Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/oSYBXBnU9LxByoq0ofRL20M5dIc.roa
File: oSYBXBnU9LxByoq0ofRL20M5dIc.roa (raw, json)
Hash identifier: TUN9lENzVeHx/X0t4TPNycJmgzIa12p2GAivI9X9plo=
Subject key identifier: A1:26:01:5C:19:D4:F4:BC:41:CA:8A:B4:A1:F4:4B:DB:43:39:74:87
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018DE5B25E173487163606C54DBE73569E91
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/oSYBXBnU9LxByoq0ofRL20M5dIc.roa
Signing time: Mon 26 Feb 2024 13:54:48 +0000
ROA not before: Mon 26 Feb 2024 13:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 84.32.66.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 06:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:b2:5e:17:34:87:16:36:06:c5:4d:be:73:56:9e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 26 13:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a126015c19d4f4bc41ca8ab4a1f44bdb43397487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:3f:50:be:a4:a0:14:29:de:67:47:13:17:
05:cb:c9:25:e6:00:76:b9:f2:49:d5:c0:a7:51:18:
56:23:e6:af:75:97:df:3f:3d:12:30:cf:5c:b3:76:
98:f3:5c:14:9b:4d:38:9a:23:6a:92:0c:b5:a5:f7:
57:da:18:22:cc:32:44:88:a8:22:78:9e:c7:e0:cf:
cb:0d:5d:6b:7b:48:38:1a:17:a1:bc:15:81:ab:54:
b5:6f:87:01:a7:b5:7b:27:92:bd:01:44:86:b1:94:
a2:17:3b:5c:75:7a:ca:2b:02:86:18:14:ed:92:29:
3d:77:bd:17:55:c6:ec:14:5d:29:2f:04:6e:83:14:
ae:04:00:6e:8a:fe:d5:a3:69:87:b3:12:bc:51:48:
9e:63:cd:08:07:d2:bf:d6:94:55:31:3c:c8:1c:37:
10:45:37:8f:f8:22:98:e0:d7:5f:1c:2f:82:be:a7:
94:ed:40:8e:e4:02:15:5c:57:94:e4:10:0a:22:1b:
6e:a8:f4:d8:ab:40:41:b7:b1:17:9b:64:8c:b2:89:
7a:df:7e:46:4c:9d:48:ab:ed:36:f1:0b:c4:53:77:
c9:5b:38:c5:07:5d:d5:c8:98:c2:af:d0:82:e9:20:
f6:39:93:f9:00:35:bc:04:6b:ae:4e:f0:b6:5e:84:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:26:01:5C:19:D4:F4:BC:41:CA:8A:B4:A1:F4:4B:DB:43:39:74:87
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/oSYBXBnU9LxByoq0ofRL20M5dIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.66.0/24
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:72:d2:a4:88:de:e0:23:cf:d3:8a:1b:c0:a5:6d:74:00:4b:
0c:a3:8d:78:a1:a5:a6:44:56:9a:24:32:ad:ae:0e:3e:1f:58:
52:98:26:0e:18:e8:6c:44:34:49:b6:4e:50:2e:7c:22:1c:ed:
8b:7a:a2:c0:b5:27:58:d3:d9:01:ea:78:8d:61:82:b9:b0:ba:
9f:e3:e0:fd:6a:af:6e:3e:73:2a:8c:a8:6c:ca:2a:66:df:41:
d9:83:e2:7e:77:28:b9:c0:f1:13:13:19:16:b7:64:97:06:46:
62:c3:69:59:02:56:21:9b:6d:9e:d1:f7:da:90:9f:72:b1:fe:
73:d7:6c:78:50:cb:3d:c2:41:59:82:9e:80:b0:71:1b:f3:88:
66:d1:25:e0:52:66:a6:01:38:4a:ab:71:a9:54:92:62:53:19:
64:3d:af:30:be:47:b8:ca:a0:f5:9d:ba:7a:b3:23:9a:41:17:
ff:5d:6a:c7:d7:d3:08:cb:98:e5:37:09:0d:34:f5:77:36:38:
14:b9:ba:14:c6:f1:fb:53:16:11:af:e3:6a:29:c8:b5:14:b0:
17:cf:60:f9:41:ca:32:5f:9f:46:f8:b9:c6:dd:0f:16:f0:37:
70:f1:e6:90:e6:49:a2:71:8c:32:e5:f3:f5:5f:e7:22:12:ea:
a6:20:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 08:01:48 2024 by rpki-client on console-ams.rpki-client.org