Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/t20eAT1PaSJY5ffNu3vkmTlJi_I.roa
File: t20eAT1PaSJY5ffNu3vkmTlJi_I.roa (raw, json)
Hash identifier: KJ6xfWzruiwRm4QlSPrBFB/tW2UByXVPvb34yf+1Ln8=
Subject key identifier: B7:6D:1E:01:3D:4F:69:22:58:E5:F7:CD:BB:7B:E4:99:39:49:8B:F2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018ADB812055821C12C68C14F83DF95343B8
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/t20eAT1PaSJY5ffNu3vkmTlJi_I.roa
Signing time: Thu 28 Sep 2023 11:16:27 +0000
ROA not before: Thu 28 Sep 2023 11:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 88.216.66.0/24 maxlen: 24
88.216.67.0/24 maxlen: 24
84.32.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:81:20:55:82:1c:12:c6:8c:14:f8:3d:f9:53:43:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 28 11:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b76d1e013d4f692258e5f7cdbb7be49939498bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:79:01:48:36:be:d6:c4:7e:47:4f:ed:91:09:
0a:09:cd:88:51:35:26:4a:97:41:84:12:0c:a3:9d:
df:03:0d:ee:f0:2f:40:4a:c1:e4:af:f4:cc:27:5b:
00:72:8d:94:9b:61:ed:65:fa:df:44:bf:91:ce:cb:
0d:18:db:6f:8f:cd:91:b8:0d:cc:fd:b4:98:fd:2b:
b1:34:92:47:f4:06:e6:f0:7f:30:89:66:3c:79:fa:
06:c8:d1:c6:42:41:3c:a5:da:33:05:b2:bb:80:b7:
27:d1:7e:72:5a:b0:fe:e8:12:90:2e:58:86:cd:8c:
95:a9:e8:9c:e3:0b:6d:5b:4c:77:c5:be:b2:50:8f:
72:b8:41:ad:e0:e5:b2:cd:19:07:de:cf:6d:1d:38:
76:ad:f4:53:71:39:4a:b5:d7:e0:5e:ac:fd:09:39:
42:65:20:bd:04:36:47:79:19:9e:39:a7:27:33:8d:
6e:07:a2:d0:c0:ba:09:62:6d:0a:dd:67:92:2b:07:
3a:55:22:b9:c6:a5:33:67:70:31:6e:df:52:a6:ef:
3f:bb:98:a8:c7:4d:35:b6:ac:65:61:fe:31:48:a9:
15:e9:97:94:fc:87:15:b7:23:53:d0:75:1c:9c:7a:
cb:7e:20:0f:e1:ed:60:06:26:8e:d3:fa:32:3c:62:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6D:1E:01:3D:4F:69:22:58:E5:F7:CD:BB:7B:E4:99:39:49:8B:F2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/t20eAT1PaSJY5ffNu3vkmTlJi_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.210.0/24
88.216.66.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:48:c7:25:50:35:6d:ce:4b:92:6d:55:16:c7:92:fb:b2:f5:
28:fc:99:0d:35:5b:1d:16:e0:f8:ad:d5:cf:8e:33:1d:9e:ca:
05:5d:09:6f:89:17:d4:e8:be:0a:b1:94:96:4a:c0:d8:e0:6b:
11:e4:cf:13:56:80:ff:8a:67:72:8e:3b:90:d4:d2:a6:94:60:
f4:a5:02:48:6e:fd:cf:7f:7c:89:8d:6f:db:98:19:51:70:1f:
5d:28:18:4e:b8:8a:fe:07:33:7d:82:36:de:0e:de:fb:a3:ac:
fb:97:21:b3:40:68:38:1c:9e:af:f2:b6:94:82:9f:5f:e9:93:
b0:b5:bd:b7:bd:1c:cf:47:87:a7:75:d7:bc:d7:49:00:dc:47:
0c:1d:83:68:22:a7:c7:6e:f6:fa:20:68:2a:1e:21:72:f3:b5:
8e:94:40:22:d3:f8:b4:46:20:51:fc:a4:34:c9:73:26:30:18:
9c:51:9a:83:28:8d:c9:1a:36:65:c2:f6:87:54:95:50:99:49:
0d:f6:34:22:cf:96:09:40:5c:95:2f:53:fe:2f:dd:bf:5b:fa:
59:e5:51:f9:46:85:3d:d6:61:dc:87:ab:b1:4c:7a:72:61:ed:
13:b4:9f:a8:04:9c:3f:38:c5:90:7e:d9:52:ed:27:f6:1d:c6:
ad:5d:35:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 28 16:39:55 2023 by rpki-client on console-ams.rpki-client.org