Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aOHTnqnFfBl3PWzM1zh7dvGYrME.roa
File: aOHTnqnFfBl3PWzM1zh7dvGYrME.roa (raw, json)
Hash identifier: cAoRCPtbItxt65r1VuRRw7vQ2IBn8xGzX2fC4/fx3ug=
Subject key identifier: 68:E1:D3:9E:A9:C5:7C:19:77:3D:6C:CC:D7:38:7B:76:F1:98:AC:C1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01863A080025617A11EC0DDEE8E87B45A6D4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aOHTnqnFfBl3PWzM1zh7dvGYrME.roa
Signing time: Fri 10 Feb 2023 06:34:08 +0000
ROA not before: Fri 10 Feb 2023 06:34:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 88.216.90.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Mar 2023 07:08:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:08:00:25:61:7a:11:ec:0d:de:e8:e8:7b:45:a6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 10 06:34:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68e1d39ea9c57c19773d6cccd7387b76f198acc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:9f:d1:89:07:e2:96:8f:69:bd:87:8e:b3:
f0:eb:52:71:6f:b4:57:b5:7b:2a:de:e0:2e:65:8a:
46:e9:fb:15:af:cc:26:13:9f:6a:a6:b4:cd:d6:79:
82:61:83:6a:f3:72:bc:e5:aa:03:4d:0a:e8:1d:84:
66:3a:4b:6b:2a:16:75:3d:3f:f6:e7:67:5b:67:11:
99:09:de:4b:bc:e7:ce:8c:bb:89:ec:6a:25:24:08:
55:b3:d5:64:a0:4f:ba:f2:4a:43:53:ce:bd:d4:56:
e7:11:5b:40:af:0e:05:26:62:af:b8:50:08:6c:ac:
7e:3e:6b:fe:d5:68:ae:1e:ee:33:c4:ac:27:65:cd:
17:e6:a6:8e:a5:f7:af:7c:8b:ab:1e:f8:a2:0e:2b:
ef:51:34:cf:57:7c:88:c1:fa:36:e0:c6:fe:89:f5:
10:12:83:a9:2a:59:b0:9e:1a:26:71:ed:ed:ac:c8:
e1:5a:d2:8c:a0:77:77:23:15:0b:95:91:20:71:66:
b7:d0:f0:39:06:9e:b2:be:69:e1:d4:9d:c5:ea:e5:
87:1f:40:42:7d:5b:b4:52:b7:a7:c2:30:09:0b:1b:
a0:f7:f3:97:a9:3d:3f:89:13:13:b7:5a:0e:15:fe:
df:2f:fe:19:86:d7:ae:15:e4:ec:52:78:2b:de:93:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:D3:9E:A9:C5:7C:19:77:3D:6C:CC:D7:38:7B:76:F1:98:AC:C1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aOHTnqnFfBl3PWzM1zh7dvGYrME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.90.0/23
Signature Algorithm: sha256WithRSAEncryption
06:5a:3a:da:ee:76:3e:69:ac:ca:4e:1c:21:c8:b1:cd:57:3a:
f7:72:97:05:76:79:7f:83:66:f5:4f:e5:99:55:9b:36:b0:0f:
46:ed:2b:07:4f:e0:32:33:17:5b:86:2c:7b:38:6f:96:0f:69:
5a:17:d9:2a:c5:b3:8a:da:1f:a2:63:a5:72:59:e6:4d:c3:5a:
8f:c6:9e:70:c3:2f:e8:e5:cc:43:7a:c9:71:e7:db:00:77:d1:
48:88:84:13:35:5f:08:cc:d2:ed:3b:33:f9:97:ad:d2:60:b4:
37:24:f6:f3:c0:96:04:d1:0d:12:21:83:a8:59:d3:23:e9:6a:
f4:5a:fe:5e:9c:86:4a:4d:97:8b:e8:06:0c:d0:6c:59:84:48:
1c:dc:60:05:14:99:91:e7:9b:34:4e:9a:0c:a8:83:c6:cc:e3:
de:04:a9:8d:d3:fa:98:f0:ae:af:6f:46:55:7c:fe:a2:2b:e3:
ca:2b:85:77:4d:3b:0c:a1:2f:dc:dc:09:e5:c1:65:24:b9:b0:
66:b9:0a:d5:ca:dc:00:9c:71:0f:20:f5:9a:b8:49:be:75:8b:
f0:cc:a8:66:67:53:45:05:e4:a8:f5:a1:dd:8a:7a:11:38:9a:
7d:b9:11:e2:13:8e:c4:51:82:91:ee:ed:7a:ea:3e:d1:34:41:
31:7a:58:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org