Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qEDLFQZomxjULMDx_X2wIJ3NtUA.roa
File: qEDLFQZomxjULMDx_X2wIJ3NtUA.roa (raw, json)
Hash identifier: xNXs1a9DG3UfsEvlAZ/si2zFd6ajy05QwTO/hpVNhEY=
Subject key identifier: A8:40:CB:15:06:68:9B:18:D4:2C:C0:F1:FD:7D:B0:20:9D:CD:B5:40
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFBFDDA16E6CA732B80CAB01EF7FBE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qEDLFQZomxjULMDx_X2wIJ3NtUA.roa
Signing time: Sun 01 Jan 2023 18:54:49 +0000
ROA not before: Sun 01 Jan 2023 18:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56876
IP address blocks: 88.216.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:bf:dd:a1:6e:6c:a7:32:b8:0c:ab:01:ef:7f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a840cb1506689b18d42cc0f1fd7db0209dcdb540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:40:71:c0:d9:7c:60:9c:71:df:32:97:72:
93:a2:df:8b:81:92:fd:db:ec:19:4e:2a:41:a0:70:
9c:6f:3a:8c:26:0b:74:a5:25:29:cc:6c:22:ec:2c:
4f:c9:4b:74:4a:f0:20:a1:70:3a:39:d3:94:1b:04:
9a:19:2d:d7:96:96:a6:8b:03:d8:04:1f:38:6a:e2:
4a:92:ce:0b:6e:80:8e:45:90:42:ae:ce:c5:7b:b3:
cb:7f:c7:77:1c:84:f7:17:36:2f:44:7c:2a:50:9f:
26:83:aa:3d:30:79:29:22:90:4b:36:50:03:d8:54:
70:24:80:18:0d:7b:ff:28:b0:64:bf:f6:cb:55:27:
e5:35:22:af:1d:a3:85:d6:0e:4b:0b:4b:7f:4e:0b:
05:16:69:f0:75:86:d2:89:d6:39:03:fe:3d:79:b9:
3e:3b:cf:d8:d6:3f:14:23:02:7d:21:46:0f:e2:66:
4b:d6:1d:10:3f:0a:06:e0:9b:4b:b6:12:ec:79:a1:
2c:0b:23:a1:ba:1c:b6:29:15:58:8e:c8:f5:55:e3:
fe:96:8d:d7:6f:45:70:8d:34:5e:fc:78:01:06:3d:
83:8a:a9:61:ae:0e:41:03:72:46:b8:f7:39:6c:f4:
a0:4d:36:80:07:ab:77:67:9e:4b:ba:72:f7:cf:14:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:40:CB:15:06:68:9B:18:D4:2C:C0:F1:FD:7D:B0:20:9D:CD:B5:40
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qEDLFQZomxjULMDx_X2wIJ3NtUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.216.0/22
Signature Algorithm: sha256WithRSAEncryption
41:14:dd:c5:4e:1d:fe:25:ad:f2:76:f2:d9:2d:4b:18:79:ac:
cd:f6:60:ff:4e:cd:bd:ca:31:8d:ac:1d:27:1a:80:ed:18:2f:
3b:df:73:51:05:2d:80:27:51:52:04:f4:bf:f8:14:82:73:b0:
29:4d:f8:0b:0d:e9:32:6d:ec:9e:ed:07:48:8a:69:30:f5:a0:
73:04:6e:53:13:c6:08:43:06:1e:95:9a:3f:8c:a5:fd:09:48:
79:03:1f:a3:02:5f:38:7f:0a:6f:b3:0b:f5:6f:0c:38:3d:3f:
fd:b7:d0:93:90:05:e1:e7:43:26:a2:76:1b:ba:21:22:37:30:
65:34:24:0c:32:18:98:36:dd:03:dc:af:66:50:f7:4b:42:cb:
76:03:77:9c:1c:f9:87:39:5e:84:ff:74:19:e5:0e:a8:fd:01:
f5:07:6f:14:81:d2:b4:16:89:48:ce:d9:37:34:54:d2:81:8a:
fc:83:35:c0:5b:09:20:86:59:b7:6e:2a:4d:03:2f:73:4a:5b:
38:ae:e0:a7:b6:f4:37:f0:2e:ef:41:b2:5a:9d:6e:c0:1b:7e:
67:33:9c:f9:b7:39:bd:6d:7a:38:08:da:bd:ea:da:7b:c9:de:
2e:af:de:e9:c7:ed:66:d5:57:8d:d7:83:d9:35:d5:f0:98:f3:
b9:4b:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org