Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TKPQa-lxQ0DL3HDeC-afQtRvvV4.roa
File: TKPQa-lxQ0DL3HDeC-afQtRvvV4.roa (raw, json)
Hash identifier: xOZzzi9cvumffPOeNY0FYHqAFJSWB9t+A3KheJUmYFI=
Subject key identifier: 4C:A3:D0:6B:E9:71:43:40:CB:DC:70:DE:0B:E6:9F:42:D4:6F:BD:5E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC501457B7D90A4C99E9A83DFA8628B65
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TKPQa-lxQ0DL3HDeC-afQtRvvV4.roa
Signing time: Mon 01 Jan 2024 12:30:43 +0000
ROA not before: Mon 01 Jan 2024 12:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60099
IP address blocks: 88.216.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 18:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:45:7b:7d:90:a4:c9:9e:9a:83:df:a8:62:8b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ca3d06be9714340cbdc70de0be69f42d46fbd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:67:a7:21:a2:8a:f3:52:0d:0d:b3:ac:02:
45:d8:b7:97:d5:a2:64:32:1c:80:72:cf:61:44:18:
86:d8:82:4e:21:9d:49:44:77:40:21:25:27:28:4c:
44:41:fe:a3:af:54:fc:33:3d:df:c7:70:f4:90:61:
0a:58:a9:f9:62:0d:68:b3:c9:2f:b8:af:90:6b:bb:
2d:11:7f:01:d4:04:3a:92:f2:70:a0:94:a4:fa:86:
06:9b:2f:98:ea:c0:d8:8b:1b:eb:37:9f:43:c0:0a:
ff:4d:78:48:6f:0c:82:1a:2c:dd:9b:03:c9:83:c0:
8c:61:e7:92:af:f9:56:f3:39:75:b6:a8:84:f4:e3:
c8:88:97:57:e7:22:98:6c:bf:3d:16:ec:45:33:71:
ae:1d:65:61:16:c3:15:49:dc:a1:a3:a4:b1:7f:18:
03:7f:5f:8e:66:c4:64:37:f1:c0:74:11:e8:d8:18:
a2:ac:4a:e5:7e:c1:02:ce:ac:68:f1:1d:9e:35:b9:
9f:41:ad:a1:1d:9e:cb:71:a4:34:cc:09:30:1c:52:
cb:0a:bb:47:e1:1f:d6:ff:08:bd:7a:2b:aa:9b:ed:
5b:00:26:7d:5d:c1:e6:07:fc:27:5d:b7:07:79:71:
ae:1f:c1:57:71:f5:e0:96:1e:e6:43:e0:8c:c1:0d:
3a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A3:D0:6B:E9:71:43:40:CB:DC:70:DE:0B:E6:9F:42:D4:6F:BD:5E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TKPQa-lxQ0DL3HDeC-afQtRvvV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.4.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:f4:15:42:d0:27:fc:2b:e9:68:0d:65:69:fb:31:71:89:4a:
36:8b:0e:65:e5:88:62:a4:5f:42:28:b6:6a:38:0b:90:48:1f:
e8:29:8e:34:bd:94:c5:a6:2e:8b:58:39:22:57:bc:86:4e:73:
84:cd:d6:fc:2b:a3:4d:06:e9:bf:fe:d0:2c:48:19:7d:9a:b1:
24:4d:c4:cc:56:a7:82:ea:ac:27:5c:24:96:0b:80:bf:12:9c:
8c:25:bc:44:9f:bc:0e:05:4f:cf:6a:cb:54:d1:1b:e9:66:ca:
f8:50:dd:f0:ab:8b:ee:2f:28:99:02:80:be:64:a1:fd:b7:f3:
4b:a2:42:e7:74:11:b0:d4:67:d3:4b:bc:61:6f:95:aa:21:a4:
c1:af:f7:44:9d:eb:42:83:27:59:55:70:f4:ea:69:ae:0a:ad:
fc:d1:fe:ee:ae:f5:b8:85:7d:82:bb:19:c8:0d:06:d1:38:70:
64:56:91:65:92:a3:ce:c4:3f:76:a1:28:41:bd:6a:87:97:a4:
80:2c:85:35:31:ee:47:15:90:a3:b0:b4:7b:6e:08:b4:34:5e:
e4:bf:01:c2:a7:49:e4:5c:77:07:0a:f6:66:e5:88:95:2c:90:
95:7a:6b:9b:06:93:f8:d9:82:65:99:d6:84:79:ff:d5:f9:de:
e6:8d:b4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org