Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hGFBY6rsZKPDJ7eWISd8O7pqMFo.roa
File: hGFBY6rsZKPDJ7eWISd8O7pqMFo.roa (raw, json)
Hash identifier: 3Pq03S93HTEbysNW++WCR5ERBp29NUh7JC0Y5ntG+ow=
Subject key identifier: 84:61:41:63:AA:EC:64:A3:C3:27:B7:96:21:27:7C:3B:BA:6A:30:5A
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01859AA7FDDF2F89FE0F804A41FE937CE1A1
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hGFBY6rsZKPDJ7eWISd8O7pqMFo.roa
Signing time: Tue 10 Jan 2023 07:49:38 +0000
ROA not before: Tue 10 Jan 2023 07:49:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3352
IP address blocks: 88.15.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 11 Jan 2023 08:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:a7:fd:df:2f:89:fe:0f:80:4a:41:fe:93:7c:e1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 10 07:49:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84614163aaec64a3c327b79621277c3bba6a305a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:43:40:aa:85:77:f0:c1:68:fc:5c:f6:03:
ae:ba:19:fb:13:8e:ab:3a:ff:d3:19:fc:a4:6e:a5:
a7:33:f2:a8:fa:5e:85:50:02:1f:5a:cc:39:fd:9f:
06:35:95:e4:21:ee:b0:59:7d:d1:09:56:36:9a:ff:
7f:65:3a:48:c0:17:96:d7:89:fe:71:fb:fe:e3:ff:
1b:09:a1:b5:16:60:6e:bb:71:45:45:20:a3:57:89:
6d:53:f2:07:b3:55:fd:27:d3:4f:91:13:86:57:9a:
38:8e:c4:eb:99:84:39:f4:d0:62:1a:4a:88:e2:51:
74:32:3b:db:0b:25:f4:7c:a7:d2:38:92:d1:8d:39:
b3:dd:72:8c:d3:86:a8:81:32:17:44:f1:d3:f4:cc:
f4:f0:73:0b:d5:1e:7c:c9:cc:f4:56:92:7a:74:b2:
16:04:e3:9b:76:91:78:99:12:21:48:cd:c2:58:f3:
e0:58:ba:5e:c6:26:a6:75:1b:1e:2b:8c:be:77:2b:
4e:40:7d:75:c6:e2:71:3d:41:ce:ca:bb:25:14:39:
23:87:e4:d1:08:4b:7b:8f:22:43:65:d2:a1:c5:94:
7c:68:a6:fe:7e:a3:1a:f0:67:d3:7c:9e:a5:7d:1f:
22:6f:01:07:8e:35:80:f2:7f:5e:c9:b1:0e:89:f7:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:61:41:63:AA:EC:64:A3:C3:27:B7:96:21:27:7C:3B:BA:6A:30:5A
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/hGFBY6rsZKPDJ7eWISd8O7pqMFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.9.0.0-88.11.255.255
88.13.0.0-88.15.255.255
Signature Algorithm: sha256WithRSAEncryption
0f:34:49:b3:4c:b4:2c:fa:74:64:93:e7:55:e9:00:c2:57:61:
1f:2d:b1:0d:13:7c:03:64:15:b7:d5:1a:a7:0b:13:68:0a:a1:
ce:cb:89:83:18:96:ac:b3:ed:15:90:7c:1a:32:a4:e4:99:f0:
ca:01:40:84:bb:8a:fd:b4:e4:50:14:f7:51:07:76:df:12:0f:
12:36:ab:8c:6e:9b:50:a5:01:7e:bb:c3:a6:ce:df:29:7a:4b:
d8:49:37:c5:a4:19:d8:19:07:cf:f1:5f:ce:f9:8c:d8:a7:98:
ea:b2:f5:09:12:af:3e:92:ed:fe:f9:d9:6a:19:81:ee:e6:58:
7f:6f:60:8f:32:a4:5b:bb:58:3c:fe:42:0c:3a:3b:82:4a:07:
07:66:49:a5:a5:ee:96:a1:23:03:5c:b7:ba:2d:76:07:99:ff:
e5:83:2f:ca:08:73:20:b2:8c:42:7c:5a:ef:db:db:3b:b1:e7:
69:19:5c:25:d4:f5:f9:61:db:93:6a:cf:22:07:78:e2:8f:af:
79:40:7b:f1:49:ea:74:27:64:e1:b2:11:14:4e:ae:ed:54:3e:
bd:91:31:f2:c4:8e:9f:fb:54:9f:4a:2a:d2:23:4b:c2:d5:bf:
b9:5a:5e:eb:9f:63:39:6b:c1:80:46:59:b1:df:38:01:d2:9e:
94:ce:86:0a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYWap/3fL4n+D4BKQf6TfOGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjMwMTEwMDc0OTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDYxNDE2M2FhZWM2NGEzYzMyN2I3OTYyMTI3N2MzYmJhNmEzMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdBDQKqFd/DBaPxc9gOuuhn7E46r
Ov/TGfykbqWnM/Ko+l6FUAIfWsw5/Z8GNZXkIe6wWX3RCVY2mv9/ZTpIwBeW14n+
cfv+4/8bCaG1FmBuu3FFRSCjV4ltU/IHs1X9J9NPkROGV5o4jsTrmYQ59NBiGkqI
4lF0MjvbCyX0fKfSOJLRjTmz3XKM04aogTIXRPHT9Mz08HML1R58ycz0VpJ6dLIW
BOObdpF4mRIhSM3CWPPgWLpexiamdRseK4y+dytOQH11xuJxPUHOyrslFDkjh+TR
CEt7jyJDZdKhxZR8aKb+fqMa8GfTfJ6lfR8ibwEHjjWA8n9eybEOifeeZwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIRhQWOq7GSjwye3liEnfDu6ajBaMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvaEdGQlk2cnNaS1BESjdlV0lTZDhPN3BxTUZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYMAoDAwBYCQMD
AlgIMAoDAwBYDQMDBFgAMA0GCSqGSIb3DQEBCwUAA4IBAQAPNEmzTLQs+nRkk+dV
6QDCV2EfLbENE3wDZBW31RqnCxNoCqHOy4mDGJass+0VkHwaMqTkmfDKAUCEu4r9
tORQFPdRB3bfEg8SNquMbptQpQF+u8Omzt8pekvYSTfFpBnYGQfP8V/O+YzYp5jq
svUJEq8+ku3++dlqGYHu5lh/b2CPMqRbu1g8/kIMOjuCSgcHZkmlpe6WoSMDXLe6
LXYHmf/lgy/KCHMgsoxCfFrv29s7sedpGVwl1PX5YduTas8iB3jij695QHvxSep0
J2ThshEUTq7tVD69kTHyxI6f+1SfSirSI0vC1b+5Wl7rn2M5a8GARlmx3zgB0p6U
zoYK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:05 2024 by rpki-client on console-fra.rpki-client.org