Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/V6aPf5N2e8mBrbMoaOSW-AVFAPo.roa
File: V6aPf5N2e8mBrbMoaOSW-AVFAPo.roa (raw, json)
Hash identifier: FqVv5DeHq/4PKnhUZ92wsrO9AMmMgdv9BeB70/d55bw=
Subject key identifier: 57:A6:8F:7F:93:76:7B:C9:81:AD:B3:28:68:E4:96:F8:05:45:00:FA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018BA9D56B86EABCA24F85933BB02444519A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/V6aPf5N2e8mBrbMoaOSW-AVFAPo.roa
Signing time: Tue 07 Nov 2023 12:50:18 +0000
ROA not before: Tue 07 Nov 2023 12:50:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216084
IP address blocks: 84.32.64.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:d5:6b:86:ea:bc:a2:4f:85:93:3b:b0:24:44:51:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 7 12:50:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57a68f7f93767bc981adb32868e496f8054500fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:da:7d:4e:2a:51:c1:91:d0:c0:29:5f:91:f1:
f2:04:9e:69:d3:b5:46:e0:72:1f:65:4c:e1:8e:8a:
5f:d8:36:75:c8:f4:aa:66:52:de:ac:d6:43:95:02:
7d:b0:5f:6d:d6:9a:32:6f:b0:a9:18:eb:5e:15:b6:
93:25:37:d4:ac:eb:2b:88:91:67:0a:70:a1:ae:ee:
6d:20:69:25:1d:ec:d3:27:1b:3d:a2:23:93:cf:db:
18:fb:0e:e4:fb:59:1f:89:fd:b6:22:27:a9:f2:d6:
a2:d1:94:09:b0:46:8f:00:e7:b4:0f:e5:cd:d3:69:
c8:e5:e0:fb:26:92:c6:64:87:0d:b8:85:17:02:14:
67:e6:7b:73:2c:9f:6a:3d:78:67:c3:10:0f:ba:57:
e0:c5:77:b2:60:6b:06:bf:bc:4c:2a:4c:22:36:7c:
f3:5f:40:4b:fc:54:71:67:92:35:d6:1a:20:1b:99:
6b:99:b6:b6:ee:20:c3:d1:af:be:c1:bf:f0:6d:e1:
4c:72:e5:05:42:27:ef:a4:c5:56:dc:9f:b7:28:d7:
bf:b6:2e:31:53:f7:2a:e1:d4:21:43:89:31:ce:6d:
75:4d:fd:3c:19:08:34:07:c8:e5:21:47:62:98:de:
f8:fb:11:b6:f6:c6:83:ed:28:f5:c6:d5:56:0c:5d:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:8F:7F:93:76:7B:C9:81:AD:B3:28:68:E4:96:F8:05:45:00:FA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/V6aPf5N2e8mBrbMoaOSW-AVFAPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.64.0/24
88.216.220.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:fc:77:b5:56:bf:72:a0:18:82:1f:8b:51:40:c7:c9:86:a3:
f5:38:3e:c7:f7:92:9c:63:b3:8c:28:41:92:f4:76:37:14:f2:
e5:d2:0c:8e:58:2c:1d:fb:1d:12:19:c5:58:ce:13:01:3c:a9:
9d:61:b4:85:31:ad:a7:0f:ce:76:c9:46:62:37:d7:7b:32:92:
b3:79:38:0c:03:3f:1f:da:93:09:f1:d2:2d:b1:0a:2c:71:17:
93:b9:b8:e3:dd:fc:04:48:f4:5f:6c:b3:c0:86:88:37:28:f6:
a7:53:24:e4:d4:60:95:b2:7c:61:50:29:a2:f5:12:f7:08:a7:
22:14:28:1b:cb:8c:ef:16:7d:af:63:40:b0:4e:4c:f8:b7:75:
5a:fc:b9:0a:a2:c3:41:bb:0b:01:88:a4:1c:5b:dd:4a:19:91:
f8:51:f2:b4:4f:bf:f9:73:51:49:b2:1b:93:20:2d:3d:85:00:
cd:54:21:3e:c9:fc:27:53:75:97:a1:70:cf:30:69:e4:23:2f:
b6:bd:2a:2c:1a:63:81:97:57:c3:f3:48:8b:45:91:d7:03:3b:
34:2a:29:78:cf:74:46:af:ba:b8:2a:87:b6:ae:37:4d:10:82:
7c:d0:57:81:90:39:ee:03:78:8e:73:e3:5a:d5:51:09:5f:42:
06:d4:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 11:51:56 2023 by rpki-client on console-ams.rpki-client.org