Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/Ct8WUnPpmeu7JsV9Q_OGcJ-vsek.roa
File: Ct8WUnPpmeu7JsV9Q_OGcJ-vsek.roa (raw, json)
Hash identifier: p0U3Wc92oWXABBDr3idhD+1oqbO8nbN6mYDeN/Mz0Sg=
Subject key identifier: 0A:DF:16:52:73:E9:99:EB:BB:26:C5:7D:43:F3:86:70:9F:AF:B1:E9
Certificate issuer: /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial: 018649B4C1452ED8DA3D0AE84DE5D5B55E56
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/Ct8WUnPpmeu7JsV9Q_OGcJ-vsek.roa
Signing time: Mon 13 Feb 2023 07:37:08 +0000
ROA not before: Mon 13 Feb 2023 07:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61071
IP address blocks: 88.213.211.0/24 maxlen: 24
88.213.210.0/24 maxlen: 24
88.213.213.0/24 maxlen: 24
88.213.215.0/24 maxlen: 24
88.213.214.0/23 maxlen: 23
88.213.214.0/24 maxlen: 24
178.217.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:b4:c1:45:2e:d8:da:3d:0a:e8:4d:e5:d5:b5:5e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
Validity
Not Before: Feb 13 07:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0adf165273e999ebbb26c57d43f386709fafb1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:7d:9a:a0:a4:85:17:d5:96:ca:48:2b:7f:
33:f2:d5:2c:86:1a:78:fb:d7:03:26:16:b5:a9:0d:
b1:9c:1f:6f:ff:f9:fa:3f:32:bf:34:83:ae:ef:7b:
58:80:b3:ad:03:82:3d:b1:54:9d:22:36:df:26:44:
d3:c9:01:04:07:14:2d:e8:9a:64:d1:4a:70:07:84:
6c:35:6e:e2:90:df:3b:84:3d:d5:74:c4:8f:cc:ab:
11:ad:f7:aa:55:b8:8a:c3:ac:c8:5f:8a:ad:0e:a1:
e0:5a:3f:22:f8:11:db:aa:9d:90:11:96:f7:09:3b:
b0:f1:40:47:5c:0d:db:1b:28:1e:8b:67:6e:38:6a:
dd:4f:eb:14:fc:6f:f8:b1:33:90:9c:76:cb:bc:b9:
59:92:fa:a5:f6:cf:46:c6:f7:8e:e0:aa:c5:8a:89:
04:4f:fd:e5:f3:07:62:50:6e:a5:e8:b9:49:26:53:
db:4a:06:be:00:90:3c:53:d5:53:e3:31:7a:36:89:
95:0c:ad:ce:0b:49:c6:9c:df:3f:dc:bb:e6:d6:9b:
c3:a9:fb:d2:0f:48:5c:58:04:36:c9:d0:fc:9e:bd:
26:80:b1:f9:fc:d6:8c:67:48:05:3b:6a:6f:b6:b4:
16:90:d1:bc:74:f2:f2:f4:be:17:7f:2c:93:49:36:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DF:16:52:73:E9:99:EB:BB:26:C5:7D:43:F3:86:70:9F:AF:B1:E9
X509v3 Authority Key Identifier:
keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/Ct8WUnPpmeu7JsV9Q_OGcJ-vsek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.213.210.0/23
88.213.213.0-88.213.215.255
178.217.88.0/22
Signature Algorithm: sha256WithRSAEncryption
15:9c:e1:cd:c6:68:5d:26:2e:e6:c8:e4:0d:0d:6e:8f:09:13:
