Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x5mfuCumW_8mIbeBZW8BX7sYx_w.roa
File: x5mfuCumW_8mIbeBZW8BX7sYx_w.roa (raw, json)
Hash identifier: 5NYjHJtCb+3nab/LqqGtG2XPHpICVUsBd+addZttp6w=
Subject key identifier: C7:99:9F:B8:2B:A6:5B:FF:26:21:B7:81:65:6F:01:5F:BB:18:C7:FC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185CB37199ABB5D22F12DFBB4AEFF072267
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x5mfuCumW_8mIbeBZW8BX7sYx_w.roa
Signing time: Thu 19 Jan 2023 18:07:43 +0000
ROA not before: Thu 19 Jan 2023 18:07:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 88.216.212.0/22 maxlen: 24
88.216.21.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Feb 2023 07:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cb:37:19:9a:bb:5d:22:f1:2d:fb:b4:ae:ff:07:22:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 19 18:07:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7999fb82ba65bff2621b781656f015fbb18c7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f0:17:90:53:08:29:a7:a0:fe:f2:db:10:e7:
47:67:7f:e6:19:af:47:83:47:f6:88:74:78:a3:39:
43:77:a0:ca:28:bc:b2:b0:a2:6f:5d:16:23:d4:fb:
07:8a:c1:22:6f:d8:ef:ff:c6:1c:0b:7b:57:86:5d:
f8:4b:e8:f7:61:cd:7a:ae:ff:82:c0:c3:da:4d:e1:
7c:98:d1:c2:bd:a2:43:d6:30:fc:9a:94:e3:e5:b0:
de:0e:a9:05:68:3d:0f:fd:ea:c2:52:d0:05:7d:51:
cd:05:5b:dc:51:19:1c:3e:a7:fe:11:d3:5a:fe:28:
95:71:90:dc:69:7e:c0:49:3b:93:0f:7a:cc:23:6d:
d7:4e:e3:7f:4d:8c:27:78:ef:ec:4c:03:b9:54:f7:
17:59:85:09:5c:f3:57:cb:1a:70:25:d9:85:be:b2:
75:4e:91:cd:a7:37:36:59:b9:4d:d1:78:67:8e:6c:
4c:98:0d:7d:c4:ac:07:ab:c9:9b:83:9c:90:af:5c:
6b:ec:37:16:c3:43:6e:1a:00:11:3d:a5:6d:3a:33:
8f:56:8d:db:ad:95:1c:4e:ca:93:68:92:43:34:6b:
3c:f3:a4:e1:6f:6f:d3:b7:a3:7b:65:cd:2a:36:38:
f4:cd:93:57:d5:80:b1:7c:7c:5b:88:2d:9a:c2:64:
b1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:99:9F:B8:2B:A6:5B:FF:26:21:B7:81:65:6F:01:5F:BB:18:C7:FC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x5mfuCumW_8mIbeBZW8BX7sYx_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.252.0/23
88.216.21.0/24
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:48:8e:1f:80:7a:41:b9:a5:44:4e:1a:9e:14:c0:65:58:46:
b9:86:63:17:3d:39:bf:e9:b7:95:89:a5:04:33:48:09:54:6c:
4e:04:42:d0:69:4b:ee:3c:b0:75:90:83:f7:51:39:0b:c8:54:
8e:bf:25:b9:1d:4a:73:ff:96:77:1d:47:6b:c0:cf:4f:50:a5:
99:43:c9:76:00:80:c9:e8:60:0d:6e:e0:5b:49:f0:75:e0:2b:
db:22:65:2a:50:1e:de:d9:d6:26:ee:e0:38:e3:a4:44:a4:a0:
0f:ab:7f:bf:6e:35:11:cf:0a:ee:94:92:96:f1:0a:fc:0f:a2:
51:86:c7:02:ab:d4:92:5f:cb:17:18:a7:8b:2f:12:37:2c:b4:
a6:46:50:04:15:4d:1f:e4:15:58:42:d0:b9:a1:36:fa:bb:a2:
0f:9f:1d:f2:a4:5a:e2:df:c4:33:bf:69:9c:5c:9c:38:89:76:
c5:5d:bb:45:cc:00:d5:cf:bf:f4:80:e7:93:89:24:b8:5a:ec:
f0:8e:99:7b:d1:b0:66:02:f5:ce:4d:69:72:d5:fa:1d:77:3a:
8b:24:6b:99:0e:1d:eb:21:84:94:54:3d:c1:3c:3a:16:74:53:
6d:51:ef:74:f6:f8:ff:77:01:de:ff:4c:58:49:c0:78:cc:3d:
d3:e8:d6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:33 2024 by rpki-client on console-ams.rpki-client.org