Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/SfC-lYzFChJiz1Fi788EEFp6M38.roa
File: SfC-lYzFChJiz1Fi788EEFp6M38.roa (raw, json)
Hash identifier: 4aEmTMD5/ZxkjgC+CMj8VMcbengkcf8XgOOCTBr9qsg=
Subject key identifier: 49:F0:BE:95:8C:C5:0A:12:62:CF:51:62:EF:CF:04:10:5A:7A:33:7F
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 01857230F1EA0733AF4197ACC47A7E7F22CD
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/SfC-lYzFChJiz1Fi788EEFp6M38.roa
Signing time: Mon 02 Jan 2023 11:14:48 +0000
ROA not before: Mon 02 Jan 2023 11:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203153
IP address blocks: 88.212.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:f1:ea:07:33:af:41:97:ac:c4:7a:7e:7f:22:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: Jan 2 11:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49f0be958cc50a1262cf5162efcf04105a7a337f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:07:36:b5:af:c4:96:8c:02:dd:81:10:0e:
a6:2d:b7:eb:67:df:81:0b:59:57:d4:88:32:5a:d3:
42:f7:13:81:92:80:53:e6:f6:aa:5d:63:45:dd:bf:
5b:39:9b:6f:44:b4:e5:8a:43:b6:8b:9f:19:81:b7:
42:ec:ea:88:74:6e:0f:65:73:ba:fd:76:80:ba:ee:
6e:4c:48:01:ed:f4:eb:15:ff:24:03:0f:a4:91:92:
ec:16:46:82:02:0b:e0:f4:c4:56:5d:ed:be:03:04:
aa:ad:53:a8:33:a5:bf:2e:f0:b0:19:cf:5b:9d:7b:
17:75:b1:46:5d:3c:a8:b5:92:bc:f2:6c:fa:02:d0:
6d:54:6a:ff:24:78:aa:cc:ed:e8:ad:e1:fb:0e:87:
a1:26:12:1e:4f:8c:1d:8e:5a:06:d0:75:fc:bc:f4:
1a:71:9e:f9:71:87:06:ab:da:86:e0:cb:d6:4a:94:
3e:09:a2:37:32:73:16:ae:56:17:2c:44:26:01:e5:
f5:6d:4d:fa:a5:60:de:00:41:29:f0:65:4c:7c:77:
e9:f4:57:d6:d4:76:5e:da:55:aa:89:7b:80:8c:16:
36:67:49:e4:80:81:3e:e0:f6:14:d2:99:c6:e9:9a:
41:d2:8f:28:6e:23:51:e3:4b:8c:3a:48:bb:7f:ae:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F0:BE:95:8C:C5:0A:12:62:CF:51:62:EF:CF:04:10:5A:7A:33:7F
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/SfC-lYzFChJiz1Fi788EEFp6M38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.212.228.0/24
Signature Algorithm: sha256WithRSAEncryption
49:8a:b5:db:af:b9:68:8d:b8:20:7c:98:c6:83:35:0b:67:6c:
62:fd:55:84:ac:bc:67:d1:2a:08:92:11:73:d6:46:e4:59:d6:
aa:35:93:df:0e:a0:0d:75:0f:74:70:60:65:f6:64:11:1c:31:
8c:3f:99:16:c8:09:df:77:88:51:c3:03:9f:e7:b7:c8:67:be:
bd:42:c9:44:18:56:47:2b:cf:73:a4:4e:4d:da:69:07:3b:62:
c7:34:9b:89:ae:e4:21:58:67:59:82:db:a4:e3:ae:fc:c5:e8:
78:9a:d9:36:bd:6c:33:76:18:ed:27:0d:b6:4d:6c:ee:7e:d2:
e3:9d:8a:29:77:4f:0d:aa:d7:e6:f6:88:fd:a8:15:9e:46:80:
d6:f8:68:bf:3a:98:8f:c3:70:6b:b5:29:58:f0:c8:e0:39:e8:
5e:f9:39:bc:22:7e:81:2e:8c:95:11:66:68:a9:e2:5a:b9:11:
35:3b:ae:ac:68:25:32:63:ec:ab:80:4f:b9:d9:ca:a1:95:14:
41:2a:ea:70:c2:0f:56:a1:73:81:26:d0:1f:fd:19:5c:99:ec:
d6:8e:1b:27:1b:38:cb:13:db:bf:5f:67:e5:2a:36:15:8d:29:
20:88:4a:37:3f:52:52:4a:b0:d9:8c:6f:ad:3a:f6:de:16:30:
a8:57:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:01 2024 by rpki-client on console-ams.rpki-client.org