Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/l4DDMhN0Ai0UgJUgqK6g9ZKGe7g.roa
File: l4DDMhN0Ai0UgJUgqK6g9ZKGe7g.roa (raw, json)
Hash identifier: TFqKJjIcfY5VKv5RDvSOMetKLpHmLp/uHmeQ5xfj52g=
Subject key identifier: 97:80:C3:32:13:74:02:2D:14:80:95:20:A8:AE:A0:F5:92:86:7B:B8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018682C5EEEAC55EEEB033C6D0F50A19A399
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/l4DDMhN0Ai0UgJUgqK6g9ZKGe7g.roa
Signing time: Fri 24 Feb 2023 09:34:15 +0000
ROA not before: Fri 24 Feb 2023 09:34:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.90.0/23 maxlen: 24
88.216.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:c5:ee:ea:c5:5e:ee:b0:33:c6:d0:f5:0a:19:a3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 24 09:34:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9780c3321374022d14809520a8aea0f592867bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:87:92:5c:b5:8e:42:0d:ea:01:85:32:d4:21:
56:8d:07:f1:81:bb:54:5d:5e:19:26:9e:cd:86:3e:
86:25:45:bc:96:be:4b:0d:87:5e:16:a6:0c:ab:19:
c4:de:9c:65:78:fa:4e:53:80:22:eb:99:8a:13:65:
90:90:66:8a:cc:37:15:22:e3:74:aa:a2:f3:c3:cc:
f7:0f:f0:b2:e2:48:e8:be:b4:4e:ff:04:76:9d:bc:
fb:cc:21:ac:5b:34:26:8c:48:8e:d7:9b:00:4c:23:
74:85:87:59:6c:35:2b:12:4a:3e:84:43:e2:3a:b1:
e0:11:82:b2:63:5c:66:0d:52:e3:a2:e3:31:6b:ad:
58:7c:9c:88:10:b3:ed:6d:f5:35:53:0f:df:bc:99:
f7:00:d8:44:0f:b5:d6:f8:e0:76:8a:15:d9:8e:80:
b2:6f:73:08:fc:03:f4:b6:83:e3:1e:65:dc:92:a9:
c3:ac:5a:0b:0f:0e:ab:b1:e1:b5:df:11:d5:f6:44:
67:e8:96:fc:87:21:03:db:33:ae:9a:78:ce:4e:cd:
29:b9:3f:39:24:3c:c3:8a:6b:f1:54:2f:5a:0c:1f:
f5:3b:67:84:df:db:fe:f4:35:8d:ea:7a:e8:72:23:
a8:72:01:7c:9c:e2:06:a9:10:71:4a:0a:5d:4e:fd:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:80:C3:32:13:74:02:2D:14:80:95:20:A8:AE:A0:F5:92:86:7B:B8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/l4DDMhN0Ai0UgJUgqK6g9ZKGe7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.90.0/23
88.216.135.0/24
Signature Algorithm: sha256WithRSAEncryption
51:33:3f:29:78:4e:35:be:92:16:f4:4e:43:d0:4c:d2:42:8b:
76:6b:a3:e6:59:67:c6:c3:ac:cd:ae:ea:54:bc:a3:05:cb:2a:
cb:97:55:76:6e:63:e4:66:1a:8a:ab:5e:8b:11:e0:2f:fa:34:
15:ae:fe:64:50:0b:5b:96:e7:2e:19:25:76:db:98:d6:22:44:
32:45:d0:36:cc:1d:61:a4:8e:62:64:ea:40:9b:35:50:36:63:
6e:09:ec:37:88:ed:dc:23:d1:6b:75:ad:f8:29:cb:67:c9:1b:
e2:0d:e7:51:5c:29:6f:39:5d:d2:5b:e3:27:58:8b:38:57:32:
a9:23:48:fe:f9:c3:02:82:39:fb:18:02:58:cd:66:9e:bd:6c:
26:64:f6:c6:bc:9e:16:ab:48:05:51:8d:4d:e4:4d:5d:e3:8f:
65:9a:b3:81:67:93:43:78:91:9f:b1:ee:f4:eb:1e:3e:bf:5c:
1a:0d:18:a1:ee:f6:4c:08:d1:29:59:2c:0e:a8:fa:ec:27:c7:
72:68:3d:97:9f:4c:87:36:d4:a2:3e:2d:61:13:cc:22:22:7a:
4e:c8:d3:3e:1a:2a:98:1b:7e:b6:fe:cd:52:88:30:76:19:85:
f5:29:20:2f:09:42:44:48:8d:a7:81:1d:00:ee:02:c3:a8:d8:
9d:75:1d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:50 2023 by rpki-client on console-fra.rpki-client.org