Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hjic2EcVYUKSLL_465oXeFDWJOk.roa
File: hjic2EcVYUKSLL_465oXeFDWJOk.roa (raw, json)
Hash identifier: TS/GWeeDOUw2j+TQrZEJagdTbHTZ1L692M1xOtzBK5U=
Subject key identifier: 86:38:9C:D8:47:15:61:42:92:2C:BF:F8:EB:9A:17:78:50:D6:24:E9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018580C832E458EB75C2004031D2BD1192DF
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hjic2EcVYUKSLL_465oXeFDWJOk.roa
Signing time: Thu 05 Jan 2023 07:14:41 +0000
ROA not before: Thu 05 Jan 2023 07:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 84.32.52.0/22 maxlen: 24
88.216.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jan 2023 21:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:80:c8:32:e4:58:eb:75:c2:00:40:31:d2:bd:11:92:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 5 07:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86389cd847156142922cbff8eb9a177850d624e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:0f:3e:8a:dd:b0:b7:1a:99:1f:98:ea:d7:
38:c9:16:7a:3d:22:f8:cd:91:31:e8:94:e4:bd:0a:
b0:43:0c:87:73:e1:ac:ad:1e:21:b2:06:6f:80:19:
1b:27:9c:88:b9:b9:b3:12:27:14:4a:d1:c1:e2:99:
ed:74:90:e0:a9:b7:4e:62:66:91:fe:d3:ec:0f:75:
e6:7c:bd:10:77:78:46:53:c3:01:3f:f7:f6:68:14:
2e:b3:70:d4:be:cd:41:46:1a:d0:48:af:96:c4:7c:
9c:7a:98:d3:ff:5d:00:ac:81:49:96:e0:e3:90:91:
78:f4:51:25:b6:70:5b:f0:8f:f7:a0:3f:b9:ed:52:
bb:43:3f:38:27:54:01:79:eb:91:bd:0d:ac:88:0a:
10:0d:d5:fa:44:9f:80:92:6a:0c:71:1c:13:c0:b5:
25:2c:91:03:11:9b:7c:fd:97:4b:e8:7f:64:fc:c4:
3a:17:93:f2:fd:3c:68:12:87:b9:8c:32:1a:3f:a7:
50:91:8b:4d:4a:a1:7e:84:fd:1c:bf:a5:b2:19:54:
0c:98:eb:bc:7f:cf:8d:2b:e2:1f:2a:73:87:ad:6d:
c6:e4:71:02:3e:13:74:57:31:cb:e3:8a:13:18:5c:
a8:3d:62:81:06:be:49:20:0c:27:df:cc:ec:8d:c5:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:38:9C:D8:47:15:61:42:92:2C:BF:F8:EB:9A:17:78:50:D6:24:E9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hjic2EcVYUKSLL_465oXeFDWJOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.52.0/22
88.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:19:eb:28:63:58:f0:ad:f3:d7:a2:30:47:a5:a7:24:18:5f:
76:96:db:6c:9c:bf:83:33:ca:b0:60:fb:3b:2f:67:c6:05:f3:
16:c5:64:a7:15:b9:63:33:bd:7e:23:38:5d:ba:da:0c:29:50:
6e:53:38:c5:4a:d2:96:e7:56:bb:e5:c3:62:49:79:72:db:37:
2a:1a:62:e3:00:46:e7:7f:ea:bf:81:c3:18:e7:80:46:ee:0d:
d4:20:7f:72:00:b3:22:22:e4:f1:25:61:b8:6e:77:81:cf:06:
3b:7e:6b:5d:e0:f2:65:f0:96:ac:96:e0:91:e6:fd:73:9e:47:
2f:d7:04:8c:81:9f:2e:47:66:6a:59:81:fa:af:a0:05:44:9f:
d7:ef:e2:db:d2:6d:f8:1b:6e:36:c0:f0:c7:90:19:61:12:f4:
b9:e0:8f:b1:3d:6f:8c:0b:24:08:41:b9:ed:e8:60:29:5b:97:
a7:f6:f9:ac:98:80:f4:88:35:95:c2:7b:68:b1:c9:05:95:31:
fe:49:0c:a8:ab:d8:4a:ae:32:a0:22:f3:70:84:85:9b:a8:4f:
35:bb:11:5d:d7:73:2e:44:85:ee:89:d2:4c:3a:c8:1b:59:07:
db:72:72:a2:49:57:05:88:24:17:e6:0c:2e:35:2d:64:ab:75:
b1:a8:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org