Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zOfoCcGON9j3RAou0T9ntAbPCSQ.roa
File: zOfoCcGON9j3RAou0T9ntAbPCSQ.roa (raw, json)
Hash identifier: yOuyjvLMv6u5Fs6/e/UKxY/voa6GubzP4SrXwGxub5Y=
Subject key identifier: CC:E7:E8:09:C1:8E:37:D8:F7:44:0A:2E:D1:3F:67:B4:06:CF:09:24
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018856FDAB6953724CC6B58A15A1372D7420
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zOfoCcGON9j3RAou0T9ntAbPCSQ.roa
Signing time: Fri 26 May 2023 07:37:24 +0000
ROA not before: Fri 26 May 2023 07:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 88.216.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:56:fd:ab:69:53:72:4c:c6:b5:8a:15:a1:37:2d:74:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 26 07:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cce7e809c18e37d8f7440a2ed13f67b406cf0924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:ba:07:18:70:48:1f:18:f1:c6:f0:8d:ca:
4c:67:e2:66:59:d9:53:3c:c2:50:21:34:75:c6:07:
9c:ba:7f:91:a3:23:94:8c:54:7b:81:d3:28:4d:c0:
c8:b6:e2:62:a1:ad:82:86:c4:be:7b:27:46:64:f3:
f1:54:53:3d:75:1f:c8:0e:14:98:9f:02:95:b4:3f:
94:cb:15:f4:c0:9e:29:2a:1c:f9:6b:4d:01:e0:fa:
4c:97:d1:c0:f3:50:e0:c0:b7:e2:d3:18:f8:b8:a9:
b9:d8:56:43:bd:36:df:d2:9a:f6:c0:d1:18:46:c0:
14:18:c7:3a:69:c5:d1:54:91:d7:53:fd:e0:fb:85:
fe:33:13:cb:58:e1:50:73:a5:33:94:e0:98:e1:af:
58:90:06:22:6b:f9:75:79:1b:3f:80:b1:c0:3e:a3:
6a:68:0c:bf:c9:c1:be:ee:a9:d0:7e:16:9b:fb:03:
ee:ac:8f:29:91:48:f8:d0:3a:13:9c:bb:a1:7e:0a:
c2:d4:1a:1d:f5:04:d3:51:82:64:26:db:5b:39:36:
90:51:31:1a:70:34:e6:3f:56:9b:78:67:72:76:0a:
fb:ed:8d:bc:52:b2:07:24:2c:39:f5:cf:8e:9b:9e:
2e:4a:c8:95:cf:4e:eb:2a:54:bf:b3:e4:72:e9:33:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E7:E8:09:C1:8E:37:D8:F7:44:0A:2E:D1:3F:67:B4:06:CF:09:24
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/zOfoCcGON9j3RAou0T9ntAbPCSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:35:41:d1:f1:dd:e6:fe:19:97:63:4f:c8:c5:1b:8a:e6:32:
26:8e:45:c1:32:96:d5:ef:95:c0:7e:43:f2:a5:11:d7:4d:93:
8b:19:aa:17:3a:97:3e:4f:89:7c:44:bf:e9:32:1f:63:f3:17:
e2:ae:86:a4:1e:ec:d1:e6:43:38:3e:17:25:c8:45:54:f3:71:
15:b1:f0:21:20:5e:b3:48:45:54:85:17:ed:d6:ec:8d:6b:55:
c1:16:ff:5c:c7:85:66:68:5f:43:15:0b:9b:00:37:bc:06:6c:
98:11:a1:48:77:56:c0:4f:ab:2e:fe:66:49:fe:fa:02:fe:6e:
a4:b7:f2:fd:36:e4:8a:85:5e:a1:10:00:e7:48:6b:74:99:4d:
0f:01:60:f0:75:82:6a:3f:87:fe:ba:bf:98:b4:90:f5:b1:04:
fc:e7:40:f4:83:66:01:f7:5c:7e:4c:4a:f4:64:25:a5:7a:6a:
dc:db:f9:d0:43:f1:10:01:1e:79:d6:2d:a6:3a:1a:4b:02:8c:
72:e9:4e:8c:69:96:28:2d:87:72:45:82:02:64:9b:78:7e:01:
e2:17:6a:fb:5b:8f:09:7b:ad:98:5e:fb:ba:e6:91:f8:3b:2a:
4d:2d:69:cc:39:37:12:39:fc:a5:d1:c9:31:14:58:2a:1a:92:
c4:ad:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:52 2023 by rpki-client on console-fra.rpki-client.org