Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dzDKhKKQlZfwWc-a5AETXGIzzc0.roa
File: dzDKhKKQlZfwWc-a5AETXGIzzc0.roa (raw, json)
Hash identifier: GEPIrFl52aENN0KrU6NF2pJYOlmUKsEzTABRLfqGb4o=
Subject key identifier: 77:30:CA:84:A2:90:95:97:F0:59:CF:9A:E4:01:13:5C:62:33:CD:CD
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01864EDA8D9308D2F3331E81D70E67B2A431
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dzDKhKKQlZfwWc-a5AETXGIzzc0.roa
Signing time: Tue 14 Feb 2023 07:36:31 +0000
ROA not before: Tue 14 Feb 2023 07:36:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 88.216.17.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Mar 2023 06:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4e:da:8d:93:08:d2:f3:33:1e:81:d7:0e:67:b2:a4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 14 07:36:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7730ca84a2909597f059cf9ae401135c6233cdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:d7:dd:a9:91:ab:9a:ff:e6:93:32:40:0b:
87:4c:48:48:c4:fb:39:99:d2:45:1e:bc:ed:0c:4f:
98:16:16:de:bc:17:ee:2d:6e:a3:a3:fe:8b:8e:e8:
28:27:35:5c:4e:44:ef:4d:64:90:fe:da:7b:31:e2:
7e:a2:04:99:5e:f9:d0:90:70:0d:e0:5e:ac:35:c3:
af:df:65:89:3c:78:4a:72:4e:ba:6b:ba:86:a7:7a:
25:b9:da:ff:91:b0:3a:57:d6:bd:a6:b7:44:85:bb:
0a:e9:fc:2e:c4:15:73:23:f0:60:9f:22:df:fa:c4:
fa:72:f4:21:92:d8:27:ac:bf:ea:66:4e:91:9c:10:
12:a6:a2:fa:29:a7:e2:27:b9:59:0f:e9:d8:73:26:
3d:dd:4e:9c:44:a4:b7:b9:8e:54:6c:f5:ed:e8:68:
a1:58:ee:f0:16:10:23:93:08:5d:9a:a6:d5:de:c5:
db:e2:bc:c4:61:d5:5a:f2:c9:57:3c:cd:8e:f4:12:
be:49:72:d2:82:f0:aa:55:fd:f8:fc:db:27:34:be:
4d:31:67:16:ad:8e:9c:5d:23:e3:70:51:0b:10:99:
4c:00:a3:d7:28:96:88:0e:fc:a6:7c:81:80:0a:53:
39:73:d9:c2:fb:ce:a5:ae:44:f7:33:bd:d0:eb:a7:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:30:CA:84:A2:90:95:97:F0:59:CF:9A:E4:01:13:5C:62:33:CD:CD
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dzDKhKKQlZfwWc-a5AETXGIzzc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.16.0/23
88.216.133.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c5:b0:a7:ed:b2:47:dd:2b:f3:3f:6d:f3:b7:48:24:25:21:
9f:fc:70:4c:0f:a7:5e:2b:db:f3:06:31:57:e6:7b:36:f6:4a:
77:a4:3d:87:ee:b3:1d:5e:47:ee:b4:a2:ec:3b:81:9e:5b:1d:
ec:a9:2b:bb:53:4d:5b:b7:00:8d:6c:2b:6a:77:06:2e:da:4f:
34:59:ba:4e:97:63:dd:a9:3b:54:35:bd:aa:3b:d2:a3:c4:17:
11:9a:4c:2c:e1:44:85:e1:41:95:9e:5b:1d:a8:d8:cd:b0:a9:
15:4a:08:0c:da:cc:cc:e5:87:43:d8:f7:76:7f:16:c7:b1:5c:
3b:fe:ea:21:1b:70:0f:28:3c:75:b4:22:54:d4:0a:54:f8:f0:
9b:61:41:e7:68:7b:e7:04:23:0b:8a:09:e0:2d:72:9a:2a:fe:
9d:a2:40:dc:31:13:1e:76:45:1e:8d:77:1f:b7:40:aa:7f:20:
cc:aa:33:7f:66:c0:04:77:48:54:4a:67:82:78:33:df:88:c1:
21:b2:04:05:e2:4a:04:a0:e9:34:62:2b:15:d6:6e:79:29:83:
3d:cc:30:66:5c:05:e3:27:c7:4a:06:e2:f8:06:4b:7d:f0:00:
c7:4b:5b:56:67:46:a1:18:3e:c5:7f:69:96:31:54:41:9f:e9:
a8:87:58:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org