Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/quMc2qraVaU_ljTPj3hJud22mR4.roa
File: quMc2qraVaU_ljTPj3hJud22mR4.roa (raw, json)
Hash identifier: XGMXSJIpA7FFlCA7owTGtcem4JdGfaKDSu+96X/qIYI=
Subject key identifier: AA:E3:1C:DA:AA:DA:55:A5:3F:96:34:CF:8F:78:49:B9:DD:B6:99:1E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187E89DDB466108CB3432D19E82CAF7DF90
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/quMc2qraVaU_ljTPj3hJud22mR4.roa
Signing time: Thu 04 May 2023 21:14:32 +0000
ROA not before: Thu 04 May 2023 21:14:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 88.216.92.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
84.32.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e8:9d:db:46:61:08:cb:34:32:d1:9e:82:ca:f7:df:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 4 21:14:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aae31cdaaada55a53f9634cf8f7849b9ddb6991e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:58:e7:ba:41:40:b9:90:09:40:17:ba:6a:21:
38:44:30:b0:b0:38:c6:48:2c:1a:f3:63:66:e5:00:
e0:59:52:16:f5:c0:1a:5b:2c:74:ad:e7:3d:92:36:
fe:29:53:08:05:b9:6c:10:20:19:f6:b6:d9:83:1b:
e6:da:c2:18:5f:90:86:0f:7c:0d:49:05:3b:b5:bb:
97:2d:02:61:02:67:43:a6:f4:e2:e9:be:dd:e5:7b:
32:df:98:bb:7e:f8:37:d3:1e:31:b9:98:4b:d9:42:
21:7d:c9:23:2b:9e:c3:30:b6:1c:de:33:80:b5:f4:
72:2e:a2:c6:8a:70:fb:50:7d:e0:ca:a8:b3:ba:3f:
67:0d:7a:99:c4:71:10:4e:4e:ca:94:64:23:dc:5a:
81:56:8d:60:a6:66:8a:a7:65:89:69:de:c0:93:ba:
58:bc:ff:5f:bb:59:7e:3c:f0:d6:f6:69:5d:5d:b3:
cf:5e:7f:89:72:a2:44:27:cb:e9:52:40:36:a5:b8:
87:80:a8:01:8a:a9:d9:01:23:b9:7d:bd:89:35:a6:
14:66:1d:1f:14:d5:97:62:3c:3f:52:33:85:29:0a:
97:97:5d:ce:86:08:96:a6:41:7c:7a:57:ef:ea:65:
b0:e7:8c:05:4a:95:3a:97:83:6c:aa:0f:3f:d5:81:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E3:1C:DA:AA:DA:55:A5:3F:96:34:CF:8F:78:49:B9:DD:B6:99:1E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/quMc2qraVaU_ljTPj3hJud22mR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.148.0/24
88.216.36.0/24
88.216.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:69:1e:8d:a6:57:4a:16:cc:b3:08:ef:36:67:d4:2c:03:d8:
7e:36:1f:f8:72:1a:03:ed:c8:50:ec:22:91:2f:1a:d7:6f:fd:
66:35:ea:fd:0f:75:a2:a6:76:90:00:fe:57:d1:fb:8a:a3:b5:
f1:86:0d:26:c3:e0:b2:9a:99:73:53:1b:1d:24:e9:a4:a9:0c:
3a:f8:57:63:9f:ab:c7:61:bc:0e:87:ac:d5:f1:b7:78:51:d3:
c9:d3:91:a4:88:36:e4:e7:82:90:91:55:f9:4f:10:10:dc:4e:
15:43:4e:a2:e4:28:3c:78:c3:ff:b5:df:fe:60:9f:a2:d8:01:
f3:21:36:09:38:23:08:bc:84:6d:31:32:5e:96:32:22:ed:b0:
69:ce:18:a8:a8:6e:f9:47:92:30:b7:f6:59:dc:72:66:3c:d2:
85:a4:12:e9:cc:f6:92:90:a1:e9:fd:50:f6:5a:fa:11:ee:8b:
11:09:16:98:7f:a2:9d:ed:73:53:3a:89:7d:8c:5d:f7:d1:e3:
7d:3d:38:aa:85:f6:e1:39:97:a3:73:95:0f:bb:0f:90:45:f7:
18:10:fe:11:00:b5:d3:77:22:33:0b:e0:54:2c:66:12:3c:56:
ff:f3:35:16:05:64:c9:bf:4f:a9:ff:96:83:7c:9f:25:82:ec:
77:2f:a8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org