44:20:f6:b7:a3:ff:63:10:4f:9f:1b:5f:48:f5:bb:c0:8f:01:
72:f9:8e:53:83:70:b7:d2:c4:59:e5:ee:b3:f9:c4:8c:9f:7f:
81:b2:a0:3e:b0:bc:f1:2f:6b:16:0d:ea:94:05:aa:15:19:67:
80:80:ec:95:44:08:9c:d3:b9:d1:8b:a7:6d:8d:1c:02:f0:d8:
12:ee:b3:50:3c:a4:29:58:b3:5b:a8:50:da:4d:0d:aa:3c:c8:
4f:4e:47:bf:5f:91:29:fb:08:fb:1a:70:73:cd:ff:45:54:db:
5e:a9:11:7c:70:ac:1d:6c:4a:83:34:52:2f:c4:e7:d2:bf:71:
c0:dc:20:28:ec:f6:12:52:84:41:ac:f9:cb:07:d1:59:9b:30:
4b:6e:a0:1e:11:3b:b0:6b:fa:ef:40:32:c2:33:0f:a1:b6:7b:
34:cc:07:74:d5:9c:7d:a1:b1:27:44:25:51:34:5f:7b:7b:be:
19:5a:42:a2:11:79:31:6e:52:3f:c9:a5:07:82:a9:d2:98:bd:
32:8c:33:26:54:37:1f:44:52:8a:eb:a1:38:a1:85:4a:61:57:
af:f3:f5:8a:50:cb:16:15:bd:04:60:60:71:2f:f2:c9:e2:9c:
0b:a6:70:55
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYZJtMFFLtjaPQroTeXVtV5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NDRmODEyYTBlMDAyYzM4ZTg0ZTQ3NjI4YmRiYTAzODU5
ODA5MGIwHhcNMjMwMjEzMDczNzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWRmMTY1MjczZTk5OWViYmIyNmM1N2Q0M2YzODY3MDlmYWZiMWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc99mqCkhRfVlspIK38z8tUshhp4
+9cDJha1qQ2xnB9v//n6PzK/NIOu73tYgLOtA4I9sVSdIjbfJkTTyQEEBxQt6Jpk
0UpwB4RsNW7ikN87hD3VdMSPzKsRrfeqVbiKw6zIX4qtDqHgWj8i+BHbqp2QEZb3
CTuw8UBHXA3bGygei2duOGrdT+sU/G/4sTOQnHbLvLlZkvql9s9GxveO4KrFiokE
T/3l8wdiUG6l6LlJJlPbSga+AJA8U9VT4zF6NomVDK3OC0nGnN8/3Lvm1pvDqfvS
D0hcWAQ2ydD8nr0mgLH5/NaMZ0gFO2pvtrQWkNG8dPLy9L4XfyyTSTbalQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFArfFlJz6ZnruybFfUPzhnCfr7HpMB8GA1UdIwQY
MBaAFJlE+BKg4ALDjoTkdii9ugOFmAkLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMt
MzA2YzU2NTEzNDNlLzEvQ3Q4V1VuUHBtZXU3SnNWOVFfT0djSi12c2VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMtMzA2YzU2NTEzNDNl
LzEvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBWNXSMAwD
BABY1dUDBANY1dADBAKy2VgwDQYJKoZIhvcNAQELBQADggEBABWc4c3GaF0mLubI
5A0Nbo8JE0Qg9rej/2MQT58bX0j1u8CPAXL5jlODcLfSxFnl7rP5xIyff4GyoD6w
vPEvaxYN6pQFqhUZZ4CA7JVECJzTudGLp22NHALw2BLus1A8pClYs1uoUNpNDao8
yE9OR79fkSn7CPsacHPN/0VU216pEXxwrB1sSoM0Ui/E59K/ccDcICjs9hJShEGs
+csH0VmbMEtuoB4RO7Br+u9AMsIzD6G2ezTMB3TVnH2hsSdEJVE0X3t7vhlaQqIR
eTFuUj/JpQeCqdKYvTKMMyZUNx9EUorroTihhUphV6/z9YpQyxYVvQRgYHEv8sni
nAumcFU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:51 2024 by rpki-client on console-ams.rpki-client.org