Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wG9b6Uk3WFY-aF9UeBNXWP8IrYA.roa
File: wG9b6Uk3WFY-aF9UeBNXWP8IrYA.roa (raw, json)
Hash identifier: ie6jV8vrkbd623UVz63GdKvJtyaTApTQlYMPszMxHws=
Subject key identifier: C0:6F:5B:E9:49:37:58:56:3E:68:5F:54:78:13:57:58:FF:08:AD:80
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018736538041ED8C96E5B3C90C4C2EFAEBED
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wG9b6Uk3WFY-aF9UeBNXWP8IrYA.roa
Signing time: Fri 31 Mar 2023 06:20:54 +0000
ROA not before: Fri 31 Mar 2023 06:20:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 88.216.16.0/24 maxlen: 24
88.216.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Mar 2023 06:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:53:80:41:ed:8c:96:e5:b3:c9:0c:4c:2e:fa:eb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 31 06:20:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c06f5be9493758563e685f5478135758ff08ad80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:c9:bf:d6:e8:fb:db:c8:70:d0:b0:47:32:
c4:d9:81:b9:99:65:0c:53:91:2e:b3:79:18:e5:59:
fe:5b:41:2b:96:0f:f6:ca:5c:20:45:8f:c8:98:8b:
0b:86:05:e5:87:f3:8d:88:7b:cc:7d:82:40:f2:3a:
97:ad:64:f4:88:fa:f4:32:5d:98:21:a4:64:07:31:
38:c5:ae:be:bc:d3:49:13:7c:91:f9:60:47:4d:8e:
3b:45:6b:e5:76:ab:08:69:be:29:ea:d9:a3:4b:96:
2e:dc:63:75:92:cf:26:8e:94:5d:51:0a:18:89:31:
0b:09:c0:44:31:72:1a:4f:10:ee:dc:64:ab:25:91:
e9:a5:1b:bd:be:b5:b9:df:67:81:f5:de:01:bc:c4:
30:74:a7:ff:2b:55:10:a9:1d:e5:6b:c4:cd:07:ef:
94:93:6a:5b:2e:46:88:b3:33:2f:71:25:4a:c3:a6:
2c:2f:02:69:87:85:03:97:4d:9e:05:26:5b:1a:89:
60:98:4d:56:11:3a:2a:e7:c7:30:ba:cc:5e:3c:7a:
b6:99:35:12:9e:1e:6c:95:f5:f8:38:76:24:fd:de:
1a:ba:28:6d:e9:c8:41:2a:77:b4:25:83:d4:2a:af:
74:33:7b:ea:5a:d4:0d:be:9b:f4:39:82:61:68:0d:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6F:5B:E9:49:37:58:56:3E:68:5F:54:78:13:57:58:FF:08:AD:80
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wG9b6Uk3WFY-aF9UeBNXWP8IrYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.16.0/24
88.216.133.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ac:07:6c:64:bf:a1:27:c6:85:0a:7e:31:72:f3:08:11:9b:
19:4a:82:1a:d3:68:1c:ca:4d:bf:d8:fa:7b:14:23:5e:69:fb:
4b:f4:f2:c9:b3:c1:08:ee:54:1a:4b:45:0d:9b:75:b9:db:26:
5b:a5:89:e4:f9:21:20:e4:92:0d:c5:5e:c6:41:b9:f5:0b:21:
ca:c2:59:8f:e4:bd:49:1c:66:f8:b6:dd:17:02:56:c4:bc:5b:
36:ab:14:02:41:46:94:e3:ef:fb:d3:44:37:bb:ec:c9:8c:f4:
32:7c:7c:91:da:24:33:0a:31:90:62:67:18:a3:c6:83:64:1e:
82:6a:00:4e:0a:ae:d8:60:48:b5:84:85:0a:1e:1a:95:64:fc:
b0:98:eb:31:14:a8:7f:39:b0:81:11:1f:94:4c:09:0b:6e:67:
d1:02:2d:5a:b2:6a:99:ca:b5:73:57:34:97:d7:64:aa:fa:ff:
27:53:dd:4d:6a:b9:f1:0f:58:4e:9f:63:38:c9:d9:bb:e7:c1:
80:c9:a8:0c:8a:e0:d2:65:55:f7:1e:08:cb:a8:cb:c2:7a:c5:
5d:f9:01:e1:33:ae:bc:d3:7a:82:3c:2e:8e:57:88:1f:81:8b:
44:db:16:40:3a:79:cd:c5:d0:66:af:de:92:fd:20:b6:e4:cc:
c4:52:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:33 2024 by rpki-client on console-ams.rpki-client.org