Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wlNswGqfZJDzUNL9Qxg2mgyOaas.roa
File: wlNswGqfZJDzUNL9Qxg2mgyOaas.roa (raw, json)
Hash identifier: 5I/HP2kEyfXrk8zbdt+MBjlrKlzEdczOzBp72lYLjko=
Subject key identifier: C2:53:6C:C0:6A:9F:64:90:F3:50:D2:FD:43:18:36:9A:0C:8E:69:AB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01872431802ECC11CCEF5C3AA2A5B8168712
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wlNswGqfZJDzUNL9Qxg2mgyOaas.roa
Signing time: Mon 27 Mar 2023 17:50:36 +0000
ROA not before: Mon 27 Mar 2023 17:50:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396356
IP address blocks: 88.216.91.0/24 maxlen: 24
88.216.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:24:31:80:2e:cc:11:cc:ef:5c:3a:a2:a5:b8:16:87:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 27 17:50:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2536cc06a9f6490f350d2fd4318369a0c8e69ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:94:de:58:93:5a:ff:13:6a:c6:bb:ff:63:
31:14:ae:06:78:63:a1:f1:95:8f:94:dc:a0:8f:79:
88:b5:39:bc:96:6d:f6:65:8f:2b:c5:ff:a3:85:a4:
69:9e:08:42:51:89:57:1a:f3:d9:6d:34:9a:c7:22:
ee:45:06:38:b2:a0:a4:81:c9:8e:11:16:76:fc:bf:
fa:ff:bb:ac:db:b3:08:90:2b:3d:10:66:1a:ac:69:
94:1b:5c:65:0e:bb:42:aa:e0:cc:f6:98:07:1e:03:
45:98:5a:61:3c:a4:a2:6a:36:ae:c0:7e:74:e7:18:
a9:a9:62:49:64:5a:17:99:f1:ba:e0:6e:e9:be:60:
29:ee:1c:58:96:83:a0:78:fd:b1:ba:c5:4d:50:81:
4a:32:bc:ef:f6:07:90:4d:3c:e0:ed:3a:b0:cd:5b:
2d:8a:bb:12:d2:ae:3b:a9:cd:df:97:52:f0:28:8e:
e2:71:c9:ff:18:a8:93:57:6a:1f:7e:ef:92:43:94:
71:89:f7:c5:b3:d2:15:1d:ab:93:7d:db:d1:3c:5a:
ff:69:b8:33:f2:42:92:aa:b7:1f:69:59:fc:2c:35:
b1:bb:2f:61:53:20:79:37:6e:29:5a:81:3f:ba:28:
67:08:ec:37:a6:a2:05:18:57:19:2d:a0:ee:80:65:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:53:6C:C0:6A:9F:64:90:F3:50:D2:FD:43:18:36:9A:0C:8E:69:AB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wlNswGqfZJDzUNL9Qxg2mgyOaas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.90.0/23
Signature Algorithm: sha256WithRSAEncryption
79:62:f0:80:95:54:15:ec:8f:e7:4b:66:86:54:b1:f5:72:29:
b8:aa:05:40:b7:d9:71:0e:59:0b:c3:33:51:6a:d8:7c:b9:64:
32:1e:5f:51:9b:32:2e:dc:a9:d4:fc:ae:0c:f0:65:e0:0d:fe:
b1:7f:ff:a1:0c:3e:60:ff:b5:e3:d7:4c:1a:0d:27:59:f2:e9:
10:db:49:6f:c3:a0:3c:e9:10:5b:d8:4d:80:ca:22:bc:69:3f:
f7:6c:48:74:7d:51:9c:49:0a:22:8b:ed:67:be:c6:ec:a0:2b:
8e:1f:ed:46:54:7e:7b:7e:4c:22:a4:16:5b:cd:17:07:77:72:
e7:29:1a:4a:75:64:68:11:ca:52:3e:6c:96:84:dd:98:9b:7f:
ac:b7:02:bb:5a:91:21:47:b0:a1:ec:f5:7b:36:8f:69:cf:02:
f2:04:64:b7:db:26:fe:f9:15:cd:52:9e:ff:50:e1:6e:7e:2f:
56:ba:94:b3:94:d7:5f:9f:01:b7:2d:f7:85:2e:d0:c2:76:43:
e1:66:1a:13:08:e2:35:02:05:2b:a3:dd:01:95:24:2e:6b:05:
f5:e0:00:17:ff:44:06:a6:77:20:62:26:25:dd:66:35:de:fd:
43:d1:75:e4:05:ea:b5:04:5f:e1:d3:2b:35:2b:51:9c:31:bb:
52:dd:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org