Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/U93hmvWpo-_Aj90sQQEudDtGXls.roa
File: U93hmvWpo-_Aj90sQQEudDtGXls.roa (raw, json)
Hash identifier: agkXuqZn6JubjpBJh58qZCtxwrM+Fe+y7HRnJRByQBY=
Subject key identifier: 53:DD:E1:9A:F5:A9:A3:EF:C0:8F:DD:2C:41:01:2E:74:3B:46:5E:5B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188B14C7BB9F27AEF393AB34F694C3D7DD0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/U93hmvWpo-_Aj90sQQEudDtGXls.roa
Signing time: Mon 12 Jun 2023 20:29:19 +0000
ROA not before: Mon 12 Jun 2023 20:29:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 88.216.92.0/24 maxlen: 24
88.216.108.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jul 2023 18:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b1:4c:7b:b9:f2:7a:ef:39:3a:b3:4f:69:4c:3d:7d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 12 20:29:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53dde19af5a9a3efc08fdd2c41012e743b465e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:d7:97:fa:5d:29:49:37:b5:d0:34:c1:63:
fe:ae:f7:3d:ad:76:03:5c:03:5c:48:b8:40:c8:41:
05:ea:64:a9:ba:5d:7b:32:6f:df:8f:dc:62:f7:92:
f9:da:af:44:78:fe:a1:b7:cc:9a:f3:12:99:12:14:
5e:57:ff:1a:d3:33:e6:23:f0:d0:a1:0c:8c:77:f7:
25:fa:02:4e:2e:6c:67:0c:38:dd:fe:3c:ca:3b:bc:
e2:ba:81:b8:9a:0e:a3:5e:7d:f4:0a:39:3e:57:e1:
49:fd:8e:65:53:fe:97:31:21:55:d2:4e:d6:e2:e3:
e8:56:cc:9f:ed:f8:2d:9e:3d:86:8f:e5:3d:d5:e3:
e8:59:51:bd:b8:e5:5a:13:c0:fb:34:db:89:fc:4b:
7f:59:46:04:79:3f:98:b2:8b:af:12:30:fd:79:ce:
da:ce:06:53:62:41:f9:d8:0e:23:da:fd:54:79:df:
99:e6:0f:50:07:60:fa:01:9c:09:e6:0b:f4:e1:ee:
01:22:0b:23:4d:ab:c8:6b:f9:32:be:dd:26:65:cd:
ee:07:bc:94:fd:4a:0a:ab:44:1d:5f:5b:81:09:b9:
83:d4:03:03:8d:2c:77:2d:16:f1:fc:69:b6:46:a3:
77:4e:a1:7d:d6:39:6e:fa:f7:23:aa:48:ab:40:2e:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DD:E1:9A:F5:A9:A3:EF:C0:8F:DD:2C:41:01:2E:74:3B:46:5E:5B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/U93hmvWpo-_Aj90sQQEudDtGXls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.148.0/24
88.216.36.0/24
88.216.92.0/24
88.216.108.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d1:d8:7a:e7:29:8b:91:bb:9c:e3:9e:12:a4:3b:e9:d8:8b:
a7:3d:a8:f1:ee:f5:f4:a3:8b:6f:73:76:23:1c:44:76:f0:81:
2c:f3:c6:9e:4c:41:75:fa:8d:68:ff:35:58:14:e9:d5:11:db:
70:51:0f:bc:49:d0:2d:cd:e2:06:91:b3:f1:a0:99:8b:1f:e8:
5c:19:c1:b5:f0:d0:2c:e1:86:b2:74:9c:b9:30:25:80:1e:44:
75:9a:17:3b:b4:b4:cb:8e:c9:79:f4:fd:d0:81:6a:5f:47:f0:
e8:84:7b:2c:d9:a7:d7:ce:43:e5:3a:32:69:f7:d3:62:61:02:
7e:b6:6e:07:ac:fd:4f:45:e4:df:19:42:c3:e2:67:8c:b2:9b:
69:b9:7d:29:37:2a:78:a3:b6:39:ae:f4:54:41:5d:f7:3d:4e:
c4:fb:15:77:c5:5e:a4:2d:e4:a2:ee:c6:b8:6f:f8:72:b8:bc:
24:69:3f:50:48:3c:0a:d9:63:af:04:8b:9e:88:89:99:0b:a0:
6c:5a:b3:d1:1f:16:84:65:d9:af:c9:6d:f9:67:4f:e5:68:13:
08:d0:6c:a9:b4:72:e8:4f:b7:d1:fe:1b:aa:ea:93:06:a4:03:
b6:22:d9:3d:e0:55:0e:87:19:fc:9c:40:e9:a9:ab:08:7f:cf:
ab:46:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org