Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eeX4HxPb_zox3Wd1bSqreFz3lHE.roa
File: eeX4HxPb_zox3Wd1bSqreFz3lHE.roa (raw, json)
Hash identifier: fOKhxCW8CfhWwsK9YbB+YT7werxq4pQR7rNno7riDrk=
Subject key identifier: 79:E5:F8:1F:13:DB:FF:3A:31:DD:67:75:6D:2A:AB:78:5C:F7:94:71
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018ADA7FACBC12AC0345AFB2D450F8799AAD
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eeX4HxPb_zox3Wd1bSqreFz3lHE.roa
Signing time: Thu 28 Sep 2023 06:35:14 +0000
ROA not before: Thu 28 Sep 2023 06:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 88.216.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Sep 2023 11:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:da:7f:ac:bc:12:ac:03:45:af:b2:d4:50:f8:79:9a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 28 06:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79e5f81f13dbff3a31dd67756d2aab785cf79471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0d:7e:63:68:11:33:6b:e1:d5:2c:88:96:2a:
97:de:0b:f0:45:67:49:c8:4a:61:ab:7e:c5:b7:d8:
b5:7a:36:86:bf:7c:b4:e8:54:85:bc:a7:d2:1a:ac:
01:a9:b1:53:e1:34:03:74:21:75:33:6d:06:84:74:
83:66:b3:b1:e6:68:4d:5f:e6:3c:d9:cb:10:5a:e3:
ce:5d:4c:6c:8b:c4:1f:fe:38:e8:7f:df:6b:2c:be:
c0:b0:bf:42:c2:11:df:93:3c:a5:ae:56:2b:81:c2:
a4:8d:58:a4:99:0a:9e:17:47:19:e8:b5:15:84:62:
75:75:78:da:71:15:60:8a:89:6e:0b:2e:d0:04:41:
f8:8c:37:5a:c6:52:5b:39:8b:e7:92:bc:30:74:8e:
03:0b:7e:e9:a5:e4:76:06:fd:e0:57:c4:0c:d3:88:
04:76:5d:5b:3a:aa:29:7a:9f:c3:e3:23:a6:65:20:
e5:aa:95:5e:d1:8e:d5:a4:1b:e5:6f:73:3b:9e:71:
2d:0d:b7:fa:14:7e:3c:24:63:ac:1a:42:63:87:1e:
3a:a9:c0:c4:97:68:f6:32:d8:df:88:1f:d4:86:3d:
3f:e4:39:a7:4e:7a:fd:d9:d0:a6:3b:12:01:bf:f7:
cf:b7:6f:1d:3d:96:cb:1c:09:c5:34:cb:6c:11:4c:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E5:F8:1F:13:DB:FF:3A:31:DD:67:75:6D:2A:AB:78:5C:F7:94:71
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eeX4HxPb_zox3Wd1bSqreFz3lHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:fe:c6:12:c7:36:af:84:cc:f8:53:95:66:74:84:8d:77:c8:
04:42:bd:ef:62:81:e5:02:f1:db:36:b0:71:f7:2b:04:e3:b4:
e7:ef:47:94:8e:61:97:fc:3f:55:34:82:15:00:cf:cd:7d:c4:
50:4a:f0:99:3b:b9:9e:6e:e9:0c:f5:96:4e:06:b6:1f:a7:4f:
78:a1:02:b0:67:f1:ec:61:76:f2:d8:5c:7e:23:09:10:93:98:
68:4c:a6:c8:3c:15:6c:71:5b:3f:9a:18:df:7b:c8:db:96:4e:
07:02:58:76:2e:a3:c4:97:7a:80:60:c1:b6:73:1b:7e:52:69:
7c:3a:c1:c0:b9:22:c0:57:7a:75:25:71:1f:8d:5d:53:ea:fc:
b4:31:84:b0:5a:db:a5:ab:da:fd:f1:f3:4b:d1:d6:e0:a9:c8:
ac:74:f3:4d:c0:28:0c:58:86:68:89:fe:ce:24:ec:b5:9c:9a:
48:5b:9f:80:c8:ba:60:ea:5e:6f:c0:12:3b:0d:15:18:b8:b5:
03:de:a5:eb:91:16:e2:9c:c6:ad:99:6a:4d:cb:0f:17:20:80:
28:c0:02:e7:ce:fa:74:92:7d:6f:0e:79:bd:4d:c5:7d:c0:9f:
43:6e:a5:82:61:a2:fe:01:8d:3b:7f:df:68:48:95:24:0a:d9:
12:81:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org