Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nZk7ymyr826r4E50C1hRjk_8zJ8.roa
File: nZk7ymyr826r4E50C1hRjk_8zJ8.roa (raw, json)
Hash identifier: gmo9RPNkM6HdcIVM3HsJJDV8tKuljEexVdRgZxtp2w8=
Subject key identifier: 9D:99:3B:CA:6C:AB:F3:6E:AB:E0:4E:74:0B:58:51:8E:4F:FC:CC:9F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFB6AF17D9AC1B0E411475AB293157
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nZk7ymyr826r4E50C1hRjk_8zJ8.roa
Signing time: Sun 01 Jan 2023 18:54:47 +0000
ROA not before: Sun 01 Jan 2023 18:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33922
IP address blocks: 84.32.116.0/23 maxlen: 24
84.32.114.0/23 maxlen: 24
88.216.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:b6:af:17:d9:ac:1b:0e:41:14:75:ab:29:31:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d993bca6cabf36eabe04e740b58518e4ffccc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:34:ee:8a:58:4f:88:69:be:0e:82:35:25:4d:
0d:ed:b4:57:ad:9b:27:64:f4:77:28:96:fc:e6:ea:
40:79:d9:6b:1b:bc:79:fd:6d:aa:01:17:27:22:97:
89:11:76:dd:08:92:e9:98:18:fb:a0:91:d2:21:d9:
01:c1:00:17:87:9b:39:e2:4a:8a:64:7b:a4:5b:7e:
5a:55:97:0d:c8:97:95:50:41:29:96:44:ea:f4:0a:
7d:91:56:2e:c7:72:f3:07:27:cf:70:55:8d:98:1e:
3e:0e:03:eb:4b:03:e0:f4:38:35:1e:b1:bd:b6:24:
bc:ef:7b:88:67:8a:27:39:32:5c:26:22:09:7b:b0:
a3:a3:11:ec:77:e0:ff:7f:97:cc:b4:99:13:f0:d1:
6a:dd:78:bf:14:8d:4d:a9:a1:2b:59:5e:db:a6:90:
1d:fd:ff:5f:ae:d8:72:15:94:5d:3b:a3:d2:46:47:
8f:0f:28:c0:bd:91:8f:bf:81:3c:d8:ad:88:51:5e:
65:f1:3d:aa:79:79:68:13:13:a4:54:6c:b0:0b:35:
2f:ef:22:13:4d:11:0e:d4:fa:ad:4e:14:42:35:a5:
4d:36:0a:f0:a1:de:eb:10:fd:4b:4b:9c:ba:80:a7:
13:cb:ef:7f:51:93:c8:d4:44:67:63:74:9c:6f:37:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:99:3B:CA:6C:AB:F3:6E:AB:E0:4E:74:0B:58:51:8E:4F:FC:CC:9F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nZk7ymyr826r4E50C1hRjk_8zJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.114.0-84.32.117.255
88.216.148.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:08:12:9d:71:3b:c2:68:c5:36:9f:03:77:b1:21:f8:78:ec:
b7:08:3d:7c:88:5c:36:7e:3d:89:f8:5a:dd:90:12:65:87:53:
1c:d7:c4:eb:e5:ee:02:0e:d5:00:14:b3:55:72:bb:98:df:c1:
99:07:40:a1:6f:04:dd:28:15:b2:a0:1c:5c:e7:9a:3e:89:04:
6c:43:a0:e5:34:00:c7:83:6d:6a:49:d0:9d:17:7f:43:49:70:
ae:2f:22:4b:a2:07:ad:6d:93:7f:45:7e:23:4d:30:db:a3:21:
1f:12:98:ca:5d:fc:b9:c5:01:be:7d:2f:f6:9d:ce:d1:da:b2:
e8:a5:d5:dc:05:b6:50:21:2e:c8:0c:0e:c7:ef:2c:df:b9:8a:
42:08:eb:b1:0b:81:20:58:fa:6d:5b:e0:a9:7a:ff:d5:81:ac:
f5:0b:7f:42:da:c2:8f:d1:7b:59:19:59:fb:04:07:f7:1b:51:
f5:f1:47:d6:73:b5:2d:2d:6a:47:42:fd:5a:0a:4c:b3:03:c6:
f0:f5:aa:6a:bb:39:30:50:5e:6d:c7:16:e9:ab:db:02:0d:dc:
dd:8b:29:c4:01:5a:c9:4b:e3:3e:d9:4a:08:7c:1b:89:f1:29:
68:92:1e:b2:d8:a2:1a:14:9f:1a:98:cc:75:2d:d8:3a:d6:07:
6b:c8:0b:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 31 12:17:25 2023 by rpki-client on console-fra.rpki-client.org