Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YpO9zoablnhDzwNh0Gt5VRpymz4.roa
File: YpO9zoablnhDzwNh0Gt5VRpymz4.roa (raw, json)
Hash identifier: in6PY3gpEV+yB6gVd7s6R6y1howIV8BBFELfjHhkU6k=
Subject key identifier: 62:93:BD:CE:86:9B:96:78:43:CF:03:61:D0:6B:79:55:1A:72:9B:3E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188A03797E1E9F72C369CECD66AFBFB2EEB
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YpO9zoablnhDzwNh0Gt5VRpymz4.roa
Signing time: Fri 09 Jun 2023 12:52:57 +0000
ROA not before: Fri 09 Jun 2023 12:52:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 88.216.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 20:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:37:97:e1:e9:f7:2c:36:9c:ec:d6:6a:fb:fb:2e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 9 12:52:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6293bdce869b967843cf0361d06b79551a729b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:26:bd:90:e5:c6:2e:6d:a8:56:fc:ef:99:ac:
b7:2d:1d:80:5b:80:47:e1:01:60:7f:f1:11:c0:18:
4d:d6:25:60:45:42:d1:1a:cf:aa:11:ee:db:a8:a8:
4b:b7:4d:a8:b7:38:33:e9:80:fc:a5:ac:37:98:e1:
15:da:57:b1:8f:a5:72:43:16:fc:9d:59:d9:27:54:
d6:7f:f7:e8:f7:4c:9f:2e:b5:92:7b:a4:89:e7:f2:
d9:1f:32:b2:81:85:f2:61:99:29:ce:8a:ff:d1:80:
c1:b7:02:8a:4c:ee:de:e0:93:a0:51:a5:c2:ee:d5:
ad:9a:7b:8f:89:d2:ee:57:44:6a:dd:dd:0b:f0:ed:
90:7d:b5:a9:d6:d4:4e:02:3b:93:a3:bd:0c:5c:ed:
cf:96:af:75:71:3d:41:c8:88:50:53:25:8c:09:b4:
3d:1d:30:3a:4c:e9:40:1d:fb:71:05:db:a8:26:4f:
75:de:e8:0a:6b:20:03:e6:75:04:07:1a:0a:d9:cb:
78:7d:7b:69:50:55:dd:3c:d4:8e:de:de:84:0a:f1:
0f:1e:cb:ae:10:7f:f4:19:bb:14:17:04:7d:54:ac:
54:57:c4:46:c5:f0:d4:c7:84:c0:0c:30:97:8a:f9:
a2:fb:9b:2d:b3:f3:da:59:e5:da:11:8f:f1:93:16:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:93:BD:CE:86:9B:96:78:43:CF:03:61:D0:6B:79:55:1A:72:9B:3E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YpO9zoablnhDzwNh0Gt5VRpymz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.132.0/24
Signature Algorithm: sha256WithRSAEncryption
84:72:ae:24:f9:d5:07:47:e4:b9:4b:f2:02:b1:7a:79:30:b8:
50:35:58:d6:4d:e2:4a:1f:4b:61:a9:9a:3b:c8:06:26:90:62:
5f:36:9f:57:d5:a5:54:46:51:85:dd:39:28:45:2a:d9:8e:0c:
67:b8:ae:73:16:2f:9b:e8:8f:d6:d2:12:80:44:3e:21:97:ec:
58:f2:31:61:71:d9:18:a6:fc:c6:ba:aa:b1:b2:94:8e:6e:a8:
4b:ab:48:0b:70:bc:5b:2d:48:c2:eb:d9:0d:50:61:d8:6a:69:
34:d3:10:fe:77:14:6a:35:a7:85:b7:63:c8:93:47:fd:19:2a:
fa:a8:01:b8:75:f1:0d:1b:74:85:33:bd:7b:ed:c3:03:6f:16:
0a:32:3b:9c:f6:7d:48:9a:ad:69:4b:3b:b9:7e:36:50:cf:ae:
98:c2:15:aa:09:6a:0f:cb:aa:bd:14:ea:47:15:92:ac:42:a1:
22:42:cb:66:64:3b:6d:b9:5e:1f:74:42:e9:72:63:f9:c6:c5:
2f:fe:25:d3:d1:5e:85:3c:af:fa:4d:7a:1f:5e:4e:d6:db:21:
c4:ca:b9:59:75:fe:f7:ce:65:aa:8b:a1:95:75:7d:da:ed:9e:
be:c4:e0:c5:33:b4:4c:11:a3:44:df:b2:7e:11:79:2a:e4:14:
0d:60:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org