Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wXpQyOly3NE5MDJhXDVa5RVqGaY.roa
File: wXpQyOly3NE5MDJhXDVa5RVqGaY.roa (raw, json)
Hash identifier: Znksj/nW9rWPFWOvSJb9eJdjzpECqlRCJvf+qwfGFGc=
Subject key identifier: C1:7A:50:C8:E9:72:DC:D1:39:30:32:61:5C:35:5A:E5:15:6A:19:A6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189626A767B6CEEE56DC06B12C94242B2B1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wXpQyOly3NE5MDJhXDVa5RVqGaY.roa
Signing time: Mon 17 Jul 2023 05:54:51 +0000
ROA not before: Mon 17 Jul 2023 05:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61112
IP address blocks: 88.216.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:6a:76:7b:6c:ee:e5:6d:c0:6b:12:c9:42:42:b2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 17 05:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c17a50c8e972dcd1393032615c355ae5156a19a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:49:77:56:52:2b:d5:47:93:07:46:41:66:
d5:8a:4e:79:70:25:04:49:9e:b2:6a:04:5c:22:f6:
df:0e:7b:7e:00:9b:9d:48:72:2c:ed:0c:81:24:04:
4c:09:87:e9:27:69:62:e4:bb:ae:0e:12:11:df:69:
8c:63:50:82:09:22:df:d8:6a:2f:ec:69:75:8e:de:
76:6a:7d:54:09:96:c8:d8:d9:08:d7:d5:d6:ca:bf:
04:f4:59:55:92:00:78:67:73:b3:8d:36:c2:a5:c9:
80:69:99:59:cd:d7:03:83:55:a2:b0:a3:06:86:96:
0a:8b:72:70:95:97:b4:46:30:90:52:fd:2b:aa:c8:
79:a6:e7:2c:97:69:91:8b:7a:e0:0e:06:fb:ef:fa:
f3:47:cd:e4:1c:ae:07:82:6f:fc:8d:ba:e2:b6:6a:
e9:4e:d5:bb:51:15:f9:f1:76:bf:ce:b0:da:f5:ac:
d5:4d:6a:e0:1b:6e:36:f7:37:28:64:46:57:1a:62:
93:b0:15:60:0d:ce:a6:4c:30:a6:03:c0:ec:f5:f8:
ea:c8:82:d5:a0:44:e8:ac:00:01:1c:62:f7:46:30:
ec:bb:84:32:c0:13:6d:d5:e1:cc:b9:d7:8a:72:6a:
27:12:96:ee:cb:79:81:7b:c0:9a:ed:8c:08:eb:7c:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7A:50:C8:E9:72:DC:D1:39:30:32:61:5C:35:5A:E5:15:6A:19:A6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wXpQyOly3NE5MDJhXDVa5RVqGaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.100.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a9:ce:58:3c:5e:a1:4e:2a:09:5e:22:dc:64:1b:1b:85:1e:
8a:af:6b:27:33:5d:fe:2c:39:06:95:45:9b:6b:89:ca:28:cd:
4b:47:ae:b4:c2:7a:d7:0c:77:f2:18:e1:1c:0c:e4:cd:34:4b:
fd:ef:40:47:c9:65:a2:ae:63:b9:fd:b8:9d:86:93:f3:89:59:
d4:1f:5a:9d:c6:fc:cf:f3:2f:cd:91:99:43:8a:c9:02:65:ad:
1e:07:47:52:a5:68:b7:28:f6:29:48:26:77:dc:55:0e:fd:68:
08:a7:7e:39:a1:b4:77:c4:6a:b8:4e:42:a9:90:32:0a:bf:2c:
be:92:77:f1:23:4b:65:c4:93:21:1b:5a:29:47:bd:3b:bb:44:
a8:71:bf:bf:b5:74:a7:d0:3e:c8:3e:d0:b5:75:35:56:7f:49:
b1:61:52:1c:7c:12:06:29:14:28:b0:8d:c3:02:96:6c:fd:f4:
8a:d1:d2:4d:d5:d8:c0:86:a9:71:a4:95:a5:9f:d1:af:36:df:
80:d3:62:4f:13:64:3e:bb:d9:65:30:4d:8c:0e:1a:81:c8:06:
bb:18:25:29:ce:6d:e1:ef:12:a3:a7:2d:8d:49:dd:ed:7b:29:
22:ff:11:1c:64:a9:5f:52:7b:6e:03:f8:48:a8:d2:47:bd:c4:
e8:7a:9f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:41 2024 by rpki-client on console-ams.rpki-client.org