Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TP1sl2hKQ7MrAS1SONrFfViKtyQ.roa
File: TP1sl2hKQ7MrAS1SONrFfViKtyQ.roa (raw, json)
Hash identifier: 5LeL/2EJxtLr4sHP+lEDH8YgoozVoXr/9t06LrovoAg=
Subject key identifier: 4C:FD:6C:97:68:4A:43:B3:2B:01:2D:52:38:DA:C5:7D:58:8A:B7:24
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFC41054BA36C678C4BEC97E04FD71
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TP1sl2hKQ7MrAS1SONrFfViKtyQ.roa
Signing time: Sun 01 Jan 2023 18:54:50 +0000
ROA not before: Sun 01 Jan 2023 18:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 88.216.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:c4:10:54:ba:36:c6:78:c4:be:c9:7e:04:fd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cfd6c97684a43b32b012d5238dac57d588ab724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:f7:bb:01:22:56:81:a4:af:ac:c4:a2:da:
0b:87:73:c4:ba:fd:e3:43:a9:29:79:9b:22:67:52:
50:7f:13:6c:eb:c0:11:11:8d:29:24:cf:b3:99:10:
17:9e:c2:b9:22:f6:4b:89:f0:07:fd:99:80:0e:06:
0c:fa:08:32:38:89:2a:51:73:17:d3:dd:e5:da:7a:
e5:38:2f:6d:c9:e0:1c:7d:1b:8d:0a:20:2d:ab:cd:
fb:6d:78:5b:f0:16:f5:60:83:bb:51:af:62:42:18:
1c:ad:fc:15:48:ec:1b:c1:b2:68:51:7b:8f:16:84:
88:75:eb:37:76:b6:f5:1e:88:e5:f7:1a:8a:a3:99:
49:eb:f3:51:92:0b:24:25:4b:c7:08:ff:2d:91:75:
e6:d0:ae:ef:73:9e:b9:6e:91:4a:72:01:4b:d2:f3:
09:d2:5f:d9:a8:bb:d5:01:8b:57:24:49:45:36:90:
8e:f1:19:a2:e3:18:af:19:c1:d0:65:ef:65:cd:72:
5d:0e:25:73:ea:fa:55:17:b6:59:fd:2b:be:64:fc:
c7:c5:ef:bf:c5:c1:db:b4:17:4d:30:92:39:8e:ac:
c1:3b:e5:0a:4e:bf:6b:27:f2:70:fa:a6:85:4d:ce:
6f:9c:57:a0:72:b6:90:ce:1c:be:8a:a8:4d:48:67:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FD:6C:97:68:4A:43:B3:2B:01:2D:52:38:DA:C5:7D:58:8A:B7:24
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TP1sl2hKQ7MrAS1SONrFfViKtyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.135.0/24
Signature Algorithm: sha256WithRSAEncryption
17:8e:57:ff:90:ce:8d:97:3b:5f:b0:d3:96:15:7f:38:47:63:
51:95:4f:89:dd:f6:b6:67:1c:90:8a:dd:49:3a:20:37:17:e9:
ec:c1:b3:35:e0:c0:70:1f:fb:35:ea:8f:eb:69:77:d0:82:de:
24:ca:dd:89:d8:8d:47:95:bf:26:21:75:1f:42:a3:18:cb:e1:
13:70:c1:5f:8c:2a:26:67:a1:41:c6:7f:50:88:da:d4:ac:3f:
e8:ab:f8:3b:e4:d6:16:e1:6f:b3:d5:34:6b:3d:f4:1a:e0:23:
d0:67:4b:c0:e5:d8:8c:6d:38:27:65:ab:9b:26:5f:16:ce:5c:
6c:bb:f9:80:bd:b4:33:87:2b:db:b7:5e:21:fb:c7:06:09:e4:
66:a4:6d:74:8f:c0:59:bb:5a:e8:4e:85:c7:a7:53:d8:6b:9e:
ae:b6:44:6d:40:d5:d1:19:c3:c6:3d:54:90:98:92:62:d7:a7:
0b:4d:bd:21:44:b1:cc:9c:bf:97:22:e9:36:e3:65:8d:2e:6b:
ec:17:bd:79:ba:44:38:f4:0a:22:21:fd:6a:b7:4a:8d:5c:d0:
99:6e:91:40:f7:24:78:0f:49:92:4d:88:27:34:94:85:0c:a3:
59:f5:28:59:d6:97:b3:9a:fa:56:92:ba:25:c9:57:1f:55:ea:
c6:bf:a3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org