Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fM9r-nQlvIlHEOWglz93dw5KLso.roa
File: fM9r-nQlvIlHEOWglz93dw5KLso.roa (raw, json)
Hash identifier: +nEEAF/0pPsUtpgl+W9A2Dj0c7XFkt740/ukWI05vh0=
Subject key identifier: 7C:CF:6B:FA:74:25:BC:89:47:10:E5:A0:97:3F:77:77:0E:4A:2E:CA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B29528544DFF86F5A4BC8A5E8582A9BDE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fM9r-nQlvIlHEOWglz93dw5KLso.roa
Signing time: Fri 13 Oct 2023 13:55:55 +0000
ROA not before: Fri 13 Oct 2023 13:55:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47838
IP address blocks: 88.216.72.0/22 maxlen: 24
88.216.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:52:85:44:df:f8:6f:5a:4b:c8:a5:e8:58:2a:9b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 13 13:55:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ccf6bfa7425bc894710e5a0973f77770e4a2eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:94:ae:4c:a3:a0:99:ad:bc:c7:77:79:a9:c9:
87:e0:b9:e1:11:49:d2:68:5f:bd:eb:46:8d:96:63:
b0:ce:dc:c4:da:4f:00:38:4d:6e:08:1b:1f:32:bd:
6a:4f:12:6a:dc:9a:7b:90:c2:4d:d2:7e:20:34:fc:
19:54:1d:e5:8f:c3:ea:15:d1:24:3c:e6:c0:a6:e0:
da:ad:bc:30:02:e2:db:5b:9e:65:51:4c:69:70:ce:
98:3a:38:52:5b:34:85:0b:60:45:23:f1:00:57:39:
95:eb:b2:f2:93:5f:3a:5d:6c:64:99:83:f8:37:9c:
4c:23:c4:70:5f:0b:0e:14:1d:78:c1:9f:2a:05:0a:
1c:b5:38:48:06:85:08:5b:6f:d7:66:01:e9:df:f5:
24:c5:0d:7a:9d:73:00:15:b3:11:7b:a8:0b:fb:f0:
12:2b:78:97:f7:5a:75:36:c6:bf:9b:fe:70:27:20:
9a:db:60:a0:1f:22:24:a9:29:ac:ee:77:9c:56:d1:
c4:96:2d:ad:b7:d4:2d:2d:cb:60:a5:fd:60:04:0c:
dc:eb:4c:3c:d9:7d:b4:17:f4:92:33:f8:41:87:d7:
48:8f:ea:08:34:b5:ba:41:79:c5:8b:5c:a4:84:68:
a4:00:5f:32:e3:ee:02:a6:98:33:54:3b:18:1e:da:
a6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CF:6B:FA:74:25:BC:89:47:10:E5:A0:97:3F:77:77:0E:4A:2E:CA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fM9r-nQlvIlHEOWglz93dw5KLso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.8.0/21
88.216.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:28:9b:4d:66:ef:8f:b9:6b:5e:83:54:24:aa:a1:e6:b2:f9:
54:41:99:66:3c:33:da:c3:8c:b8:a3:07:bd:17:37:87:a9:cd:
cc:9b:12:4e:59:7c:dc:3f:1f:7e:de:d3:01:e5:cf:7f:bf:35:
4a:67:e9:0c:49:e8:54:0b:d2:a7:70:07:9c:dc:20:91:c9:a0:
df:44:54:e4:79:ff:66:be:20:40:02:b2:03:e6:96:05:28:a9:
d6:19:83:97:4e:9c:75:2a:06:7f:b3:db:0f:44:dc:c7:42:63:
c0:d7:91:08:82:c5:b7:7a:0d:f5:57:55:67:1a:5a:bc:d5:49:
28:58:92:6b:0c:6d:aa:2e:69:f0:09:b9:05:73:df:eb:73:90:
6b:de:d8:ab:e8:95:8c:5a:4a:2a:4f:b8:0b:b5:53:56:32:71:
ae:c6:e8:e0:f2:92:c2:86:69:e6:af:c0:ec:c0:05:3e:49:76:
c3:32:a5:58:dc:c9:45:b8:ae:a9:6e:15:b2:41:78:6d:0d:a1:
0d:fb:ee:c2:38:a7:bc:98:a5:50:be:b9:aa:37:48:06:d2:05:
fc:72:1a:f1:52:9c:6c:61:a8:6c:68:ff:e7:d3:32:a4:dc:e8:
97:ef:43:7a:3d:83:66:c0:d0:ae:c4:65:38:78:b5:57:a4:0b:
c2:3f:28:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org