Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WK7rDeI3TLJfCO8tg7gukiazE7M.roa
File: WK7rDeI3TLJfCO8tg7gukiazE7M.roa (raw, json)
Hash identifier: HUtpX9X02cvjrfhJUEob8cdfqKYEAITF6EybR8+UfFQ=
Subject key identifier: 58:AE:EB:0D:E2:37:4C:B2:5F:08:EF:2D:83:B8:2E:92:26:B3:13:B3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018EF65D7E191B02CBE0C6A9FA9E34E4B4CD
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WK7rDeI3TLJfCO8tg7gukiazE7M.roa
Signing time: Fri 19 Apr 2024 12:38:26 +0000
ROA not before: Fri 19 Apr 2024 12:38:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47838
IP address blocks: 88.216.8.0/21 maxlen: 24
88.216.72.0/22 maxlen: 24
88.216.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:5d:7e:19:1b:02:cb:e0:c6:a9:fa:9e:34:e4:b4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 19 12:38:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58aeeb0de2374cb25f08ef2d83b82e9226b313b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:fa:e4:33:12:46:5a:7a:92:4b:b9:22:5a:
56:52:95:d5:bd:97:f9:fd:d9:e1:12:fa:a1:8b:0c:
b0:f6:c6:bf:75:64:1d:5a:d9:d1:ae:c8:69:71:05:
60:a7:36:b0:80:67:29:89:08:f3:55:20:3a:23:f1:
af:f4:e9:5c:00:91:9e:d1:cb:8d:21:f2:01:4a:73:
70:5a:ba:fc:b4:67:93:b7:fb:8e:93:70:4a:4e:bb:
9f:3d:e6:93:32:d1:58:d7:b1:07:33:33:19:34:64:
37:f9:e0:eb:f3:38:e8:3a:52:f1:78:80:92:6c:36:
e7:a1:af:a7:b6:72:01:56:5f:63:cf:75:c9:3f:5a:
b9:b4:b8:ae:e0:49:1e:ac:5e:06:ab:a8:9d:7e:bc:
a4:f9:cf:cf:fa:db:3f:fb:ab:9b:0e:82:33:ec:39:
55:7d:98:ed:c0:19:75:1d:b2:1e:a6:36:43:1c:a3:
a4:b9:68:2f:71:76:25:d7:e7:d4:a3:e1:3c:e4:8f:
cc:f0:51:ae:43:85:52:89:b7:4c:97:44:80:aa:12:
09:eb:d2:5d:61:58:d1:2b:a8:f1:68:14:43:43:a2:
36:77:37:33:c3:36:70:65:74:80:26:33:47:f9:6c:
f4:de:4e:d9:e9:56:3b:05:1d:62:15:af:ad:e9:45:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AE:EB:0D:E2:37:4C:B2:5F:08:EF:2D:83:B8:2E:92:26:B3:13:B3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WK7rDeI3TLJfCO8tg7gukiazE7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.8.0/21
88.216.72.0/22
88.216.192.0/22
Signature Algorithm: sha256WithRSAEncryption
23:95:f5:77:61:f9:e9:2f:98:c4:e8:84:89:f9:ed:f2:df:f9:
be:42:9e:0c:52:b8:dc:03:7c:aa:88:25:ed:60:74:2a:86:82:
28:bf:fe:62:1a:a0:22:31:b7:72:77:8b:b3:9d:25:41:7b:fe:
e6:f7:60:55:26:ce:ad:5e:4b:f0:f6:33:8c:53:50:97:d1:13:
c4:76:a7:e9:5f:c9:26:cd:04:c0:00:92:54:1f:fc:9c:86:dc:
a3:43:53:d3:8e:72:a4:4b:f6:71:c7:4c:5b:b7:84:20:ce:7a:
e5:ef:8b:56:ad:20:35:ea:ed:cc:44:55:35:c7:fa:95:7b:02:
e3:e5:38:aa:23:49:73:a9:80:dd:c1:49:ba:1a:4a:19:e2:1d:
c9:3f:20:55:21:ef:19:76:78:01:9c:cf:25:0f:f6:c9:8c:b1:
74:bf:09:51:b5:bf:2e:be:4a:7e:fa:b7:7c:18:c1:b9:9b:50:
c2:c0:37:af:a0:6d:95:51:a8:83:75:b3:de:85:a6:db:dd:13:
b3:7f:f2:49:2e:2c:e7:5e:19:80:b2:b0:03:68:ba:43:7f:da:
b5:31:57:a1:e0:de:de:c4:47:30:cc:22:7b:a0:3d:30:b0:fe:
4d:e1:19:f1:37:65:c4:29:f7:24:f7:13:14:35:91:51:8b:03:
8c:a2:d2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:58 2025 by rpki-client