Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x6Sk_jfh4_rXzr3hHHCugCpfd1w.roa
File: x6Sk_jfh4_rXzr3hHHCugCpfd1w.roa (raw, json)
Hash identifier: GEDUI5cwTPvUC4IKRoj4EvfX/pMMk0mUj22CFG/iZlk=
Subject key identifier: C7:A4:A4:FE:37:E1:E3:FA:D7:CE:BD:E1:1C:70:AE:80:2A:5F:77:5C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC50142FD49B8B67EBD73F2663969E9C1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x6Sk_jfh4_rXzr3hHHCugCpfd1w.roa
Signing time: Mon 01 Jan 2024 12:30:43 +0000
ROA not before: Mon 01 Jan 2024 12:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51388
IP address blocks: 88.216.48.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 12:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:42:fd:49:b8:b6:7e:bd:73:f2:66:39:69:e9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7a4a4fe37e1e3fad7cebde11c70ae802a5f775c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c4:24:76:18:69:e3:bb:af:56:30:fc:dd:49:
ab:d7:4b:82:81:49:b3:ca:21:85:e0:8a:d6:e3:09:
4c:76:65:a2:83:7c:56:26:72:fa:c6:bc:c6:cc:76:
53:a3:6b:04:57:28:2b:11:95:ce:14:57:76:e2:bb:
04:c9:ee:06:19:ed:b8:e2:39:e8:98:ff:39:6e:22:
8a:99:cf:0c:1e:77:9d:fd:c8:04:1b:3f:23:ac:78:
aa:af:36:42:53:48:87:32:b6:e5:11:98:74:db:b0:
be:3f:ab:df:47:66:2b:78:fe:8a:8a:6e:44:5a:4b:
9d:a2:19:99:36:43:3d:8a:9f:b7:f4:b8:c6:b9:38:
fd:e0:81:c3:72:3d:ea:70:b9:b4:86:67:8e:82:35:
97:b3:56:71:dd:f9:a7:15:c0:d1:a6:b2:55:a4:d0:
18:e9:33:1a:af:81:d3:30:0d:de:66:a7:35:f9:f4:
59:56:d1:16:0d:1e:b3:ed:a6:f9:ea:42:b8:34:4f:
fc:00:7a:bf:3d:92:cb:aa:4b:c0:36:65:97:7e:b3:
86:43:cb:30:27:41:9f:b0:29:8d:93:2f:36:a0:18:
8b:a8:fe:6f:89:ca:4a:2b:ff:76:a2:71:d4:82:9d:
a6:c7:94:dd:c1:51:77:74:7a:a2:11:6f:a8:a2:72:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A4:A4:FE:37:E1:E3:FA:D7:CE:BD:E1:1C:70:AE:80:2A:5F:77:5C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/x6Sk_jfh4_rXzr3hHHCugCpfd1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.48.0/21
Signature Algorithm: sha256WithRSAEncryption
83:24:3e:e0:c7:ce:73:05:4e:17:5b:a1:30:6a:79:f9:49:07:
96:99:b6:c6:bd:43:8e:76:04:3b:14:17:5f:3e:fe:bf:35:09:
a4:78:77:c3:c0:23:a4:e8:8a:77:a2:06:45:20:a7:b8:cc:88:
fe:52:42:65:42:f1:01:12:7c:0c:a4:40:8d:b8:12:11:d7:4d:
69:18:94:de:eb:93:eb:73:70:1c:0a:9d:55:cd:0e:f1:5e:bd:
8b:6d:1a:0d:d9:82:96:0c:61:f2:a9:a3:31:28:fa:4b:dc:31:
63:10:6b:35:b2:95:b0:e3:64:5c:ca:2d:6d:67:f6:44:17:58:
33:78:78:44:f6:22:d3:43:77:ae:1a:6f:1e:ff:23:0d:7b:fc:
39:d5:bb:4e:9b:fb:95:37:1e:cc:0b:fb:0f:f0:e0:b5:c2:2a:
7e:67:54:76:aa:7f:1a:19:73:4e:6f:68:0e:0c:7f:c3:53:5f:
f5:3f:72:c8:89:2d:1c:ed:b4:17:d4:8b:5d:cd:90:73:b2:bc:
09:69:84:3c:56:0d:27:ac:26:a8:65:04:e7:41:6f:ea:3f:71:
27:7a:fe:b4:d1:2d:43:46:52:28:a0:d1:25:55:79:fe:55:df:
f4:01:60:61:61:ba:5d:a5:a2:a5:e1:10:7a:ca:59:36:2a:bd:
20:9c:f0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 15:26:31 2024 by rpki-client on console-ams.rpki-client.org