Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wIDjkxitFQWc1xyu_HpBs-27Wws.roa
File: wIDjkxitFQWc1xyu_HpBs-27Wws.roa (raw, json)
Hash identifier: bghGONU6nVo7AJonSN2c7NJhdQLxAK2AP+JevltxK3M=
Subject key identifier: C0:80:E3:93:18:AD:15:05:9C:D7:1C:AE:FC:7A:41:B3:ED:BB:5B:0B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CA578606A229BDC4684F968608E9E2B5D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wIDjkxitFQWc1xyu_HpBs-27Wws.roa
Signing time: Tue 26 Dec 2023 09:32:58 +0000
ROA not before: Tue 26 Dec 2023 09:32:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216084
IP address blocks: 88.216.220.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a5:78:60:6a:22:9b:dc:46:84:f9:68:60:8e:9e:2b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 26 09:32:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c080e39318ad15059cd71caefc7a41b3edbb5b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1d:0c:ac:d5:fe:dd:b4:05:b6:5d:93:c6:76:
d4:6b:9e:8e:69:60:1c:c4:ca:97:a5:f1:ce:2d:d7:
c6:80:61:22:d0:e5:f3:a2:cd:d0:4c:07:6c:8b:62:
70:5d:a6:dd:ac:fa:90:15:57:41:2e:e6:e9:d4:a9:
11:0e:91:22:7f:ad:3a:e7:77:18:06:3a:cc:e0:07:
46:8f:44:9d:81:7f:fd:ec:e2:fa:c6:94:ad:34:e7:
06:4a:5e:9c:71:03:d7:bd:99:70:cc:c5:53:2f:d5:
75:24:c0:c0:b3:0c:03:68:df:b7:d2:72:b8:85:30:
47:0b:bc:a5:05:ba:ee:06:64:05:91:6b:23:98:f3:
33:2b:be:40:44:94:c7:36:7e:9c:90:e1:6b:43:0d:
c3:c6:5a:a7:ab:d2:b9:e0:c5:15:93:dd:13:a0:01:
b3:12:c4:38:f2:5c:df:f2:f8:04:7a:0d:8e:dd:a8:
77:21:8b:6d:16:bf:6f:e9:a9:90:b4:88:7f:cd:8f:
da:82:52:fe:e0:66:5c:64:20:f3:e1:18:2e:1a:85:
b1:5e:aa:3e:4a:ae:b6:d2:58:d2:52:ab:21:2c:10:
ed:e3:25:f6:7c:9f:a8:ce:7b:7c:67:f1:3c:68:85:
2d:1b:26:c8:c3:f6:d7:98:d9:2f:17:23:32:ff:8c:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:80:E3:93:18:AD:15:05:9C:D7:1C:AE:FC:7A:41:B3:ED:BB:5B:0B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wIDjkxitFQWc1xyu_HpBs-27Wws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.220.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a7:af:0f:cd:96:15:89:1c:36:3e:11:59:87:65:8d:de:33:
25:33:48:a4:6a:1c:92:70:a3:85:82:e1:fe:fd:14:3e:ca:03:
5c:66:49:ad:eb:d2:3f:03:8d:10:15:42:28:51:e1:c5:ca:80:
db:3f:fa:5e:af:ca:c6:03:bd:a5:21:bc:a6:fc:92:64:98:3b:
1d:6f:14:99:23:ce:a9:2c:90:28:f9:12:6c:21:c5:1e:80:2e:
c2:93:e1:e3:29:53:8b:16:d3:95:a0:3f:5f:ad:5a:be:df:02:
f0:57:21:a6:8e:3a:7f:21:4d:5c:85:5e:41:65:60:5f:15:dd:
20:6e:27:ab:a7:a2:a9:4d:49:0f:4c:89:66:bd:9d:28:fc:6c:
05:9d:53:80:eb:18:db:a2:9a:6b:5b:27:c5:50:00:ea:0b:24:
60:f8:7f:62:20:2f:2f:e0:fc:7a:e2:b7:0e:3f:10:7b:41:17:
c5:c0:02:9f:5f:b1:8d:b3:e3:0c:20:de:0d:9e:e3:26:65:49:
26:3c:ea:3d:43:37:65:a3:5f:d1:15:d9:da:e8:66:74:22:52:
63:93:a8:9e:6b:57:a7:dd:0b:92:49:47:b1:ca:56:44:a7:8b:
d2:3f:de:70:cc:e0:2f:13:ce:12:79:af:ce:90:24:76:73:2c:
e4:a1:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org