Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vGgG_zK7VieoHHL5E8Iil1DCCG8.roa
File: vGgG_zK7VieoHHL5E8Iil1DCCG8.roa (raw, json)
Hash identifier: mMptuW/4qw59F9idEMRvQniWLvfEbUnn7eNTV9F7R64=
Subject key identifier: BC:68:06:FF:32:BB:56:27:A8:1C:72:F9:13:C2:22:97:50:C2:08:6F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188E3FAFA01F9882C8723516194EED184C6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vGgG_zK7VieoHHL5E8Iil1DCCG8.roa
Signing time: Thu 22 Jun 2023 16:40:56 +0000
ROA not before: Thu 22 Jun 2023 16:40:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211192
IP address blocks: 88.216.56.0/24 maxlen: 24
88.216.59.0/24 maxlen: 24
84.32.173.0/24 maxlen: 24
88.216.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:fa:fa:01:f9:88:2c:87:23:51:61:94:ee:d1:84:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 22 16:40:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc6806ff32bb5627a81c72f913c2229750c2086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:9f:2f:32:e9:95:8e:32:9b:90:63:b4:61:
c7:c3:51:32:2d:81:62:73:f9:d5:e8:6f:df:7c:4f:
81:66:be:e2:6a:a3:16:9f:cd:20:66:a8:5c:a2:d4:
f0:dd:53:7d:52:6b:61:57:ff:c4:13:c2:1a:d5:ef:
11:35:96:41:20:c2:af:a8:da:79:00:d3:a5:c6:66:
18:14:87:53:75:61:57:71:ac:5c:48:de:f4:42:db:
29:e7:b8:44:b9:21:74:15:2d:c5:8d:66:d9:88:37:
08:40:3d:c6:b1:78:f1:1f:14:dc:d9:f2:47:41:75:
f0:9b:15:5e:6c:69:4d:ad:72:66:38:d5:05:da:a7:
bd:9b:39:14:ee:a6:c4:18:9b:fb:d4:11:79:a4:a4:
d6:9c:09:80:a7:3c:a4:ad:2d:06:80:4c:2b:09:62:
db:6e:9c:6b:09:b9:dc:73:7c:84:9a:f0:37:4d:f3:
b1:7d:d2:ac:ff:80:a2:b8:d9:b2:a6:e0:6f:f9:2a:
f1:6b:2a:9b:ed:b9:73:bc:a6:db:5b:6e:86:5f:04:
7b:55:bb:99:38:dd:8d:89:92:05:60:5e:39:5a:25:
bb:be:16:09:47:cc:ba:af:74:2d:a8:de:ce:e4:74:
00:27:7b:e4:81:d5:73:8c:e2:80:89:ca:ad:7c:6c:
28:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:68:06:FF:32:BB:56:27:A8:1C:72:F9:13:C2:22:97:50:C2:08:6F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/vGgG_zK7VieoHHL5E8Iil1DCCG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.173.0/24
88.216.56.0/24
88.216.59.0/24
88.216.232.0/22
Signature Algorithm: sha256WithRSAEncryption
25:f2:b3:71:67:d2:26:74:b2:6a:27:89:0e:19:29:cb:b4:f2:
d6:74:5a:95:11:5b:33:df:ba:4b:30:d8:2d:36:ed:57:35:0c:
0f:6a:55:cb:bb:79:be:d4:af:08:06:8f:61:6a:f2:d4:87:ec:
bd:1f:52:ab:7d:4b:21:4a:e8:92:01:c0:be:4d:42:43:c8:55:
39:87:8d:04:81:ca:a1:02:6c:b6:70:95:32:d2:d7:f2:8c:b0:
8d:9d:fb:0a:e5:55:c4:87:dc:d8:e8:56:04:93:29:44:27:8f:
34:f6:9b:eb:34:60:db:b5:7f:2c:f1:96:99:e5:ae:ed:70:0d:
92:45:e6:32:5a:8e:a2:0a:3b:ee:72:2f:70:a3:a6:d8:b8:01:
a4:d8:43:9d:cd:fa:8a:9b:eb:2a:27:cb:e5:27:3e:e7:da:f7:
c5:76:d5:70:05:a6:1e:2f:a8:55:4a:68:35:ae:a9:40:22:39:
e4:41:fc:74:8a:5f:c5:df:c2:71:c0:54:61:ed:c6:5c:2f:bd:
4c:f8:32:dc:24:72:6c:c3:87:9b:12:1f:7e:f3:ba:45:7d:00:
0f:a7:77:64:ad:66:62:6a:c7:6f:72:73:c7:81:76:ee:b2:df:
28:4d:96:d8:f4:88:b3:75:9c:da:cd:b0:f2:08:e9:c0:f3:70:
35:69:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:41 2024 by rpki-client on console-ams.rpki-client.org