Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_IOxRZRRZ-blMQxro3QbwVW0hy0.roa
File: _IOxRZRRZ-blMQxro3QbwVW0hy0.roa (raw, json)
Hash identifier: TcTdIT6WTAvsgWCAHP4c9bGVQBaBE18a97nBwF8EN7s=
Subject key identifier: FC:83:B1:45:94:51:67:E6:E5:31:0C:6B:A3:74:1B:C1:55:B4:87:2D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185F3F219659A5751D6753C9E9ADE09991B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_IOxRZRRZ-blMQxro3QbwVW0hy0.roa
Signing time: Fri 27 Jan 2023 15:56:47 +0000
ROA not before: Fri 27 Jan 2023 15:56:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 88.216.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 07:59:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:f2:19:65:9a:57:51:d6:75:3c:9e:9a:de:09:99:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 27 15:56:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc83b145945167e6e5310c6ba3741bc155b4872d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:06:75:2f:92:ba:38:f0:e3:a5:f1:60:a5:
25:cf:7a:39:16:e7:6b:4b:6e:73:75:3d:e8:2f:d8:
06:30:41:26:fb:28:eb:a9:fb:91:34:40:7d:fb:67:
df:e1:82:a1:51:b8:33:26:e2:bc:e2:85:ea:d0:14:
f9:c2:0a:d8:68:5c:5d:91:9e:7a:cc:eb:45:29:45:
f9:f0:91:2a:17:6d:e7:b0:e3:78:33:aa:e0:4e:29:
b9:6f:42:6b:cf:40:88:a4:07:09:45:c2:d7:5d:98:
c9:c4:ee:57:33:2f:be:a4:55:56:6f:92:0f:46:ec:
98:4b:50:9b:2f:99:94:6c:88:3e:a0:7e:4b:da:a5:
c8:c2:28:50:2a:28:35:53:7f:81:20:14:32:0c:6c:
a8:7c:a0:ea:94:20:3e:aa:c9:74:bd:b4:ee:f3:95:
81:ff:ef:94:51:56:2a:f5:9e:68:1f:46:95:57:3a:
ff:28:ad:4d:b8:54:c5:64:e6:eb:e1:bf:98:2d:a3:
c0:52:f0:3a:bd:c2:66:5c:51:28:33:7e:0e:fa:eb:
98:28:32:24:e4:ee:17:82:50:16:0b:6f:b3:17:57:
97:e0:05:07:24:bf:db:d5:e3:e8:91:5e:62:81:a5:
0f:ce:c9:fe:5d:e9:49:0d:f4:6b:15:46:0e:04:f3:
e6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:83:B1:45:94:51:67:E6:E5:31:0C:6B:A3:74:1B:C1:55:B4:87:2D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_IOxRZRRZ-blMQxro3QbwVW0hy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.224.0/22
Signature Algorithm: sha256WithRSAEncryption
54:ad:83:fe:de:d7:16:e0:31:eb:64:12:60:91:22:c0:30:f0:
5d:0a:e5:40:24:57:4c:cb:f2:17:4b:7e:de:b3:5d:0f:87:c7:
aa:9b:f9:d2:59:b0:f1:a1:ac:5f:b6:e0:c6:4c:7c:63:cf:ec:
8b:0d:fe:89:06:ad:c6:51:9a:7c:49:63:99:39:ec:f6:d4:e5:
39:fa:1e:68:f4:c0:8c:4c:ec:a3:93:29:c1:35:3e:73:8b:31:
78:13:49:46:ff:d9:a0:b8:43:0f:57:d9:df:91:f7:27:f2:a6:
be:3a:d8:a8:25:60:12:a0:46:90:74:62:e1:61:ab:a8:db:d0:
e3:f3:29:f9:cc:01:7c:05:75:50:1b:28:4b:5e:aa:f7:4b:96:
61:88:70:0b:cc:05:b3:44:32:f8:be:4c:70:fd:db:10:4d:aa:
29:f0:7d:ea:41:e5:26:6a:2c:80:bc:ac:84:5a:1c:bc:4f:0b:
a1:b7:91:85:fb:d5:74:55:27:40:34:b4:cb:74:e5:a4:14:a7:
b2:77:a1:4f:fc:6f:93:a3:04:4a:d0:ba:0d:90:0b:c4:0e:79:
7f:96:04:91:89:bf:53:2f:75:33:5d:e3:3e:57:db:0e:e0:52:
40:a1:31:ab:b6:18:89:c5:78:63:62:b1:00:9b:61:69:4c:8a:
25:5d:75:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org