Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Yn8hzfWt_Z8JoEvrBwiRzLOkBKM.roa
File: Yn8hzfWt_Z8JoEvrBwiRzLOkBKM.roa (raw, json)
Hash identifier: uoXvhQ18KDd30Wc+Gk0LxKXWjPHe2BtNwRShyqDJ4jo=
Subject key identifier: 62:7F:21:CD:F5:AD:FD:9F:09:A0:4B:EB:07:08:91:CC:B3:A4:04:A3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01893EAAD7DDC80A9B41AAEAEB10735C8E3B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Yn8hzfWt_Z8JoEvrBwiRzLOkBKM.roa
Signing time: Mon 10 Jul 2023 07:18:51 +0000
ROA not before: Mon 10 Jul 2023 07:18:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 88.216.67.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 08:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:aa:d7:dd:c8:0a:9b:41:aa:ea:eb:10:73:5c:8e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 10 07:18:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=627f21cdf5adfd9f09a04beb070891ccb3a404a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:d2:19:a0:96:e4:fd:49:91:a7:13:f1:a8:
5b:ef:66:aa:70:15:ff:75:98:1e:cf:b6:7d:36:cf:
03:49:d8:2f:d0:f5:2e:82:f7:9f:a2:bd:84:df:ce:
11:45:e4:8d:c5:74:8d:6a:7e:39:f4:17:32:2b:8f:
82:57:f1:51:10:cf:f1:34:c0:cf:02:cb:f8:94:8c:
49:9f:ed:58:b9:5c:33:c8:ea:8d:c4:8d:fa:4f:1d:
4e:3c:4d:3a:f8:83:0d:87:37:fe:5a:11:92:12:7b:
ca:29:be:a9:cf:42:c9:76:87:9f:b2:d8:38:28:70:
de:a5:e8:9b:c5:cb:91:53:a2:04:96:0b:b4:78:7c:
71:a8:03:03:54:49:43:08:83:ca:a3:ba:94:6e:56:
0f:3a:59:86:9a:9f:32:fb:41:73:e2:fe:76:22:72:
c0:86:55:cb:f7:1d:ca:3b:8a:b8:43:92:b2:21:1b:
03:5b:ef:98:88:f1:e5:7f:0b:af:33:f0:58:6d:a5:
9f:b2:d0:0f:5e:d0:90:d1:40:3b:f8:16:1c:2f:23:
98:f0:13:46:69:53:1d:c7:23:08:2a:66:98:85:87:
88:de:e9:b6:19:e8:82:bc:91:0a:b2:5f:75:c0:6b:
4d:e7:8d:8e:ad:63:e0:b5:d4:35:5a:0a:c7:34:6d:
6d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7F:21:CD:F5:AD:FD:9F:09:A0:4B:EB:07:08:91:CC:B3:A4:04:A3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Yn8hzfWt_Z8JoEvrBwiRzLOkBKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.49.0/24
88.216.66.0/23
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d1:6c:93:0b:58:c3:a1:93:7c:f0:c5:cf:7d:5d:6c:fb:8c:
36:d8:7c:a3:ac:20:2f:2f:98:c8:8d:5e:c9:f0:b8:12:c8:2e:
da:51:2a:81:df:6f:8e:5d:1d:14:99:ea:72:27:82:46:f5:66:
05:e1:9a:d4:23:18:43:0f:b5:77:43:ec:9d:68:b1:55:0c:f9:
c9:f3:45:07:d0:b9:3f:3e:d1:6f:6e:db:23:be:70:54:1c:64:
ee:93:40:f1:23:14:7d:eb:b3:e6:2a:f8:4d:28:63:b9:84:43:
79:38:da:2d:4e:0f:e3:b8:cc:5e:ee:df:94:27:74:05:e9:f4:
64:87:28:77:22:06:7a:4e:c2:48:a9:82:36:3e:30:78:fc:c4:
9f:9b:fe:27:76:cc:97:3d:89:3e:8e:85:5f:57:4a:c0:ee:43:
c7:90:17:ea:68:4e:6f:23:e9:3b:a5:6d:55:f9:74:36:65:cd:
c9:4a:f6:d9:bd:28:3d:46:3e:c0:f5:e7:e8:6f:b3:a3:98:57:
bf:a9:98:ff:91:90:2b:78:b7:81:be:64:95:64:84:2f:8a:a0:
5d:ea:5e:1b:e7:92:64:df:c9:c1:68:49:ce:dc:22:68:e8:75:
62:69:48:cb:13:d1:44:2d:e4:b6:b7:5c:e5:7f:7a:44:26:a4:
d0:82:e9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org