Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hVCRtcnTeioSBd85PzdarE-jO-s.roa
File: hVCRtcnTeioSBd85PzdarE-jO-s.roa (raw, json)
Hash identifier: QgOiOMvm8w6DpXyRaSSffG0c7GgfrFj2jJ/TWzeaJ58=
Subject key identifier: 85:50:91:B5:C9:D3:7A:2A:12:05:DF:39:3F:37:5A:AC:4F:A3:3B:EB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189CF0E7671D6246477A81F5ED65E2ED2FC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hVCRtcnTeioSBd85PzdarE-jO-s.roa
Signing time: Mon 07 Aug 2023 08:12:58 +0000
ROA not before: Mon 07 Aug 2023 08:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 88.216.67.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Sep 2023 05:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:0e:76:71:d6:24:64:77:a8:1f:5e:d6:5e:2e:d2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 7 08:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=855091b5c9d37a2a1205df393f375aac4fa33beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:e1:4c:d6:5d:52:75:12:2f:3a:a2:96:98:
ef:bc:4a:09:db:06:79:2a:44:00:0c:7a:a5:3d:7a:
0d:50:5a:15:a8:39:17:fd:01:b6:89:4f:e8:80:12:
9c:cb:b9:4c:07:1f:03:12:33:f5:9d:cf:5f:99:c3:
d4:d0:f6:87:d3:96:97:14:f2:fd:e9:3d:92:b6:a4:
d0:fa:ca:2c:c2:43:d6:dc:c2:44:23:e2:a2:ae:27:
b8:6b:04:96:9f:58:94:0a:3f:48:64:9d:54:d1:fc:
d1:b2:c9:89:59:a3:54:c0:84:01:e9:bc:02:c5:b3:
8f:f0:3b:27:eb:05:e4:37:4b:c9:5f:9c:8a:9e:9b:
86:ea:8b:9e:d3:c0:66:4a:ac:77:d9:53:39:6a:d5:
e6:51:cd:1f:51:57:93:95:5a:bc:f1:7e:47:44:87:
cd:8f:5a:ca:01:3c:54:d9:1c:30:09:8f:e8:c9:ed:
f4:6f:7d:27:85:32:3f:79:ff:21:9c:fb:f5:9c:ae:
a4:8a:b1:b5:15:cc:20:13:8b:c5:0e:c4:db:59:0f:
0b:b5:12:51:53:da:09:62:4c:5b:10:45:5c:a7:68:
16:b9:9f:36:38:17:f0:b3:56:df:a7:6b:1b:90:cd:
8b:7f:80:4c:25:a6:db:66:d6:72:e8:a2:0b:65:48:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:50:91:B5:C9:D3:7A:2A:12:05:DF:39:3F:37:5A:AC:4F:A3:3B:EB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hVCRtcnTeioSBd85PzdarE-jO-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.67.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9f:64:b0:f8:83:ff:ce:ef:1f:21:10:f2:36:2c:b4:e1:2a:
4f:0c:ba:37:c8:8f:f1:8a:18:fc:89:38:d1:d6:b9:a1:27:59:
65:21:b0:9f:e8:20:ad:c0:ad:f5:2f:e6:d4:a7:e9:58:0a:d3:
36:0b:d1:e9:ea:01:2c:98:c5:a7:d2:51:6f:da:74:be:3b:f5:
c2:c8:53:63:9b:fd:d2:89:a8:85:a0:06:17:01:9c:5d:e2:cc:
65:0c:34:f2:a8:3d:37:4a:82:89:70:8e:7d:c6:89:cb:ce:8a:
8e:b6:2b:1b:49:f8:ce:ef:a5:fc:7e:f1:dd:af:15:30:69:d5:
6d:c1:b3:03:e9:20:90:19:2f:ab:36:da:6f:54:17:37:9e:a2:
56:89:82:bc:6d:25:3f:4a:ac:6c:c2:57:23:ff:a6:ea:4e:4b:
9a:4d:8a:78:51:ae:4e:40:b8:e7:e8:ec:de:ee:8b:89:6c:71:
69:7c:b9:e7:f0:5e:92:7b:f2:75:ea:e0:09:ee:47:2e:f0:11:
f2:91:ab:00:92:b9:7a:aa:4e:24:f1:a8:e3:e4:61:78:95:af:
03:04:68:26:28:96:8e:32:67:1e:f5:02:7f:84:99:28:ed:5b:
66:d8:07:4f:1e:c2:80:30:5c:45:d6:1e:d5:71:0e:20:05:23:
89:0a:eb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org