Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/V44CllMO3UyiDDOg9Hx8OGj3tY0.roa
File: V44CllMO3UyiDDOg9Hx8OGj3tY0.roa (raw, json)
Hash identifier: OPYHFXNdVllnfAJpoPpaAE22Vm3AU47W9tc18QZk3MA=
Subject key identifier: 57:8E:02:96:53:0E:DD:4C:A2:0C:33:A0:F4:7C:7C:38:68:F7:B5:8D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018C7BAE8E1F3532E6D3BACBB7F324BCAA46
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/V44CllMO3UyiDDOg9Hx8OGj3tY0.roa
Signing time: Mon 18 Dec 2023 06:48:06 +0000
ROA not before: Mon 18 Dec 2023 06:48:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9087
IP address blocks: 88.216.182.0/23 maxlen: 23
84.32.208.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:ae:8e:1f:35:32:e6:d3:ba:cb:b7:f3:24:bc:aa:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 18 06:48:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=578e0296530edd4ca20c33a0f47c7c3868f7b58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:57:f0:12:62:52:ad:d9:88:74:e8:50:ca:
e9:bb:34:c1:ef:72:db:7a:3c:0c:2b:b1:bc:91:13:
3a:b6:bf:81:47:ea:49:bd:50:6d:19:2e:7a:65:50:
3a:eb:f9:8e:25:1e:76:b8:65:a7:2f:02:06:00:0b:
d4:59:57:6a:92:f0:76:8a:39:da:28:ba:f1:67:77:
04:82:fd:b7:6e:a3:00:d5:d3:8c:d2:c0:4e:39:ce:
8b:52:b1:a0:63:f1:d3:52:8e:32:f6:62:68:d8:1f:
f8:23:d7:bc:6c:0d:ec:59:90:39:91:31:77:cc:c6:
67:e1:91:0c:4d:69:5a:ff:69:d9:dc:80:45:32:91:
91:21:2f:30:ba:2f:e6:74:a7:58:ba:84:10:3c:99:
7d:a3:d3:c9:09:7f:87:50:2a:5e:ca:3d:8d:64:e0:
32:aa:c8:1c:ac:00:a3:55:e8:c8:43:05:56:39:e9:
25:16:dd:13:8c:cc:61:92:8b:42:eb:b7:1c:ab:7c:
51:7b:02:ea:bc:91:66:be:f2:88:4d:f4:bc:c1:f0:
db:27:38:d4:f7:ee:90:88:0c:51:e1:02:f7:9c:dc:
2b:d9:59:2d:0a:5f:22:af:99:8d:82:c7:73:8b:88:
62:54:c4:bd:47:b0:5b:d9:2c:1d:3a:99:c6:bc:36:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:02:96:53:0E:DD:4C:A2:0C:33:A0:F4:7C:7C:38:68:F7:B5:8D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/V44CllMO3UyiDDOg9Hx8OGj3tY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.208.0/23
88.216.182.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:4b:6b:12:09:32:7a:8a:54:7e:85:9c:eb:e4:c2:4b:2a:e9:
34:42:5b:97:9c:c8:78:b9:35:55:75:ee:f7:de:4e:cc:3b:47:
1f:ef:84:6a:66:01:94:ea:bd:8e:c0:1c:71:f7:8d:9b:82:6b:
d7:2f:57:e1:fd:87:07:3e:a9:78:65:3f:89:54:6b:f9:47:91:
07:db:86:8d:f0:b1:12:5c:54:5b:8c:71:6e:80:41:8e:39:39:
83:3d:18:de:7b:96:66:f4:ac:82:43:f5:1c:10:5e:85:82:f1:
0d:16:74:37:5f:ed:9b:21:9a:9f:a0:5c:be:8c:bc:45:36:4c:
51:11:1c:cc:61:d6:56:1c:6e:cd:1e:d7:12:d1:9b:42:17:a7:
60:ef:f9:28:48:f7:b9:f8:56:71:f6:18:99:e7:c6:c6:5f:d4:
9e:a8:0f:7d:a9:49:08:6c:b7:4e:c8:5b:99:b8:62:90:bf:88:
cd:0c:1e:43:47:05:67:ad:63:5b:e6:21:06:63:aa:77:3b:2f:
dc:d0:31:1f:06:c3:97:ff:22:4d:d2:61:36:72:99:85:e6:df:
ab:12:79:92:ab:27:19:de:e2:e6:94:61:1d:42:73:37:57:d1:
2b:e5:d0:ed:80:18:c0:8b:77:08:95:d8:c5:5b:0a:d2:75:8f:
f2:cb:62:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 09:24:12 2023 by rpki-client on console-fra.rpki-client.org