Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/S8CSXc-yDz_2bkK-6cS7-MJKK5w.roa
File: S8CSXc-yDz_2bkK-6cS7-MJKK5w.roa (raw, json)
Hash identifier: K3WA5ZrFZSEdEmMyVFMe9KtjnGQwAtcUiWtOmZKkLQg=
Subject key identifier: 4B:C0:92:5D:CF:B2:0F:3F:F6:6E:42:BE:E9:C4:BB:F8:C2:4A:2B:9C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01894B5112AF6317FCF69885871A5EA53D82
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/S8CSXc-yDz_2bkK-6cS7-MJKK5w.roa
Signing time: Wed 12 Jul 2023 18:15:51 +0000
ROA not before: Wed 12 Jul 2023 18:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213305
IP address blocks: 84.32.76.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 05:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:51:12:af:63:17:fc:f6:98:85:87:1a:5e:a5:3d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 12 18:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bc0925dcfb20f3ff66e42bee9c4bbf8c24a2b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:bf:b9:b4:b2:30:66:6d:8d:98:41:b7:ac:
a0:ee:7d:42:0a:3d:cf:33:f6:ab:3e:b6:f4:95:2a:
b1:13:ac:89:e4:75:10:39:de:9e:a0:e0:a6:73:f8:
8a:5c:f7:67:9a:da:7e:29:a0:27:94:63:5b:41:03:
1e:2f:60:6b:8c:09:45:b0:08:cb:7c:34:58:c2:12:
60:93:7d:36:48:4a:89:f3:25:3b:87:e1:c0:dd:d0:
8e:30:bc:17:b0:47:de:ab:2b:25:a7:2e:07:59:a0:
71:28:26:9d:81:ee:37:38:94:21:bf:6f:2e:ac:8c:
46:63:95:01:cc:77:57:d9:00:46:61:a3:44:cd:9a:
7d:06:66:6c:0d:a6:97:c1:bd:ab:81:2d:ad:19:72:
ce:37:37:79:98:dc:07:30:ce:fe:37:fa:54:83:0d:
78:fe:4d:41:67:02:f1:e4:fb:83:2f:1d:d9:58:bd:
c6:3a:e7:c7:29:d1:8b:88:da:b4:a2:38:f8:a4:5b:
f3:06:44:f9:9e:93:85:d1:12:23:00:ee:c4:f4:59:
91:9b:97:14:93:5d:ca:7a:2f:5f:d1:7b:07:df:99:
a9:0f:55:63:2d:7c:68:8f:db:5f:3b:6f:db:f9:12:
fd:4d:aa:a4:fa:02:18:49:85:aa:64:70:ac:16:66:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C0:92:5D:CF:B2:0F:3F:F6:6E:42:BE:E9:C4:BB:F8:C2:4A:2B:9C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/S8CSXc-yDz_2bkK-6cS7-MJKK5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.76.0/24
84.32.211.0/24
88.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b7:1a:d3:a8:ca:65:fe:c4:71:79:c2:85:b1:1e:98:88:cd:
1f:92:47:54:b3:64:ae:44:81:8c:f0:ff:d7:5e:d2:b5:65:39:
ce:74:c9:d2:85:13:84:05:7f:89:da:a7:8f:9e:13:97:15:85:
6b:61:31:aa:2c:0c:28:98:22:99:1d:ed:7c:8a:74:e0:be:e8:
66:05:48:1a:03:d6:84:87:86:7d:92:15:14:26:3a:c3:5f:81:
bb:bd:ae:d7:62:f1:60:14:94:ba:9b:9b:b8:af:a3:b5:aa:83:
81:5b:8a:e9:89:ca:73:cb:91:28:c5:cf:b2:b2:26:29:0c:69:
cc:87:e5:01:69:bc:b1:20:bb:47:be:13:ab:3f:77:e7:d2:48:
e3:22:4c:f3:35:ea:93:85:86:00:f2:f6:2b:01:70:ed:5a:66:
75:53:fe:91:0c:91:02:47:4e:c6:6d:9e:63:18:03:e7:d2:f6:
99:61:df:b0:8c:0f:54:45:3d:d1:35:79:18:9a:6f:dd:44:ec:
ee:b5:55:40:41:15:ad:ea:bc:4b:e2:3f:9b:0d:9c:1e:c1:4a:
d3:86:12:2a:e9:7f:9c:0b:5a:f2:66:52:fe:a8:29:a4:55:cf:
67:b0:2e:57:58:6a:95:95:5e:39:b8:a7:2d:34:2b:56:df:3c:
e1:af:1f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org