Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/slplLqyb_lVMnfQZJr5pVdkTofw.roa
File: slplLqyb_lVMnfQZJr5pVdkTofw.roa (raw, json)
Hash identifier: A8thqpD7+6HsllFnBVU2TazTHv+D13nURnBrGxkwNwg=
Subject key identifier: B2:5A:65:2E:AC:9B:FE:55:4C:9D:F4:19:26:BE:69:55:D9:13:A1:FC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A615FAD0CC779F6BCA8FAF3EB01C9106B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/slplLqyb_lVMnfQZJr5pVdkTofw.roa
Signing time: Mon 04 Sep 2023 18:06:14 +0000
ROA not before: Mon 04 Sep 2023 18:06:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 88.216.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Sep 2023 05:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:61:5f:ad:0c:c7:79:f6:bc:a8:fa:f3:eb:01:c9:10:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 4 18:06:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b25a652eac9bfe554c9df41926be6955d913a1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:84:be:9a:56:33:86:9c:a7:ed:49:62:85:
99:65:48:e9:5d:73:90:de:e6:e7:ab:23:84:be:11:
5d:5d:a7:76:f4:71:98:31:0c:75:ee:25:ec:b2:b6:
3e:96:9e:10:64:28:89:78:95:e2:a4:0c:64:31:54:
58:16:c6:83:3e:7e:99:6b:c5:25:ad:e2:4e:51:f9:
dc:10:dd:11:46:49:f3:51:48:25:48:f1:e5:93:70:
c6:74:01:6f:9d:83:aa:26:b6:4d:5a:49:e4:7f:b5:
65:f7:e4:4d:6d:5c:bc:38:7d:9d:2c:5e:ad:80:5c:
89:0a:b3:52:38:85:14:d1:37:38:39:25:a0:54:56:
5d:6f:db:69:d7:73:20:55:7f:d5:63:6e:a5:56:fa:
ab:f1:b5:ed:03:1d:7b:be:6d:9f:44:ed:e7:6f:ce:
02:ae:ce:c6:1f:1d:15:33:e7:b9:22:ff:8b:3c:a5:
41:50:0d:86:e1:a3:d5:20:36:b8:59:32:00:60:d2:
4e:8e:01:22:ad:54:3a:e2:ba:4b:31:11:e4:e6:a9:
de:54:4d:52:58:64:f9:27:4b:e8:d8:ec:06:8d:5e:
ec:fc:83:9b:46:4e:39:2b:77:5a:6b:55:e2:f0:70:
fa:29:e6:b2:c7:30:0c:0f:cd:0a:2c:41:57:82:b2:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5A:65:2E:AC:9B:FE:55:4C:9D:F4:19:26:BE:69:55:D9:13:A1:FC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/slplLqyb_lVMnfQZJr5pVdkTofw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.95.0/24
Signature Algorithm: sha256WithRSAEncryption
42:77:f3:af:aa:91:84:47:b1:42:19:0e:94:c4:ae:3d:a6:a5:
c2:eb:79:16:4c:dc:58:e3:66:cb:9d:77:33:22:69:e2:28:5a:
63:19:2a:83:bd:d0:e4:5d:2d:0a:e9:9b:8a:d2:74:b4:42:e3:
42:db:19:96:6a:2b:7a:fd:b9:62:c6:28:fa:ff:82:5b:c8:39:
66:20:05:ef:48:89:3e:ea:a2:b5:3e:1e:11:28:fe:7b:c3:aa:
5b:42:e1:66:85:58:8b:55:d2:a9:81:ca:75:bb:07:55:bd:07:
35:f9:72:d3:58:7a:f8:bc:3a:1b:7b:28:66:66:4d:ce:0a:57:
f6:f7:8d:c2:d1:74:bf:76:b2:06:91:9a:46:55:79:35:5f:d6:
b3:98:90:b7:63:7f:3b:8c:5f:51:33:02:44:7e:a6:b8:ed:87:
50:f1:45:fb:b7:fd:60:8b:7f:9f:5f:48:23:bb:94:50:3d:5e:
36:18:bd:dc:50:66:0f:d0:ff:51:06:91:9c:13:93:c0:ce:40:
7f:45:f6:20:6e:09:bb:ad:4a:cf:0f:a3:b3:0f:52:9f:95:b3:
df:87:35:70:86:d7:07:ea:2f:e6:3b:dc:2d:fc:6c:07:0d:7e:
fc:73:cf:4e:db:61:0f:ac:c2:5c:65:f8:13:cf:60:d1:17:f1:
33:54:7a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org