Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x0OdX13XzoR2Ow6QLmP7Dex57Hc.roa
File: x0OdX13XzoR2Ow6QLmP7Dex57Hc.roa (raw, json)
Hash identifier: UvEmLmDM0tKeDM+WvyPf4yXHAsLjpmb5i/9apoGGVPI=
Subject key identifier: C7:43:9D:5F:5D:D7:CE:84:76:3B:0E:90:2E:63:FB:0D:EC:79:EC:77
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018C578E6D7B431900B61FD5E47D1E05D215
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x0OdX13XzoR2Ow6QLmP7Dex57Hc.roa
Signing time: Mon 11 Dec 2023 06:26:41 +0000
ROA not before: Mon 11 Dec 2023 06:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 88.216.60.0/22 maxlen: 24
84.32.108.0/22 maxlen: 24
84.32.48.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:8e:6d:7b:43:19:00:b6:1f:d5:e4:7d:1e:05:d2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 11 06:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7439d5f5dd7ce84763b0e902e63fb0dec79ec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:32:2b:c3:3e:bd:36:56:6d:76:ce:7c:d3:
ef:8f:aa:57:a0:b0:58:43:78:8a:b7:69:e3:a8:e6:
6b:25:c0:d3:d3:d2:32:3a:ef:92:03:4a:b8:6b:4f:
bd:c8:5f:58:23:04:d2:07:77:34:17:81:11:99:d3:
98:c1:06:60:0a:38:1b:9d:4a:15:c7:24:6c:b4:2b:
19:8f:40:3e:0d:24:b3:9e:39:3d:b3:63:fb:8e:6f:
37:32:9c:44:6d:df:83:3a:24:0e:4d:1d:50:3e:00:
4f:9a:81:d4:9e:d1:5b:af:9f:25:df:89:f7:d0:c5:
19:1f:bf:ba:ac:5b:c7:3c:5a:66:e9:aa:83:d9:38:
ca:46:b7:f0:ff:56:37:92:a2:a3:fb:e9:20:95:90:
ee:8c:b9:87:f4:4e:1c:87:8a:77:7e:45:6e:b6:cd:
fb:1c:53:6d:8e:99:fd:96:27:86:73:b7:f3:0a:30:
b8:a1:c8:dd:80:04:c6:54:4a:aa:2f:d1:cf:5c:02:
95:f7:da:04:84:42:07:04:13:5f:2d:bd:d3:c6:61:
72:4b:a7:ce:94:fe:c3:44:1e:72:09:2d:d8:68:64:
ce:6b:1b:a8:67:31:c7:1f:93:ab:1f:6a:a2:0e:f5:
3f:4a:dc:88:19:d0:2c:f8:f9:79:4c:4d:13:96:21:
59:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:43:9D:5F:5D:D7:CE:84:76:3B:0E:90:2E:63:FB:0D:EC:79:EC:77
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x0OdX13XzoR2Ow6QLmP7Dex57Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.48.0/22
84.32.108.0/22
88.216.60.0/22
Signature Algorithm: sha256WithRSAEncryption
73:f9:ff:4d:c2:64:1e:c9:89:8b:fd:12:d8:10:ad:4a:57:6d:
16:6e:b9:ff:4c:77:cd:25:84:ff:a2:9c:9c:b4:13:cb:f1:7c:
d7:ed:c2:67:ae:30:6b:47:8a:c1:e0:ad:4b:cb:ff:fd:99:bb:
0f:e9:1f:5f:c3:35:6a:58:ba:8a:98:87:bf:de:d2:b2:48:11:
20:c9:07:6d:80:b6:ee:2b:eb:48:6a:5d:a4:82:f6:1f:b0:80:
4c:79:39:c1:71:41:61:fb:31:e4:4a:32:c7:65:11:70:8a:22:
26:46:38:68:87:93:4e:fc:e9:2c:aa:84:cb:a3:f8:a8:50:e5:
85:e7:2f:a6:9a:4c:c3:f5:47:e9:df:7a:f4:cf:af:c5:4d:f8:
dc:e1:0e:1e:66:0c:da:bd:cc:42:95:4d:38:68:cf:99:31:f8:
78:f8:d8:0e:3c:ed:21:cf:1f:cf:b6:f1:cf:3a:4f:c8:81:4a:
82:d0:fd:67:1e:75:9a:0d:a7:4c:9e:cc:bd:2b:c2:99:55:ee:
3a:68:da:eb:e0:d2:35:12:68:60:ca:c4:0c:ba:27:16:2d:00:
86:75:38:10:ba:2f:ac:e0:37:76:8e:98:dc:bc:dc:93:c9:aa:
98:c9:63:a6:34:dc:b9:c6:e1:60:cf:7b:6d:70:01:8e:93:71:
e0:6c:fb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:50 2024 by rpki-client on console-fra.rpki-client.org