Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ib0vkRUuPLxN7Q4R0spxU2BFflU.roa
File: ib0vkRUuPLxN7Q4R0spxU2BFflU.roa (raw, json)
Hash identifier: FLbrMKWQWItnkfLEDPVq4ox7/jcJtFH53XKm3xuhNns=
Subject key identifier: 89:BD:2F:91:15:2E:3C:BC:4D:ED:0E:11:D2:CA:71:53:60:45:7E:55
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018B105F9F81093CA0D3BBC92E66D7ACD313
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ib0vkRUuPLxN7Q4R0spxU2BFflU.roa
Signing time: Sun 08 Oct 2023 17:39:44 +0000
ROA not before: Sun 08 Oct 2023 17:39:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 84.32.177.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
84.32.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:5f:9f:81:09:3c:a0:d3:bb:c9:2e:66:d7:ac:d3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 8 17:39:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89bd2f91152e3cbc4ded0e11d2ca715360457e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:29:43:a4:31:05:5c:2f:e0:cb:24:51:19:
91:9b:7a:07:7c:a9:bf:da:d5:86:1f:29:95:bb:ec:
01:4b:2c:3a:81:0a:01:7f:eb:ee:89:0e:a2:4d:9a:
cc:df:6f:46:fc:20:74:f6:d1:d5:cb:71:10:a6:cf:
ec:eb:86:75:d7:52:71:5d:b9:c7:f0:4e:10:45:5f:
3a:f6:9d:fe:97:b3:9c:96:fc:55:ad:f3:19:a7:3b:
2f:44:56:c1:47:7a:82:15:bb:7d:54:44:c6:1e:52:
9e:d4:f3:e3:1c:26:53:07:82:23:c7:c9:00:27:5b:
ce:f6:c5:1d:d8:4a:5e:45:da:cc:c4:7f:54:18:91:
de:2b:b6:5b:ef:60:6e:70:6d:92:e8:ca:73:31:c2:
54:f8:03:f4:7c:8d:1b:df:50:12:d3:bb:a6:41:29:
e0:8c:84:d9:89:77:49:a8:05:5f:e3:5c:5b:c4:96:
ec:f3:c8:93:ef:4f:05:50:e5:11:e6:a6:03:df:ea:
ea:6a:a9:81:ce:e3:68:4d:7b:70:a4:54:55:ff:af:
29:71:2d:48:1b:b5:52:fa:98:c4:0c:68:0f:87:db:
7e:fc:f6:fe:23:44:df:54:6f:05:b6:13:03:4e:be:
9d:99:26:93:04:72:69:d7:a0:9e:49:7d:bd:95:c3:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BD:2F:91:15:2E:3C:BC:4D:ED:0E:11:D2:CA:71:53:60:45:7E:55
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ib0vkRUuPLxN7Q4R0spxU2BFflU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.40.0/24
84.32.177.0/24
88.216.133.0/24
Signature Algorithm: sha256WithRSAEncryption
81:df:d8:f9:96:42:34:92:ac:8f:2e:b0:31:bc:68:ac:e8:be:
82:be:05:2a:94:a3:67:2e:81:ea:e7:12:89:de:bd:83:05:54:
d0:17:52:54:4b:f4:2a:62:ee:27:03:f8:4a:c5:be:16:38:34:
d2:c9:a0:c3:78:5e:e3:e7:05:c9:73:f6:25:1f:c8:b8:ba:14:
64:6d:ce:ae:f5:85:e2:1c:b1:0a:54:42:a4:6e:12:c5:6e:60:
e1:ce:94:55:53:5c:9b:e7:d0:4c:40:32:df:4a:3d:a2:8a:51:
1f:4b:b6:5b:56:59:01:8f:ab:94:bb:f5:95:d8:57:aa:0e:a3:
ca:ce:76:05:51:f5:f9:fc:87:17:48:79:d3:6e:b3:21:0a:4e:
e2:e2:a4:c9:8d:d8:71:7c:9d:1c:b4:b4:03:79:72:aa:3f:50:
f6:1e:e4:f2:f0:2e:ca:d6:2d:f9:17:12:bc:6f:50:5d:b6:dc:
0d:52:b7:f1:26:a8:1b:46:ba:77:65:9e:98:21:69:2d:7c:12:
bb:40:2e:5a:82:c5:d4:88:ce:9d:60:ec:f9:ec:1d:95:c8:6d:
21:f8:e1:31:e5:1e:06:2d:4f:56:26:c7:5f:68:58:d9:a2:1f:
79:cb:0c:ae:53:5f:c6:80:45:dc:3c:b8:35:b2:2a:4c:36:1c:
5a:e5:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 06:57:31 2023 by rpki-client on console-fra.rpki-client.org