Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q8u8CDZmQhvGq-dxriVWBH4R-_o.roa
File: q8u8CDZmQhvGq-dxriVWBH4R-_o.roa (raw, json)
Hash identifier: oVtYTejeNP28YLtQ2SZsJ03asv6gEsqSarEkQEls3EU=
Subject key identifier: AB:CB:BC:08:36:66:42:1B:C6:AB:E7:71:AE:25:56:04:7E:11:FB:FA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFD0DBC5C6AC9AE0105A34A4986127
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q8u8CDZmQhvGq-dxriVWBH4R-_o.roa
Signing time: Sun 01 Jan 2023 18:54:54 +0000
ROA not before: Sun 01 Jan 2023 18:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 84.32.70.0/24 maxlen: 24
88.216.185.0/24 maxlen: 24
88.216.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d0:db:c5:c6:ac:9a:e0:10:5a:34:a4:98:61:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abcbbc083666421bc6abe771ae2556047e11fbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:7c:bb:e7:cf:d1:45:84:92:5d:08:ae:5e:
35:26:6c:9c:f7:ff:c3:e9:62:e9:af:c9:43:e1:ca:
6b:6c:27:ab:75:95:ea:b6:10:e7:fa:d9:ad:a7:85:
50:24:66:cf:3d:35:fc:70:d7:b2:c5:22:96:e5:76:
1f:66:03:22:8b:5d:5d:35:b7:03:b1:8d:14:49:13:
ce:0f:d3:53:96:41:6a:19:ea:2b:24:34:55:65:da:
b9:e7:80:a3:00:33:e3:b3:5e:30:57:aa:96:3f:b7:
97:40:4a:ab:05:ac:3a:0d:4c:00:10:b1:33:11:8b:
10:01:23:6a:95:64:f4:57:9e:84:ce:b1:11:7a:aa:
36:c3:0a:e4:79:9f:33:85:38:a5:f4:09:9d:0f:9a:
c4:65:bc:d2:1f:03:65:72:ef:6d:e2:5b:1c:35:fb:
b6:70:81:d9:ea:5f:55:64:3f:7a:9e:c6:28:32:f0:
c7:61:16:4d:b3:19:ad:39:1c:88:5a:f8:3a:41:f9:
41:8e:51:11:79:4e:0b:b2:f2:a2:fc:44:ac:34:48:
e2:e1:69:f7:a0:dc:8c:66:f6:d5:19:16:af:c9:c7:
0f:f5:61:50:b5:0f:90:ba:5f:b7:80:23:b2:e7:83:
86:65:c3:dc:2c:4d:71:ce:26:94:f4:bb:b5:0b:e5:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CB:BC:08:36:66:42:1B:C6:AB:E7:71:AE:25:56:04:7E:11:FB:FA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/q8u8CDZmQhvGq-dxriVWBH4R-_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.70.0/24
88.216.96.0/24
88.216.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7e:29:f3:ee:3b:97:e9:4c:41:1f:ad:8f:a8:45:6a:90:90:
16:b7:6e:03:f1:06:a8:46:61:c6:00:11:e7:f4:96:eb:6e:4f:
8b:35:ca:3d:4f:93:dc:03:02:01:d8:28:e9:9c:28:f0:82:d5:
da:53:17:44:c5:50:fb:f6:26:33:f2:d1:b8:71:d5:9b:9d:8f:
0c:03:e0:a6:69:4d:c9:41:b2:74:63:8b:5c:b8:ea:49:bf:95:
42:ea:38:7a:6b:70:88:e0:8a:82:67:36:91:f6:ef:24:27:09:
44:1f:32:46:22:a5:ea:ef:32:d3:e2:5d:81:6a:fa:bb:43:f6:
bc:ba:3d:be:8d:7b:0c:35:45:ac:c1:fd:60:d3:14:22:5a:8c:
40:e5:23:9d:f9:cb:81:bc:43:67:b1:75:78:dd:8c:2c:78:fb:
12:12:7a:47:05:5f:40:8d:52:b9:7b:2d:0a:6d:d7:98:ff:89:
38:e0:9d:ae:19:a2:2b:0a:9e:cb:85:40:29:fe:f9:10:b7:99:
3d:38:71:9a:57:39:11:be:e6:6e:44:31:e6:84:dd:d8:05:d2:
b2:e4:41:cf:f7:88:1a:6f:0a:8f:2f:db:0a:61:00:e1:c5:1b:
6a:ad:b3:a2:00:92:2e:59:ea:19:0b:a1:e5:a8:f8:57:39:5b:
a1:63:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org