Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lxv88wBBK7DNMrbgEd2qUvqn2Bw.roa
File: lxv88wBBK7DNMrbgEd2qUvqn2Bw.roa (raw, json)
Hash identifier: 5MhzRvD0NXWdJAZRXgbVdOaeaxaaYH2e4GAEfggl9iM=
Subject key identifier: 97:1B:FC:F3:00:41:2B:B0:CD:32:B6:E0:11:DD:AA:52:FA:A7:D8:1C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189DF1A6D334C347791A4274EBF506F5F41
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lxv88wBBK7DNMrbgEd2qUvqn2Bw.roa
Signing time: Thu 10 Aug 2023 10:59:58 +0000
ROA not before: Thu 10 Aug 2023 10:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 84.32.91.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:1a:6d:33:4c:34:77:91:a4:27:4e:bf:50:6f:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 10 10:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=971bfcf300412bb0cd32b6e011ddaa52faa7d81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:75:92:82:f7:70:64:05:3e:f5:96:20:79:
17:94:ef:67:c3:4f:d7:73:d0:8a:7c:90:b4:3b:50:
dd:fb:81:43:ad:7d:2e:4b:19:3d:c3:3b:46:da:6e:
c1:8f:8e:f5:ed:77:da:a4:d2:8a:f4:e1:02:18:07:
33:f9:8e:0a:61:27:83:5b:b4:b2:18:1c:62:d4:5e:
37:2f:06:9e:60:20:66:bc:bb:86:30:5d:43:45:bd:
85:6c:19:9f:19:8b:f1:4d:96:8e:b5:35:85:e0:06:
27:d1:05:b2:f9:08:96:77:17:20:70:82:50:76:7e:
65:02:44:8f:b2:5c:95:e9:ee:2a:ba:73:55:1c:29:
b4:6a:da:a5:82:13:5e:17:10:0d:bb:46:5d:30:07:
9a:ef:9e:03:e4:65:e3:9c:08:c9:59:60:cc:b2:98:
a8:13:85:74:e7:23:89:d6:cd:33:45:78:3e:3c:28:
de:a6:86:ef:52:19:9b:a7:b0:5c:2d:67:de:ad:7f:
75:95:fc:d5:46:76:27:fc:b5:16:d6:29:02:cb:40:
89:d8:5f:a2:d1:5b:6b:28:6a:af:8e:7f:59:f0:90:
fa:37:e4:cf:db:b1:88:69:66:5c:78:9f:94:10:c8:
74:1e:fc:03:fc:41:81:ff:a9:23:65:bc:a2:bc:d6:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1B:FC:F3:00:41:2B:B0:CD:32:B6:E0:11:DD:AA:52:FA:A7:D8:1C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lxv88wBBK7DNMrbgEd2qUvqn2Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.91.0/24
88.216.131.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:dd:57:89:55:eb:bc:43:db:10:01:d2:c2:71:e0:84:6a:10:
6b:75:75:a5:9e:5b:cc:a4:90:7a:c6:73:57:59:b7:8d:8c:7a:
5a:d1:88:30:fa:88:4e:34:6a:73:31:5c:84:f3:8e:49:b0:d1:
4f:5c:07:e6:d3:88:39:41:17:a7:e0:41:a2:35:f2:82:6f:a7:
31:aa:e6:2c:d2:68:41:64:c7:77:90:7a:16:32:f6:94:78:30:
94:f0:5a:af:88:ce:6b:42:db:3c:5a:5e:91:6d:c1:0c:cb:1e:
c3:1b:67:7e:df:3c:2d:0f:a1:92:16:23:b0:91:67:ae:70:0e:
23:c7:c0:04:df:01:6c:ac:88:88:9e:ad:36:76:73:65:d9:d3:
62:7b:b2:af:6e:fe:f9:bb:39:b0:44:94:59:95:55:9f:24:4c:
b3:8c:89:bc:67:52:ed:57:fa:82:8e:f7:c3:ac:ae:cd:ac:04:
d9:9a:c8:6a:2b:73:ad:de:58:f9:33:da:5e:3b:a9:d6:93:8f:
04:27:b0:5b:23:e8:34:63:fd:aa:d0:a9:0d:d1:50:2e:b3:d4:
d4:5b:c7:cf:f5:45:e0:53:5a:45:b0:ef:a9:df:fe:1e:11:04:
18:01:05:e5:e4:02:ca:10:5b:52:a3:7f:98:a4:3c:90:4a:f2:
72:64:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:41 2024 by rpki-client on console-ams.rpki-client.org