Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mcxGOPny-uDCdULUzSR_t-NLVNg.roa
File: mcxGOPny-uDCdULUzSR_t-NLVNg.roa (raw, json)
Hash identifier: eBpAHAVhHgjmA3NDVqp4ACFcC4EqW0d1hJt3OGudHLM=
Subject key identifier: 99:CC:46:38:F9:F2:FA:E0:C2:75:42:D4:CD:24:7F:B7:E3:4B:54:D8
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFC4CFDF0E2B181CC44B4BAB77B9AC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mcxGOPny-uDCdULUzSR_t-NLVNg.roa
Signing time: Sun 01 Jan 2023 18:54:50 +0000
ROA not before: Sun 01 Jan 2023 18:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 88.216.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:c4:cf:df:0e:2b:18:1c:c4:4b:4b:ab:77:b9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99cc4638f9f2fae0c27542d4cd247fb7e34b54d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:16:17:14:d8:67:df:02:69:2a:b6:21:1a:
08:81:67:7d:14:73:23:ee:73:52:47:58:cf:c8:38:
e8:9f:9a:43:06:09:84:49:10:7e:15:a4:ca:ab:9b:
d9:49:b5:ec:eb:f9:15:32:3d:ef:64:01:91:0c:5c:
78:f2:f0:08:1a:00:89:22:7e:1b:7b:58:4e:2e:ce:
cd:0f:21:09:4b:77:8d:13:05:e5:46:52:3f:e0:ab:
29:56:b6:b9:d2:4a:ee:a5:d0:eb:ae:75:1b:0d:2c:
e2:44:b2:a2:2b:56:89:f5:c1:b4:42:6b:c1:57:4c:
e1:3e:4e:b1:92:61:7b:c5:60:57:e8:a6:7c:8d:62:
79:7c:6b:e6:18:9c:3f:db:df:37:8f:ca:14:41:46:
78:7b:79:32:69:ed:03:ef:93:ea:01:80:35:9d:0d:
8b:07:50:88:45:89:cf:31:9f:f3:33:13:2c:22:1d:
8e:13:19:20:6f:4e:9d:85:70:25:86:db:54:d8:3e:
f7:f1:61:ac:ea:98:56:cb:d2:db:03:d9:0f:e0:27:
93:24:f3:89:89:96:92:a9:09:dd:26:77:82:b5:4e:
49:96:38:15:a2:91:6e:e9:eb:a0:4f:1c:b1:19:23:
f7:da:a1:98:c5:d9:a0:ad:1c:f3:a2:b5:02:dc:9d:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CC:46:38:F9:F2:FA:E0:C2:75:42:D4:CD:24:7F:B7:E3:4B:54:D8
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mcxGOPny-uDCdULUzSR_t-NLVNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.1.0/24
Signature Algorithm: sha256WithRSAEncryption
94:4c:f0:c1:4f:89:1f:08:33:d8:72:d0:f5:31:44:ce:af:c3:
9d:19:de:56:c8:01:fd:1f:3c:a2:07:33:8b:8f:e7:7e:a6:50:
ab:47:df:2f:02:f8:e5:8a:71:3e:bd:27:cc:b1:d1:e3:fa:d1:
bb:89:2c:22:cb:83:f6:fc:d6:b6:74:c3:1d:e2:0d:e4:7e:8c:
3b:90:83:7b:3e:d2:74:20:b6:f1:ca:e9:a7:18:49:77:f7:24:
09:5c:48:90:15:2a:8a:62:a7:73:00:68:a8:3f:93:5f:1f:60:
a9:1e:2b:75:db:a4:6d:85:57:d3:80:2b:f7:84:3a:2c:88:bf:
e8:2b:f9:fc:b3:5c:3f:e3:af:30:db:8a:09:b4:9f:e1:b9:dc:
70:1c:e7:09:bd:89:f6:36:d9:0b:e5:b5:30:b8:7a:a0:12:57:
17:c1:e2:31:18:3f:de:47:05:dd:8c:a3:92:be:2d:98:57:37:
fa:8e:53:0a:ff:1b:49:9c:b3:6b:c0:88:09:30:c3:b9:37:b4:
d7:66:27:06:03:d1:4e:28:67:9f:90:e2:e9:04:bb:f0:cd:cb:
f8:42:82:56:61:9c:d5:64:dd:30:41:50:7e:3d:90:dc:08:14:
96:40:ad:58:2c:87:70:70:5f:7b:a0:ca:f9:5b:5a:cb:1d:d3:
f5:17:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:50 2023 by rpki-client on console-fra.rpki-client.org