Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pForTBaMULTRqTP9lE0KfPFNsls.roa
File: pForTBaMULTRqTP9lE0KfPFNsls.roa (raw, json)
Hash identifier: BRc90JAnqMXa3saQYZleU2QrW8S3H7UN5KafVUWieV4=
Subject key identifier: A4:5A:2B:4C:16:8C:50:B4:D1:A9:33:FD:94:4D:0A:7C:F1:4D:B2:5B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187852BEFBF3E82FA75F565FD0036EF8966
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pForTBaMULTRqTP9lE0KfPFNsls.roa
Signing time: Sat 15 Apr 2023 13:47:41 +0000
ROA not before: Sat 15 Apr 2023 13:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 88.216.133.0/24 maxlen: 24
84.32.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:85:2b:ef:bf:3e:82:fa:75:f5:65:fd:00:36:ef:89:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 15 13:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a45a2b4c168c50b4d1a933fd944d0a7cf14db25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:e5:6d:fe:cb:20:ae:fb:59:30:41:f1:80:
5c:f6:57:d9:20:99:cb:a7:39:97:af:c9:fc:bf:ef:
44:17:6f:cb:9e:fa:c7:43:c7:8a:19:fc:da:63:36:
a8:5d:1c:a9:f2:ef:ce:fe:9e:f5:c9:c9:1c:7b:96:
18:84:25:87:54:d7:42:77:57:21:be:ae:1b:78:54:
7e:92:df:23:bc:80:67:96:52:63:6e:13:70:67:84:
26:24:02:8e:0b:ce:60:6b:8d:4b:fc:0c:ca:bc:21:
fc:d5:7f:8e:ff:2a:e3:bd:3f:bb:fd:67:83:15:f9:
0e:45:a8:6c:c1:2a:ba:56:9d:e2:a1:6b:cf:dd:1c:
f3:08:34:88:4c:7b:be:c3:9a:58:60:1e:fa:42:e9:
b2:73:b6:5f:c8:09:6c:5b:08:f3:df:78:63:40:ce:
02:dd:d5:2e:07:22:2a:f6:15:a6:8c:3e:25:e7:36:
2e:e0:34:c1:78:69:d4:9a:16:78:a6:d0:7b:17:e7:
a9:89:4f:6a:3c:76:99:59:0a:6f:6b:12:76:41:26:
d9:04:94:20:8d:57:95:51:6d:a8:82:7d:b0:db:86:
68:e8:88:16:55:d0:08:56:ff:ee:f9:93:0a:46:67:
9a:2f:53:af:b9:cb:31:a1:78:f8:b4:0c:86:ca:e9:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5A:2B:4C:16:8C:50:B4:D1:A9:33:FD:94:4D:0A:7C:F1:4D:B2:5B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pForTBaMULTRqTP9lE0KfPFNsls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.40.0/24
88.216.133.0/24
Signature Algorithm: sha256WithRSAEncryption
75:af:42:5c:a5:0d:8e:4f:2a:d5:55:23:12:cd:b6:ea:84:ef:
04:72:18:37:c2:65:8c:72:9b:3f:06:2e:4b:5d:4f:35:cc:cf:
e7:cd:97:74:a2:f2:f3:85:8e:03:12:5a:5b:27:d7:c7:16:e8:
82:d3:91:e0:f2:0c:57:c5:c0:5e:5d:46:c2:72:c6:a4:4e:ff:
b6:78:5a:c5:a0:a1:28:0b:32:78:07:2b:cc:c3:de:06:a0:22:
4e:8e:34:6e:fb:91:66:02:38:83:ba:59:84:77:8e:e9:31:03:
1c:d4:e0:59:af:54:17:30:d6:fd:99:af:4b:1b:e3:67:da:45:
96:87:6f:cc:7e:43:8a:1f:6c:e3:ff:e5:dd:22:fe:23:5f:98:
db:c9:ec:74:37:66:97:72:f6:69:a4:7e:26:3d:df:13:4d:84:
a7:13:eb:4d:88:f1:44:3f:1d:6e:bf:ad:06:00:8c:7d:17:e2:
a2:41:c2:c2:3d:2f:b7:bc:fd:7b:33:c8:1f:1b:ba:b7:eb:72:
4a:97:c9:12:d2:85:ee:38:f4:52:c6:17:a7:83:4b:d6:5e:79:
48:4b:4b:bb:b8:f3:38:b9:35:6f:ab:6a:55:72:d0:8e:f1:01:
b5:c3:70:32:6a:c0:62:34:1f:49:d8:76:ab:43:81:a5:13:8e:
b7:26:a7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 8 18:37:20 2023 by rpki-client on console-ams.rpki-client.org