Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dGxcZe46zybGYvQdQ4qCON1zMgg.roa
File: dGxcZe46zybGYvQdQ4qCON1zMgg.roa (raw, json)
Hash identifier: bp463D+y0CF8pwxm5xQ8HIR4Vxkdr+mkWWeSPKnHqeA=
Subject key identifier: 74:6C:5C:65:EE:3A:CF:26:C6:62:F4:1D:43:8A:82:38:DD:73:32:08
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01875A4373E402E6D62DF8BD47187DF06DD1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dGxcZe46zybGYvQdQ4qCON1zMgg.roa
Signing time: Fri 07 Apr 2023 05:49:42 +0000
ROA not before: Fri 07 Apr 2023 05:49:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211112
IP address blocks: 88.216.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 11:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:43:73:e4:02:e6:d6:2d:f8:bd:47:18:7d:f0:6d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 7 05:49:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=746c5c65ee3acf26c662f41d438a8238dd733208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:15:a1:76:52:27:42:e1:ed:a5:c2:3a:f6:
a1:e0:96:39:41:17:13:83:2f:f5:e6:6a:97:58:ee:
cd:61:6e:8d:be:89:d5:57:45:ef:15:af:4c:ef:ce:
3a:59:9c:6a:c7:c8:03:7d:ea:05:c9:63:1d:16:6e:
1b:3c:7d:ce:0f:47:8f:12:91:f9:26:25:19:fa:29:
5c:c7:e7:00:15:e6:8f:de:98:58:bc:2d:f1:bd:32:
32:fc:84:8d:51:06:54:27:02:45:54:69:e2:27:bc:
07:f7:f9:16:03:15:db:de:6d:ea:13:dc:ef:ac:e8:
a9:61:17:96:f3:b8:cc:48:ae:c4:4b:44:a9:d9:fb:
f7:5f:44:94:e0:d3:28:bb:62:1c:36:2f:5d:8e:c1:
12:bd:f8:d6:dd:38:58:b0:e7:16:1c:d1:73:83:27:
7e:12:e6:01:0d:50:70:93:a3:c6:6a:fe:fb:43:6e:
c7:e3:4d:06:48:fd:7e:61:9a:e2:85:e4:47:30:08:
17:3d:31:04:3e:8c:40:f1:f3:3f:fb:0f:73:5b:3c:
ad:e0:d5:ff:a9:da:ce:b0:93:0e:25:19:e7:bb:eb:
19:9e:47:97:b0:a0:c7:0c:5c:84:60:60:9c:73:0b:
86:b0:83:9d:4d:55:35:88:73:a2:f8:c7:8d:43:91:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:5C:65:EE:3A:CF:26:C6:62:F4:1D:43:8A:82:38:DD:73:32:08
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dGxcZe46zybGYvQdQ4qCON1zMgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.131.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a2:fd:d8:ee:cd:e0:ea:e7:3c:a3:3d:25:f5:d5:70:8e:39:
6c:87:3f:a0:c8:9f:a3:d5:33:fe:34:ea:a7:ab:65:b5:ab:d8:
e6:15:5c:ae:d9:51:a4:f7:df:cb:10:79:65:44:b7:33:64:67:
b8:59:03:0c:6d:42:81:1c:c7:15:ce:78:45:d0:bd:4b:19:93:
fa:b4:1d:97:9f:6f:7c:06:3a:12:34:ed:e3:da:e9:8f:2b:f1:
0f:0a:f6:9e:b1:82:c1:37:36:7e:ea:9a:df:67:ea:05:b8:c8:
f3:d6:e3:9f:3a:69:95:70:58:d8:23:a8:dd:75:69:f8:45:bd:
97:70:60:83:61:9b:de:fa:50:57:34:36:fa:15:61:86:99:f2:
64:9c:bb:e9:c4:9b:7a:9a:d0:16:45:f7:7b:6f:39:6d:7f:ce:
23:49:98:bd:36:6e:57:bc:6b:45:c5:9c:7f:17:a3:6f:a8:65:
70:cb:19:74:42:99:50:ab:9a:19:32:b1:2e:c8:29:14:7e:9a:
b5:52:99:c5:54:26:2a:b3:2e:da:5c:5e:bd:0a:e9:a1:19:2a:
0d:06:12:96:55:de:cc:4a:85:31:bb:04:32:fe:8d:a2:20:3f:
e7:eb:82:09:5f:0f:71:6a:d7:42:7b:3d:ac:2e:65:15:34:8f:
dc:3c:e0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org