Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/OoeObW1HW40iPui9s8djfZlcTMo.roa
File: OoeObW1HW40iPui9s8djfZlcTMo.roa (raw, json)
Hash identifier: 2ucRzUNLFXd0BMUt1Ln9n6eRQFBV+z1nVhGX9yBDVUU=
Subject key identifier: 3A:87:8E:6D:6D:47:5B:8D:22:3E:E8:BD:B3:C7:63:7D:99:5C:4C:CA
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 01896DC6B7A605C017C0C199DB1754551BAD
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/OoeObW1HW40iPui9s8djfZlcTMo.roa
Signing time: Wed 19 Jul 2023 10:51:26 +0000
ROA not before: Wed 19 Jul 2023 10:51:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 88.218.105.0/24 maxlen: 24
88.218.104.0/24 maxlen: 24
45.135.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:c6:b7:a6:05:c0:17:c0:c1:99:db:17:54:55:1b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jul 19 10:51:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a878e6d6d475b8d223ee8bdb3c7637d995c4cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e8:ea:f1:f2:f6:0c:ae:ee:35:71:90:68:86:
5a:4f:89:65:d0:81:d3:84:86:3b:b3:b1:b6:d8:2d:
e0:94:6f:58:d4:47:ea:f2:06:0b:85:1f:f4:b8:a9:
6c:61:d3:22:fd:bb:db:78:b3:51:27:dd:ab:da:fe:
f8:17:b8:c7:c1:e4:e9:8b:87:32:b4:3c:35:05:f2:
1b:9d:0e:b2:6e:cc:0b:b6:e4:54:b9:1c:06:3f:ce:
7d:2e:07:c8:16:31:8e:e2:64:7a:10:bd:65:2a:c8:
80:97:ee:8d:29:89:3e:03:13:2b:4c:73:cf:aa:f3:
5b:71:41:c5:f3:0c:b3:d9:fc:9f:61:6f:c1:41:ec:
13:2f:da:5d:b8:d1:c1:e8:ba:5c:7c:52:0e:eb:b9:
03:58:46:59:83:c9:fb:70:0e:b8:9e:d1:36:dc:32:
42:9a:10:7e:eb:0d:c1:ee:49:76:69:e5:c5:7d:f5:
58:bb:1b:4d:7d:ba:bc:4f:1b:4a:10:7a:aa:fd:54:
4d:f6:a0:b6:26:ba:83:17:b4:61:65:d3:14:82:f3:
47:3b:f9:b7:bc:59:b6:6c:c6:79:e1:06:c3:7f:a2:
2b:c0:86:b0:8d:91:c4:6e:7c:7c:01:e7:91:99:34:
70:b2:70:2d:92:70:56:2b:7c:48:1b:b6:4c:58:42:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:87:8E:6D:6D:47:5B:8D:22:3E:E8:BD:B3:C7:63:7D:99:5C:4C:CA
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/OoeObW1HW40iPui9s8djfZlcTMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.136.0/24
88.218.104.0/23
Signature Algorithm: sha256WithRSAEncryption
93:64:a4:82:8b:c4:64:9c:22:9d:e5:dc:f2:a6:ac:b1:18:c1:
30:a5:92:76:77:0d:1b:5e:32:b2:e6:1f:9a:c0:10:e3:f5:bc:
bd:f2:88:b4:24:55:54:bd:c4:63:49:9b:8b:a6:a8:15:40:50:
e9:c4:7a:78:13:3f:76:6f:c0:e4:71:b5:fe:18:db:51:c2:de:
aa:08:91:a5:f8:32:0b:10:c5:ea:6c:30:ea:8e:31:e5:30:ac:
fe:8e:65:d0:28:bf:5e:37:b0:d9:75:97:a3:4d:22:8a:28:3b:
8f:b1:98:72:f8:e7:42:c2:29:21:aa:b5:45:ba:fb:f1:2a:23:
02:0a:92:67:f0:e0:9d:bc:74:cd:6a:54:fa:45:9d:20:fc:90:
a4:d8:22:f7:3b:7d:9c:61:25:0c:a8:64:bb:90:0c:59:54:03:
b9:8d:72:26:6d:41:ad:b8:94:f4:2d:e7:c3:73:41:8d:06:2b:
be:29:22:48:19:a6:8b:ea:40:23:4e:7b:b2:a0:c1:61:db:93:
e4:d9:18:b4:b5:e7:50:09:53:d7:e2:46:36:b5:f0:dd:10:31:
d9:35:f9:b8:2c:44:69:06:29:1e:1d:04:a7:9c:53:f8:ac:d8:
53:81:0e:6f:81:c4:f2:9d:97:7b:c9:bd:4c:12:d8:d4:e6:4a:
20:a8:9c:83
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYltxremBcAXwMGZ2xdUVRutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx
OGM5YmMwHhcNMjMwNzE5MTA1MTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTg3OGU2ZDZkNDc1YjhkMjIzZWU4YmRiM2M3NjM3ZDk5NWM0Y2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnejq8fL2DK7uNXGQaIZaT4ll0IHT
hIY7s7G22C3glG9Y1Efq8gYLhR/0uKlsYdMi/bvbeLNRJ92r2v74F7jHweTpi4cy
tDw1BfIbnQ6ybswLtuRUuRwGP859LgfIFjGO4mR6EL1lKsiAl+6NKYk+AxMrTHPP
qvNbcUHF8wyz2fyfYW/BQewTL9pduNHB6LpcfFIO67kDWEZZg8n7cA64ntE23DJC
mhB+6w3B7kl2aeXFffVYuxtNfbq8TxtKEHqq/VRN9qC2JrqDF7RhZdMUgvNHO/m3
vFm2bMZ54QbDf6IrwIawjZHEbnx8AeeRmTRwsnAtknBWK3xIG7ZMWEL1vwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDqHjm1tR1uNIj7ovbPHY32ZXEzKMB8GA1UdIwQY
MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt
YmQzYmZjOTliZGE5LzEvT29lT2JXMUhXNDBpUHVpOXM4ZGpmWmxjVE1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5
LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYeIAwQB
WNpoMA0GCSqGSIb3DQEBCwUAA4IBAQCTZKSCi8RknCKd5dzypqyxGMEwpZJ2dw0b
XjKy5h+awBDj9by98oi0JFVUvcRjSZuLpqgVQFDpxHp4Ez92b8DkcbX+GNtRwt6q
CJGl+DILEMXqbDDqjjHlMKz+jmXQKL9eN7DZdZejTSKKKDuPsZhy+OdCwikhqrVF
uvvxKiMCCpJn8OCdvHTNalT6RZ0g/JCk2CL3O32cYSUMqGS7kAxZVAO5jXImbUGt
uJT0LefDc0GNBiu+KSJIGaaL6kAjTnuyoMFh25Pk2Ri0tedQCVPX4kY2tfDdEDHZ
Nfm4LERpBikeHQSnnFP4rNhTgQ5vgcTynZd7yb1MEtjU5kogqJyD
-----END CERTIFICATE-----
Generated at Sat Aug 5 17:42:31 2023 by rpki-client on console-fra.rpki-client.org