Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/s1TLoaztP38-l62kGmxRXgi2F2M.roa
File: s1TLoaztP38-l62kGmxRXgi2F2M.roa (raw, json)
Hash identifier: uu66N7tI2HtlGyGUBqP5NRZ/hU1dDFMYvCgTpAOpLZA=
Subject key identifier: B3:54:CB:A1:AC:ED:3F:7F:3E:97:AD:A4:1A:6C:51:5E:08:B6:17:63
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187B46490003805412332E452DE1382EE06
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/s1TLoaztP38-l62kGmxRXgi2F2M.roa
Signing time: Mon 24 Apr 2023 17:51:41 +0000
ROA not before: Mon 24 Apr 2023 17:51:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 88.216.104.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b4:64:90:00:38:05:41:23:32:e4:52:de:13:82:ee:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 24 17:51:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b354cba1aced3f7f3e97ada41a6c515e08b61763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0a:d4:4a:7a:a7:4f:b0:1d:9f:95:d0:f1:cb:
2b:81:87:5d:3f:7c:82:b7:5e:6f:a7:9c:2d:6c:52:
19:70:ef:47:29:6e:84:d0:ee:30:86:e0:3c:06:bf:
00:d8:72:f1:50:aa:f7:76:4b:33:81:8c:ce:7f:da:
25:fc:7c:82:45:fc:55:3e:01:c4:f8:43:b6:57:56:
88:7f:69:09:ba:55:ad:c0:7e:29:ca:16:b3:91:d3:
bd:0d:4a:4f:0c:7a:12:05:52:0e:b3:6a:49:c4:6e:
9d:19:4a:ec:1d:2e:d3:1e:e3:87:68:b8:c6:63:1e:
9e:6c:d9:45:ee:5d:d7:82:83:88:ef:0a:5e:f2:21:
b3:f4:bc:6a:ff:eb:1f:2c:07:37:ef:66:44:0a:44:
44:3b:a1:96:38:22:e3:b5:c1:1c:c0:5c:eb:d9:b0:
8f:6f:db:ef:66:f8:a0:1e:db:1f:0d:23:23:d4:bb:
03:8d:c8:77:0b:3e:b7:4f:8a:4c:a9:25:f1:f1:6a:
f8:b2:c8:f6:d6:57:f6:d7:73:38:b6:96:f4:97:ff:
b0:07:8b:c9:4b:6d:be:49:2b:b7:0c:8c:0f:8a:29:
9f:7f:89:e5:52:ce:1c:e2:23:87:bb:44:bf:2b:ea:
63:26:68:71:7e:90:e6:17:78:d0:35:5c:25:a0:7a:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:54:CB:A1:AC:ED:3F:7F:3E:97:AD:A4:1A:6C:51:5E:08:B6:17:63
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/s1TLoaztP38-l62kGmxRXgi2F2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.150.0/24
88.216.104.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d4:cc:d3:65:02:c7:78:d8:d3:3c:6c:5b:38:24:8d:74:db:
1a:bf:16:fa:c0:0b:78:65:e1:62:de:0b:7b:68:8c:d8:0d:6c:
30:d1:14:7f:93:80:f5:60:19:fa:c8:cb:50:81:85:ec:56:1c:
9c:49:91:1e:46:39:bd:5f:02:45:cb:e1:d6:e1:d1:b8:59:a2:
af:ee:7e:c0:14:e6:2c:f7:13:26:53:91:b8:93:cb:1a:36:0d:
af:db:6e:69:1b:99:50:a8:5f:c1:fe:70:88:cc:32:75:fa:74:
0f:a8:c3:93:c0:5a:22:7d:a2:d0:b1:69:b1:34:94:94:44:ed:
5b:ad:1c:f1:b6:43:a1:96:ce:48:93:81:98:85:ea:50:33:0c:
04:09:64:53:57:38:24:99:83:41:60:7a:69:8f:85:13:5d:c7:
1e:c8:fc:c6:23:68:0e:41:e2:cb:52:b9:ac:d1:56:79:fc:b0:
08:4c:3b:43:de:b7:e9:ff:9c:b7:d5:15:cb:06:1f:97:63:cf:
c3:e2:96:a9:26:e6:85:f4:0b:0a:dc:d7:1d:12:25:b5:f3:bb:
8b:69:dd:9b:2a:90:a2:97:44:82:4d:62:89:e0:d8:07:bb:0e:
be:96:03:2b:d3:46:17:ad:7e:a6:cd:98:9b:1b:5c:f7:3a:d6:
2c:1c:92:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org