Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rx-8Iqj-PkR4tt4xSReG-1nriDc.roa
File: rx-8Iqj-PkR4tt4xSReG-1nriDc.roa (raw, json)
Hash identifier: 4BAa3cyGWT5eZlRlVlL78M1G008k6FLOeTe2Dq8pMuI=
Subject key identifier: AF:1F:BC:22:A8:FE:3E:44:78:B6:DE:31:49:17:86:FB:59:EB:88:37
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188FCA38F58A4F444D82D202EE100F4A25D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rx-8Iqj-PkR4tt4xSReG-1nriDc.roa
Signing time: Tue 27 Jun 2023 11:35:57 +0000
ROA not before: Tue 27 Jun 2023 11:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 88.216.128.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:a3:8f:58:a4:f4:44:d8:2d:20:2e:e1:00:f4:a2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 27 11:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af1fbc22a8fe3e4478b6de31491786fb59eb8837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:fe:72:bd:70:24:41:ec:bf:04:66:b6:56:
38:75:7a:85:ce:a2:6e:41:18:43:bc:14:37:fe:37:
9d:fb:4a:24:26:7c:d7:c4:26:ec:4d:62:e0:53:ea:
32:c1:4c:f0:01:41:1a:29:95:97:88:15:bd:0d:08:
9b:e7:f5:85:df:01:a5:88:a1:d6:62:46:86:6f:f8:
ae:fb:55:fc:a4:83:24:96:c8:ee:15:4c:c4:6c:bc:
a0:28:ee:57:b2:c1:e8:42:02:6f:6b:11:04:e3:f8:
f0:44:a7:0b:8f:ec:0b:88:db:8c:9a:42:fd:7d:23:
f8:61:13:a7:a1:88:30:fd:16:12:3e:fa:15:24:86:
0f:9c:fb:ca:0f:e2:28:b8:3e:97:b6:7b:6d:cb:65:
55:25:f4:6f:6d:9d:d2:90:6a:28:ae:96:58:35:d5:
14:7e:30:2a:f1:72:90:e4:cd:7d:ab:01:84:32:15:
10:4a:20:ee:a5:da:c2:e4:d9:2c:47:2f:35:07:14:
5e:74:9b:35:10:01:13:9a:4d:93:44:a0:3c:ae:b4:
2e:42:9b:a0:0a:ea:5e:02:d3:3b:12:a6:aa:79:e9:
e3:60:84:fb:25:da:e7:1e:6b:c0:a8:81:21:42:71:
c7:0b:c1:38:dd:56:58:72:ff:1e:a1:f8:1d:bc:b3:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1F:BC:22:A8:FE:3E:44:78:B6:DE:31:49:17:86:FB:59:EB:88:37
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rx-8Iqj-PkR4tt4xSReG-1nriDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.242.0/24
88.216.128.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f1:a7:1c:d2:f7:10:11:71:b2:a5:87:35:7e:81:01:dc:52:
04:26:4b:ae:7b:de:e5:f6:dc:99:7f:f9:5a:fd:ab:d3:eb:39:
19:c8:fc:fd:12:ee:8a:50:c3:9d:c0:36:5e:26:d1:70:74:c8:
8d:68:42:87:51:03:e2:ab:6d:16:27:03:0c:48:2c:0d:3e:ad:
62:41:fb:17:8b:de:fd:04:fb:42:42:bc:a1:95:ed:db:62:26:
0d:1e:59:29:dd:d2:aa:a4:fd:c2:f4:91:06:9a:5e:e9:e2:1a:
7e:39:38:c4:a9:ee:63:ba:82:57:b2:7f:87:28:f1:60:9f:1c:
c9:b9:5a:d3:ff:07:9c:bc:84:89:71:ff:99:83:a3:c2:7b:7d:
dc:0f:cc:b1:c0:a1:b2:33:10:ef:2e:e2:53:1a:79:9a:f6:b0:
78:56:87:ae:e0:ac:cb:05:77:84:c7:2e:77:74:fe:af:19:4b:
f7:7e:d8:98:ea:0f:c8:7a:8b:cb:dd:21:ef:07:86:fc:45:2e:
8c:30:cb:60:ab:dd:4f:85:17:b7:1d:e6:00:3e:0b:79:e1:5e:
04:f0:39:f5:a3:62:a5:4b:7b:b9:70:07:f9:b8:2c:41:5a:2b:
ac:a3:13:18:18:64:55:ae:a3:ec:39:94:c6:55:9e:96:e0:07:
4c:99:58:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org