Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/k0b_JkNNKIJkcdu6VqlEV62tWr4.roa
File: k0b_JkNNKIJkcdu6VqlEV62tWr4.roa (raw, json)
Hash identifier: jk6V5+XwDs15jpCTxrnmzfVE8A955344JKij+xX/Au0=
Subject key identifier: 93:46:FF:26:43:4D:28:82:64:71:DB:BA:56:A9:44:57:AD:AD:5A:BE
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189626B62948A6B8266C77FCF7B566A2706
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/k0b_JkNNKIJkcdu6VqlEV62tWr4.roa
Signing time: Mon 17 Jul 2023 05:55:51 +0000
ROA not before: Mon 17 Jul 2023 05:55:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 88.216.108.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:6b:62:94:8a:6b:82:66:c7:7f:cf:7b:56:6a:27:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 17 05:55:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9346ff26434d28826471dbba56a94457adad5abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:9d:82:a8:59:ac:9f:1b:ae:da:fe:f6:6c:
3d:17:12:71:21:aa:6f:f8:be:b0:2b:fd:ce:de:4b:
5d:d6:7b:d9:07:48:7a:bb:45:1c:32:05:63:b0:6b:
a6:64:bf:a8:76:61:18:e4:a4:6f:7f:fc:72:4f:e6:
c6:c7:8f:8e:b7:47:05:7d:44:0d:d8:40:aa:30:60:
c4:a0:5c:b3:1e:ff:b9:0c:e7:8a:fe:40:1e:b1:57:
7f:af:df:7b:c5:b2:cf:a8:9d:6c:8a:d8:d6:3f:8c:
e4:bb:48:bf:68:85:4a:ec:79:a2:6a:6f:8a:4a:08:
83:8f:05:90:c5:91:70:c7:77:95:e8:4b:1a:b3:15:
d5:b3:16:66:84:c0:ab:c4:5b:d0:fd:fd:89:c9:52:
34:cd:6b:97:ea:5a:56:6c:80:71:d4:e0:40:b2:fe:
6c:0a:2c:47:c5:a3:8b:7a:8d:a7:06:a2:10:9f:e3:
f0:a7:b8:a1:3b:f3:f7:14:3b:38:74:7a:47:12:0f:
36:2a:99:86:d0:d6:14:4c:c1:45:c7:06:cb:6e:2a:
00:c0:b8:7a:c7:cc:53:bd:ff:89:7a:da:2b:da:99:
f7:44:ca:63:8c:21:3a:44:ab:fe:01:e3:13:06:b5:
e9:0d:70:2b:67:30:f9:45:0f:d9:01:15:bd:e0:8d:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:46:FF:26:43:4D:28:82:64:71:DB:BA:56:A9:44:57:AD:AD:5A:BE
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/k0b_JkNNKIJkcdu6VqlEV62tWr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.148.0/24
88.216.108.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b8:d4:bd:29:b3:93:79:a7:eb:68:c1:63:d5:08:ab:6f:d3:
85:ff:5f:3f:b0:85:c1:d1:7c:36:66:93:67:fa:49:3b:7e:23:
20:29:90:f8:0f:69:8b:e7:39:07:6f:ca:35:cc:de:fb:e8:46:
fa:cd:62:75:19:d2:83:bc:6f:78:d7:e0:4b:ff:89:82:ee:40:
43:46:e7:78:19:d3:0b:e4:9f:15:41:ff:c6:50:49:aa:ab:0e:
fb:33:49:d3:29:12:34:5a:0d:d5:0a:7d:f2:9f:ce:9f:c3:f0:
7b:33:d2:6d:0b:d6:ed:50:c2:10:3f:02:24:e1:dd:3a:61:bc:
d4:5d:1d:a9:f8:ed:6e:40:42:7e:68:d2:a2:58:ea:2d:ad:c2:
b8:fe:ad:0c:56:ba:87:f8:4e:23:c4:30:62:2e:98:da:49:37:
10:62:06:e1:82:3a:2f:64:c8:05:69:64:b5:0f:dc:09:d9:09:
95:00:f5:e3:9a:8b:85:4b:6c:1c:f9:58:97:eb:86:d6:70:1a:
d0:f4:b3:91:a3:0f:d3:de:e7:49:33:fd:56:2b:79:c8:cc:1e:
de:b0:25:74:26:82:9a:1b:9f:fb:60:cf:c3:ca:54:bb:7f:03:
0e:8e:0b:8a:e8:b4:6c:4c:97:ba:a5:ab:67:16:47:a9:af:1a:
2d:99:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org