Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uaJyc2OJahyVQ-m93NCHsEG5kSs.roa
File: uaJyc2OJahyVQ-m93NCHsEG5kSs.roa (raw, json)
Hash identifier: zk++hcUvB8HqYeE3Cky1pOxquyu0nw8RBVIxUQpi2f8=
Subject key identifier: B9:A2:72:73:63:89:6A:1C:95:43:E9:BD:DC:D0:87:B0:41:B9:91:2B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01865EA0BF830888A0F7145C76A17311A053
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uaJyc2OJahyVQ-m93NCHsEG5kSs.roa
Signing time: Fri 17 Feb 2023 09:07:18 +0000
ROA not before: Fri 17 Feb 2023 09:07:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 88.216.104.0/24 maxlen: 24
84.32.110.0/24 maxlen: 24
88.216.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 06:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:a0:bf:83:08:88:a0:f7:14:5c:76:a1:73:11:a0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 17 09:07:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9a2727363896a1c9543e9bddcd087b041b9912b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3f:3c:9f:7f:f5:97:ab:fa:a5:51:28:3e:fc:
c5:d2:d7:93:0b:6d:a0:14:58:04:4c:8d:80:26:a9:
e3:4b:12:cf:1f:29:1b:bf:9a:ed:57:df:5c:8a:ea:
16:2c:3f:3a:88:54:00:70:fc:af:67:6a:53:f1:b5:
b6:61:5a:bc:7f:0b:26:ca:0b:d0:1b:9a:25:8e:0a:
db:a0:08:f7:84:68:91:53:f6:c9:5e:6b:61:e1:dc:
e1:e2:57:14:d3:e7:46:82:01:ad:6d:0c:d2:30:23:
b2:52:7b:24:2a:6a:5f:e7:db:98:b1:f8:45:cb:58:
95:cb:11:a0:2a:fc:20:f1:97:0c:88:3c:8b:f6:19:
25:2b:d6:a3:46:f2:31:50:4c:f7:be:dc:e3:2f:d2:
09:a9:51:9d:f2:c9:a6:c4:aa:1f:5a:c7:07:5f:45:
29:36:eb:de:95:d0:0c:91:79:8d:8d:ab:3b:fa:c5:
79:9e:34:23:fc:a9:2b:e6:0f:29:2e:4c:a6:e1:bc:
81:1b:ef:85:6f:1c:2e:18:ae:3e:12:d9:c7:ea:88:
f4:dd:a6:27:33:cf:bb:4a:16:e1:1d:f4:e1:7d:66:
ce:10:0e:e0:3f:14:f8:91:ec:6c:80:d5:cd:7c:08:
0a:82:63:50:2f:d9:fd:40:e4:46:f9:bb:78:db:a0:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A2:72:73:63:89:6A:1C:95:43:E9:BD:DC:D0:87:B0:41:B9:91:2B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/uaJyc2OJahyVQ-m93NCHsEG5kSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.110.0/24
88.216.104.0/24
88.216.130.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fc:72:0a:7f:f8:78:c6:57:c9:6b:05:8e:ae:ca:a8:15:ac:
16:ac:c8:3b:ad:f8:6f:d0:9f:4c:0a:dd:76:f9:57:8c:6e:fb:
68:d8:b2:3f:23:d1:73:94:a7:cc:5f:46:39:51:42:0d:61:c8:
65:53:e2:2b:cf:52:63:5d:dd:d3:9a:d3:e4:27:03:3b:43:f5:
13:54:bb:b7:b3:31:0d:ce:6e:f0:49:0d:9d:37:fa:57:3a:3a:
1c:5b:f5:db:fd:a2:55:67:03:b9:f5:45:76:4a:09:07:7f:0c:
79:9b:5b:aa:e8:79:4b:df:be:b3:c3:d7:11:d2:3a:2f:d5:bb:
bd:2b:7c:17:5b:9b:2c:8f:28:47:fa:31:d5:e4:8d:4c:ea:b4:
b2:3d:2e:a0:de:6d:72:6c:ed:a4:a8:44:32:39:e1:b0:f7:fd:
23:28:e5:56:30:ba:71:90:c6:37:91:74:66:91:23:42:6c:06:
c8:c7:61:d6:9b:85:d0:ed:1d:73:de:c0:e3:b0:f6:f3:b3:47:
a9:36:5c:02:1f:e0:9e:6c:90:f2:af:72:41:c3:78:cd:49:17:
4f:55:dd:1f:f9:3e:c2:0c:fd:4f:06:11:4a:63:f9:58:b2:cc:
ae:87:15:6b:a2:61:de:ff:86:08:56:91:c6:76:3f:2f:c1:7c:
60:c6:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:32 2024 by rpki-client on console-ams.rpki-client.org