Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/S7kF_E0_As6t_Y8tvZBJAMk726I.roa
File: S7kF_E0_As6t_Y8tvZBJAMk726I.roa (raw, json)
Hash identifier: YAIXvJl+/DAYWKsje+tjKOaWPhpS3iHaN4/nfelW7P8=
Subject key identifier: 4B:B9:05:FC:4D:3F:02:CE:AD:FD:8F:2D:BD:90:49:00:C9:3B:DB:A2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018E374754D1ABB0CA976F00CC186C860684
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/S7kF_E0_As6t_Y8tvZBJAMk726I.roa
Signing time: Wed 13 Mar 2024 10:06:45 +0000
ROA not before: Wed 13 Mar 2024 10:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55081
IP address blocks: 88.216.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 10:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:47:54:d1:ab:b0:ca:97:6f:00:cc:18:6c:86:06:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 13 10:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bb905fc4d3f02ceadfd8f2dbd904900c93bdba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:67:1d:85:ba:e1:75:8c:30:f6:dc:01:a3:
2a:dd:ff:fe:11:a2:d4:53:cc:c8:34:d4:d3:ab:db:
b0:90:75:d4:92:9d:3e:e3:b8:3c:f2:6f:81:71:79:
55:74:4d:07:73:0e:9b:bc:bd:15:a2:c3:ab:14:64:
30:91:ca:0b:b1:fe:b5:6b:57:71:d0:a0:6e:35:3d:
68:5f:b5:8f:fd:03:97:2c:6c:e5:64:aa:7e:5d:5b:
71:00:9a:13:10:83:7a:c7:cf:75:ce:bb:24:3a:b1:
8a:08:f5:26:ce:16:23:7f:d6:af:c7:42:aa:1a:59:
99:8e:90:dd:6d:cc:37:51:ba:a8:34:07:cc:71:b4:
34:62:0c:11:cb:c8:1c:d3:8f:55:ab:fd:c9:46:c1:
c5:e4:b4:0d:24:18:38:ac:6d:53:86:fc:6d:58:d6:
0b:ba:41:97:6e:24:79:91:b3:be:00:ff:93:69:00:
bf:db:d0:30:04:43:56:0e:2b:ed:b7:fe:c5:37:56:
de:b6:bb:88:fc:53:d9:1b:ce:90:c0:07:1b:6c:d4:
bd:b5:02:a0:79:15:a6:6e:54:b1:c0:b6:b8:b5:3d:
26:18:6d:49:21:56:f6:09:32:f0:90:f8:78:a7:a5:
35:e3:56:96:d3:74:a8:b9:ba:f1:35:c3:ff:d8:cf:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B9:05:FC:4D:3F:02:CE:AD:FD:8F:2D:BD:90:49:00:C9:3B:DB:A2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/S7kF_E0_As6t_Y8tvZBJAMk726I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:11:89:50:24:62:d0:23:e5:d0:47:ef:6a:8d:f5:4b:f0:9b:
29:c8:9a:ec:f7:4d:0d:0b:20:8e:59:c4:2a:5d:cb:37:6f:6d:
a2:47:70:ae:f5:2f:25:59:11:9a:79:ca:1b:48:53:43:20:85:
75:3d:f6:3a:0a:33:fc:33:4b:c2:f2:57:73:e2:92:b7:5c:e7:
cc:18:e2:69:d6:ce:ee:2b:b7:54:9c:51:8c:e2:56:52:ea:86:
2e:71:82:07:47:e4:aa:ca:69:cc:58:bb:d9:0d:64:22:64:01:
19:78:72:33:7b:94:aa:80:3d:f1:1e:f9:15:46:f3:a7:44:60:
5c:39:81:15:ef:4d:f6:3a:5d:dd:63:ef:c0:23:b8:8b:7f:8d:
4a:c5:da:e2:6f:8a:06:5e:c9:c1:4c:6e:72:09:fa:8a:83:26:
e2:be:e2:8a:cb:ba:7b:43:cc:52:41:98:48:76:70:f1:ed:e8:
bc:16:b1:14:98:8d:74:c5:8c:82:5d:02:57:87:08:c5:70:ec:
33:12:a6:aa:bb:cd:f7:d2:a0:01:6d:30:8c:97:2f:1e:6a:e9:
8b:ac:01:89:45:19:1a:ff:cf:dd:59:bb:01:5e:d5:46:4c:d1:
58:19:a1:24:37:79:18:d8:73:40:77:e4:e1:93:80:96:37:49:
e9:9b:3f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org