Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x-4yBpKrNgRze9irbJatpYrPqiQ.roa
File: x-4yBpKrNgRze9irbJatpYrPqiQ.roa (raw, json)
Hash identifier: mvlEVHwQX5CZvZuDIxEyEaVHmConTJmtzFx8eAwkt5s=
Subject key identifier: C7:EE:32:06:92:AB:36:04:73:7B:D8:AB:6C:96:AD:A5:8A:CF:AA:24
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01867A7ADC598AE2A43939179ADA6C21B45C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x-4yBpKrNgRze9irbJatpYrPqiQ.roa
Signing time: Wed 22 Feb 2023 18:55:17 +0000
ROA not before: Wed 22 Feb 2023 18:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 84.32.82.0/24 maxlen: 24
84.32.86.0/24 maxlen: 24
88.216.196.0/24 maxlen: 24
88.216.37.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:7a:dc:59:8a:e2:a4:39:39:17:9a:da:6c:21:b4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 22 18:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7ee320692ab3604737bd8ab6c96ada58acfaa24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:df:6c:18:af:01:d0:15:6f:b8:55:98:cd:
e4:c8:b7:55:d2:6c:e3:3b:3a:a1:5a:7b:c1:20:0b:
a2:10:37:98:1b:c4:21:61:20:d6:d1:bb:7a:f0:19:
30:81:e7:1a:60:43:a9:39:46:ee:28:b0:6f:a6:3b:
20:fa:c2:38:ff:e3:57:5c:4f:18:4c:27:1d:b0:f2:
e4:b4:78:03:0c:c8:de:90:99:f9:29:12:17:1d:89:
70:70:57:f3:ba:fc:67:ae:dd:1e:63:8e:32:12:ca:
fe:cb:dd:7e:a7:aa:13:d5:ba:9f:d1:23:cd:76:94:
03:5b:58:19:3f:3b:2f:7e:f8:00:3c:e9:b8:a0:27:
81:6f:88:b0:a3:68:fe:54:69:7f:b3:de:cc:9c:16:
d6:9f:ad:3e:64:19:9f:eb:24:e8:62:5f:6c:e0:ad:
e2:71:0b:8a:ee:04:56:3c:24:6f:83:f9:a7:c7:1f:
55:cf:2e:ad:4c:56:02:9e:56:3b:25:bf:6f:1e:37:
16:d4:a1:00:02:32:57:8f:96:66:3d:b7:05:64:4a:
18:77:e3:f4:d9:21:25:32:c5:40:1e:d6:e5:5d:28:
e4:1f:c4:08:13:1f:ea:e3:74:f0:da:a8:5f:9f:28:
7b:d4:1a:3f:c3:f5:1e:7e:ed:32:3a:78:ad:72:d4:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EE:32:06:92:AB:36:04:73:7B:D8:AB:6C:96:AD:A5:8A:CF:AA:24
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x-4yBpKrNgRze9irbJatpYrPqiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.82.0/24
84.32.86.0/24
88.216.37.0/24
88.216.46.0/24
88.216.196.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:63:31:17:00:ff:b0:68:14:94:71:cb:85:64:83:56:35:7b:
d7:20:d0:fd:66:3c:df:d6:1b:5b:68:96:34:26:02:2c:3c:0d:
7d:ba:bc:db:89:8f:c0:72:42:94:7c:fa:47:62:83:4a:a4:73:
c1:7b:a4:8c:90:75:69:de:c9:44:05:22:e7:2f:53:39:0c:34:
72:da:d9:32:0e:b0:d2:46:7b:5b:30:e5:41:fb:b7:5c:23:03:
f0:53:bf:e2:df:9c:c4:64:e0:ac:87:0c:f5:1e:59:30:91:42:
49:da:a4:95:f9:ef:59:e4:38:5b:68:79:55:9b:aa:4a:1b:ef:
ce:23:14:89:be:8d:50:ed:c4:82:5b:3e:3e:61:18:69:24:1e:
1f:b3:af:45:91:62:ec:a6:46:bd:e9:52:c1:1c:67:4f:41:0e:
92:16:ba:dc:f6:6f:6d:00:99:e5:75:1c:57:7f:73:6a:e4:d0:
75:5f:ff:0b:b0:35:62:b3:ad:f1:b5:7c:44:0e:ed:c3:16:3b:
db:0b:6b:82:21:f7:ce:9c:e0:76:b8:51:69:6f:ac:08:1e:67:
7e:0f:28:8f:0e:32:f6:9c:fe:f5:52:c5:51:41:96:0e:c4:0f:
87:eb:3c:7d:f2:ed:b7:bf:96:b4:99:97:23:fa:54:b7:c6:aa:
b4:87:97:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:50 2024 by rpki-client on console-fra.rpki-client.org