Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_y8nMC_wHBdzgZpCf4s9mbHvbLk.roa
File: _y8nMC_wHBdzgZpCf4s9mbHvbLk.roa (raw, json)
Hash identifier: 3rUpW2fOKfFpn1f6UnPxuD4U8CDbRSSjwdSYo4jNsyA=
Subject key identifier: FF:2F:27:30:2F:F0:1C:17:73:81:9A:42:7F:8B:3D:99:B1:EF:6C:B9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018AD147A2381590B685AFE51E646E705F1A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_y8nMC_wHBdzgZpCf4s9mbHvbLk.roa
Signing time: Tue 26 Sep 2023 11:37:27 +0000
ROA not before: Tue 26 Sep 2023 11:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211370
IP address blocks: 88.216.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Sep 2023 06:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:47:a2:38:15:90:b6:85:af:e5:1e:64:6e:70:5f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 26 11:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff2f27302ff01c1773819a427f8b3d99b1ef6cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:b7:44:43:da:29:6e:21:77:e8:a3:cf:d9:
81:2b:28:e1:ce:7d:10:6f:e2:b5:ec:19:0f:cd:b1:
8f:0c:39:94:3c:c7:0d:0b:1a:5c:dc:5c:d2:d4:19:
c6:e9:7c:77:82:e5:77:ef:6c:89:2e:9c:aa:d1:8d:
32:ca:51:44:18:30:12:09:9c:b7:e6:75:49:30:e8:
c1:d3:ad:ed:04:e1:a4:f2:bd:1e:39:0d:ee:9d:86:
3e:f6:70:10:fb:19:64:50:c6:0c:f6:d9:b9:5f:b7:
14:59:30:b2:76:d8:f2:b7:2c:ca:c0:05:5a:46:71:
e0:12:04:f3:8b:5a:d9:c2:0f:a8:7a:83:01:86:bc:
38:9d:8c:ed:3f:60:f2:e4:b1:e2:1d:d3:95:10:02:
ff:ce:e9:a8:a9:6a:57:47:7d:64:cb:d8:27:f2:b2:
48:dc:63:9f:ee:2b:bb:d4:50:c4:b1:43:4b:10:e2:
80:01:eb:30:c9:3f:1d:3d:ad:f1:9b:7c:e5:57:b7:
95:33:e1:44:49:b5:b5:8a:ea:0f:34:5e:4b:06:89:
f2:7a:2c:77:ff:5c:17:32:ef:6d:e3:41:10:e4:44:
7a:b7:37:22:9e:05:bb:be:fa:fb:61:74:e4:44:f3:
01:b4:ad:36:3c:6d:55:9b:2b:d3:dd:2d:18:f7:4d:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2F:27:30:2F:F0:1C:17:73:81:9A:42:7F:8B:3D:99:B1:EF:6C:B9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_y8nMC_wHBdzgZpCf4s9mbHvbLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.43.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e6:ec:c6:e6:cb:f1:18:ea:50:70:b6:c3:38:14:9f:ba:c6:
17:26:d6:9e:ad:a1:9a:6a:ac:73:c9:ea:90:d8:c0:58:2d:8f:
60:ed:8d:57:32:d8:e8:eb:cb:35:04:66:b8:37:32:72:89:10:
6d:7d:b9:52:b6:ce:6c:1d:90:fb:60:79:71:2f:86:53:0d:65:
a7:d0:f4:1d:57:47:48:a5:80:75:d1:38:5d:bc:39:ec:6c:3f:
ca:0d:d2:91:81:ef:49:38:80:b1:05:a2:27:79:d8:45:2b:c1:
ef:5b:d1:37:e5:ce:c2:40:24:24:40:91:42:7b:23:77:52:03:
40:6d:d4:e0:37:d6:32:c6:a0:ef:19:c3:e2:0a:aa:48:0e:a1:
b1:29:0e:31:98:2c:70:04:d9:cf:65:82:7e:41:87:52:2d:6e:
2c:4b:30:25:59:b0:a1:06:a8:58:09:cc:82:81:6c:4f:c9:9c:
23:93:1c:d3:e7:94:c6:ad:f1:bb:5e:6a:94:22:56:0f:83:e8:
19:1d:ba:d1:72:4e:c3:26:55:1d:82:41:30:12:f6:b5:08:b0:
ef:cd:08:dc:54:b7:3f:c5:9a:ee:56:79:6d:e6:8f:76:6a:a7:
66:37:57:73:ac:d1:f2:48:10:ec:06:78:79:5a:f6:cf:bd:29:
51:f7:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org