Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rcuA8MYVdlhm349zbbEl5zSj0bI.roa
File: rcuA8MYVdlhm349zbbEl5zSj0bI.roa (raw, json)
Hash identifier: UxIYM/iDxp9EejUhIu34LJCWjiMYvcUQy23SJbz1t20=
Subject key identifier: AD:CB:80:F0:C6:15:76:58:66:DF:8F:73:6D:B1:25:E7:34:A3:D1:B2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018DB108D3B33E6FF95669594266716E26C3
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rcuA8MYVdlhm349zbbEl5zSj0bI.roa
Signing time: Fri 16 Feb 2024 08:29:22 +0000
ROA not before: Fri 16 Feb 2024 08:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55081
IP address blocks: 84.32.210.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 10:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:08:d3:b3:3e:6f:f9:56:69:59:42:66:71:6e:26:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 16 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adcb80f0c615765866df8f736db125e734a3d1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:22:e6:f9:14:9d:bd:40:07:58:d4:03:b5:b4:
23:61:47:86:bd:e0:3c:d1:d8:13:41:22:fc:24:75:
6f:77:d3:c5:6b:a6:fb:bf:4a:da:2d:d0:95:c4:e6:
cd:d9:58:63:0e:c5:77:f6:41:5d:4a:a0:2b:37:f1:
03:fb:22:52:98:bf:36:0f:8d:7a:1d:30:42:e7:fc:
50:96:00:b1:ae:61:9c:44:53:9c:2a:7b:58:9c:79:
7e:60:0b:d1:98:2b:d1:76:18:c0:cc:72:65:35:e1:
d6:e0:38:6d:b1:23:98:eb:c0:5f:69:81:af:1f:93:
33:46:14:51:f8:1d:85:e8:7d:49:8c:18:87:fc:87:
81:16:9c:3d:26:7e:37:aa:7a:7d:fc:89:c5:90:4f:
e1:8b:ae:61:fe:b4:a2:02:a9:40:b8:23:89:a3:5b:
59:d0:f5:96:c1:2f:7c:92:9e:4e:c1:0c:ab:b8:4d:
a8:cc:5b:87:b6:27:4b:29:b9:f8:89:70:ac:80:7c:
0d:f6:b8:0a:7c:4a:d4:f5:24:37:06:15:e5:bf:90:
a3:0b:b2:f8:b4:ff:f5:39:ce:74:10:d9:a7:8a:6a:
df:86:81:ae:da:4c:a9:bc:5f:92:c6:dc:d4:48:6c:
e2:60:67:2f:d1:6d:2a:ab:a5:b9:75:ac:78:2c:14:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CB:80:F0:C6:15:76:58:66:DF:8F:73:6D:B1:25:E7:34:A3:D1:B2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rcuA8MYVdlhm349zbbEl5zSj0bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.210.0/24
88.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
00:39:b6:cf:34:83:16:05:09:59:bf:1d:9f:e2:ed:f2:4f:61:
f7:dd:5b:02:41:fb:bd:a8:43:97:d8:30:3c:5a:02:cd:7b:67:
08:ad:a2:0f:b1:a6:44:cf:9a:ce:bc:e8:44:20:80:23:1e:b5:
c7:e1:d3:25:6d:8f:66:b9:2e:00:a4:0b:5c:ca:92:50:44:c1:
67:30:7b:20:46:59:ad:78:d1:59:ef:ac:10:0a:9f:e7:dc:27:
2a:db:30:86:6c:cf:d2:7b:c0:e3:40:1b:45:29:65:7e:b4:fa:
0d:e4:9f:d1:d9:0e:8c:af:2a:b4:3b:e7:9a:38:21:3b:8d:2a:
1b:6d:44:54:46:c1:1e:e0:f0:7d:19:8f:8a:a7:b1:45:de:fe:
43:42:90:6e:11:68:e5:26:ed:15:ee:f1:85:f2:d1:73:9f:f8:
70:82:a0:9e:73:d8:af:8b:4c:7d:7a:d6:a6:c6:6c:77:01:d9:
2b:f6:35:2c:a5:99:dc:8d:32:51:14:18:e0:69:2f:bd:62:f9:
a4:4a:f0:76:51:18:1b:25:fd:40:70:26:76:0a:b0:ca:d3:cf:
81:ad:ad:bb:25:04:7b:1e:59:00:61:82:b2:e1:31:1f:3b:7e:
dd:f3:75:16:fa:3b:20:23:ee:53:11:2b:e5:cc:51:45:86:ac:
22:2c:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org