3f:2b:fb:51:ab:dc:ef:
4f:4e:37:51:34:23:4e:d8:20:88:70:c5:81:6e:3d:4c:b7:13:
de:f6:f6:df:7c:d3:48:06:ee:e8:3e:92:a0:21:5a:ac:91:d9:
59:93:b5:37:71:ef:8e:b1:37:5a:c5:77:79:5f:26:2c:cf:5a:
b5:50:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:32 2024 by rpki-client on console-fra.rpki-client.org