Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jUrjBz6TnVVs3BaG7kga2RLovyU.roa
File: jUrjBz6TnVVs3BaG7kga2RLovyU.roa (raw, json)
Hash identifier: QL5fIbNoN6gAJiJygj4d2RT8bXKnwByaKwFNLUIocOI=
Subject key identifier: 8D:4A:E3:07:3E:93:9D:55:6C:DC:16:86:EE:48:1A:D9:12:E8:BF:25
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187980A41892296240FE80D0F5484CF5199
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jUrjBz6TnVVs3BaG7kga2RLovyU.roa
Signing time: Wed 19 Apr 2023 05:43:41 +0000
ROA not before: Wed 19 Apr 2023 05:43:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 88.216.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 12:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:0a:41:89:22:96:24:0f:e8:0d:0f:54:84:cf:51:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 19 05:43:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d4ae3073e939d556cdc1686ee481ad912e8bf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:9c:00:09:5f:7b:fd:e3:3a:4b:20:22:f6:
dc:29:16:95:ac:73:f1:67:ad:da:a7:83:8a:76:08:
1e:ef:3d:63:8f:73:ea:21:cd:68:f5:f4:fc:53:b0:
98:11:6d:41:50:3b:56:f9:eb:a6:bf:4e:69:f6:f7:
d1:1b:90:9e:03:96:f7:7e:ea:8e:63:ad:24:2a:58:
1e:f2:c2:8b:af:74:18:4a:67:d2:29:3b:84:73:e6:
ed:70:29:4b:cd:da:35:49:ce:61:c8:7f:25:2c:d0:
7e:c1:ca:ab:a8:18:91:da:62:8c:81:cc:38:d9:6e:
8f:6e:5c:cc:c2:8e:14:92:1d:0c:6f:aa:ae:5b:b3:
97:52:bb:98:ed:f6:70:af:65:f3:86:ae:92:c5:ff:
60:9f:6f:12:e7:be:32:4b:4a:a0:87:03:19:7d:64:
4a:e4:c4:71:be:33:05:6f:e7:22:9c:a9:6e:69:a3:
2a:2a:37:a5:eb:3a:41:63:10:ee:53:d2:93:46:40:
58:79:4d:f4:c5:8b:32:3b:8a:c5:61:46:d3:9b:95:
4d:18:15:7d:f6:da:f7:2e:ca:e5:46:4e:a1:ce:c0:
5d:23:f1:bb:72:5a:8f:ec:af:3a:53:5d:8d:ad:04:
bb:8d:4e:ed:bc:74:f8:1c:52:4d:03:1e:d9:dc:e7:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4A:E3:07:3E:93:9D:55:6C:DC:16:86:EE:48:1A:D9:12:E8:BF:25
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jUrjBz6TnVVs3BaG7kga2RLovyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:53:91:21:de:69:63:70:57:6c:6d:74:8b:46:9f:95:d6:86:
25:4e:7e:38:e3:08:9b:67:1e:d0:91:bc:91:25:8c:7d:37:fa:
9c:b8:3f:db:a9:9a:df:1e:0f:19:bf:58:49:7a:6e:1a:a8:72:
cb:01:f5:e9:c0:7d:2f:32:bb:a4:34:f3:1a:ae:d3:99:51:d3:
ac:96:7b:b7:64:af:16:3b:24:4c:a9:de:78:c0:e3:11:9d:94:
1c:c7:86:8b:bb:17:83:af:46:f2:fb:77:83:6c:f8:a9:5b:e0:
05:b5:5c:48:e5:24:57:95:ae:08:ad:f1:9e:92:3f:67:18:d6:
69:e6:1d:c6:39:0a:94:40:5f:d2:2d:76:f2:6a:80:a6:f9:ef:
c9:38:be:d1:b7:11:a5:42:54:a1:c6:99:71:9f:53:6a:66:3c:
ef:ad:6b:25:8b:f6:00:9c:0e:f0:06:22:73:b1:95:9d:b9:c5:
a7:77:d5:eb:c4:1e:3f:01:71:c0:85:10:75:ee:24:55:f9:5e:
c1:42:a4:0a:38:6d:8c:4c:8d:d6:6e:88:46:5b:45:02:1c:bb:
55:81:a6:51:ea:40:a8:ed:63:3c:84:a4:ba:98:db:0f:8b:b8:
13:c3:fd:e1:04:33:35:50:2c:76:4f:e0:24:18:5f:4d:76:d2:
ff:4f:1d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org