Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/akoKSaWzViNTxbiDcawOowbkQLI.roa
File: akoKSaWzViNTxbiDcawOowbkQLI.roa (raw, json)
Hash identifier: 6mqZH5DpeCLJVwaCGT5rdj1UDPGwMd5YqFYNXzOtNJM=
Subject key identifier: 6A:4A:0A:49:A5:B3:56:23:53:C5:B8:83:71:AC:0E:A3:06:E4:40:B2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185B0D2450290C08CF7DDDF90C6E4322CA9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/akoKSaWzViNTxbiDcawOowbkQLI.roa
Signing time: Sat 14 Jan 2023 15:07:28 +0000
ROA not before: Sat 14 Jan 2023 15:07:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 88.216.16.0/24 maxlen: 24
84.32.27.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b0:d2:45:02:90:c0:8c:f7:dd:df:90:c6:e4:32:2c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 14 15:07:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a4a0a49a5b3562353c5b88371ac0ea306e440b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:55:3f:02:25:c0:ef:81:97:f5:aa:29:5b:
8a:8c:ab:d2:70:7c:45:94:56:7b:a9:be:ce:e8:be:
6c:db:7a:76:c3:52:48:8a:49:d4:fb:9e:e1:6c:4c:
77:07:c0:ba:86:1e:9a:00:c9:97:be:81:68:20:da:
a9:42:18:3c:0f:c0:84:4a:26:49:e7:b2:ec:f9:38:
9d:70:d3:7d:f4:83:53:6f:90:f5:b6:56:68:e0:5a:
1f:20:85:46:0a:67:e9:5c:45:99:88:47:48:5c:d6:
1a:c5:a6:6b:56:8d:2d:33:42:93:dd:25:bd:fe:18:
dd:4b:ed:22:cc:80:fc:88:39:f9:a7:e2:33:14:b4:
b8:2e:c4:90:96:e9:21:ee:d2:a9:b0:32:a5:d0:8c:
fe:d5:d5:f5:49:53:ee:a5:d1:b4:05:b8:8f:fc:24:
29:27:b6:4b:ce:f2:49:4b:81:ab:44:a7:d1:d1:54:
9f:63:6d:8a:5d:61:a0:86:2d:4a:f7:3a:f5:e7:aa:
6c:c5:14:2a:c6:54:80:d6:c1:ae:e9:26:f7:90:2a:
e7:45:1b:ce:96:c9:94:cb:92:cd:87:d6:dd:fe:1e:
b6:eb:f6:bb:6b:f5:4d:ce:8e:88:9d:40:5d:2d:b6:
b6:fb:7e:54:84:22:3e:73:05:18:3a:60:72:72:36:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4A:0A:49:A5:B3:56:23:53:C5:B8:83:71:AC:0E:A3:06:E4:40:B2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/akoKSaWzViNTxbiDcawOowbkQLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.26.0/23
88.216.16.0/24
Signature Algorithm: sha256WithRSAEncryption
46:14:0b:ae:8c:96:bc:10:a7:f2:0e:42:bb:7b:16:fa:f2:00:
7d:4f:db:35:4b:83:38:aa:3d:e0:70:60:42:b5:60:76:8e:53:
d3:db:14:bc:ab:95:a1:47:9e:c6:90:79:90:0b:53:b0:24:ee:
b4:d6:cf:1f:22:06:42:3e:09:7c:f5:f1:db:f0:76:4c:d9:1d:
2d:08:38:9d:93:b0:de:1d:dc:32:94:f9:4c:3f:c2:e9:c0:89:
5a:8b:f0:cb:47:ee:ab:e5:21:b9:e2:d4:19:fa:29:55:a2:f8:
be:fd:2d:c0:22:96:68:fe:41:80:71:65:05:04:c4:dd:78:5e:
be:f4:26:db:46:d6:0a:76:81:bd:df:1d:d9:56:89:8d:2e:ab:
ff:03:eb:50:33:17:81:d4:10:9f:42:03:39:65:a6:80:31:6a:
4f:f3:7b:cc:2e:2e:ca:69:ea:6f:80:71:70:7e:b7:c2:3b:4e:
f8:01:8f:1a:69:cf:e2:61:ab:28:43:43:4d:24:2b:14:b0:4c:
20:9e:2a:ab:cb:59:18:f7:d4:d4:aa:0b:a7:1c:84:3a:c2:ee:
27:1c:88:3d:a7:24:2b:ca:c8:b9:af:7a:8d:04:27:1e:e2:30:
a4:a9:bc:f7:26:1a:80:45:cb:c5:60:c6:36:4d:9f:95:55:56:
92:53:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org