Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/rsw4BgE8FKVvn3Dah1Jfzd6bEyo.roa
File: rsw4BgE8FKVvn3Dah1Jfzd6bEyo.roa (raw, json)
Hash identifier: FVi9+QuuXvARRkecAV/UGfXufEoFIdjZdAJlZpiwdk0=
Subject key identifier: AE:CC:38:06:01:3C:14:A5:6F:9F:70:DA:87:52:5F:CD:DE:9B:13:2A
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 018572DEE1822FF6253F3EA0442CAC70A33A
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/rsw4BgE8FKVvn3Dah1Jfzd6bEyo.roa
Signing time: Mon 02 Jan 2023 14:24:47 +0000
ROA not before: Mon 02 Jan 2023 14:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50289
IP address blocks: 88.84.193.0/24 maxlen: 24
88.84.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:de:e1:82:2f:f6:25:3f:3e:a0:44:2c:ac:70:a3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Jan 2 14:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aecc3806013c14a56f9f70da87525fcdde9b132a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:52:be:78:c6:d3:ec:98:a8:bd:3b:61:34:e8:
2e:e0:21:ff:b6:87:fb:fa:47:0c:a6:69:b8:8b:de:
a0:f9:ff:ee:c6:68:79:b8:f5:66:5a:8e:88:c3:71:
78:48:f4:17:fa:c9:74:2a:95:62:c8:32:40:96:a5:
61:f4:a5:59:ad:16:f8:9f:ce:20:76:ed:e8:17:fa:
65:ef:44:4a:bb:14:9a:60:57:88:95:e2:20:c3:61:
4c:44:ef:f1:92:7d:60:c1:64:7f:6f:df:86:e5:6a:
fc:ce:85:e9:18:76:94:b2:9c:7f:da:92:ad:9a:28:
38:fc:51:b1:08:52:8e:52:81:0e:8c:f2:3f:31:70:
40:6e:6f:7c:9c:1f:8a:92:ae:57:cd:df:dd:d8:07:
95:7d:e8:69:4c:c6:57:90:57:8e:7c:29:48:af:c7:
53:96:ee:be:69:8d:cc:c9:2a:d6:87:69:47:bf:ed:
d0:28:2e:ad:6b:c9:ed:ad:9e:88:70:3b:cb:c8:3a:
f3:59:b9:27:f9:ae:16:92:d4:9e:9a:67:b1:e5:c8:
87:d6:99:67:69:95:07:64:11:ab:69:c4:40:3d:b5:
00:1f:66:f0:8a:91:ef:e6:d7:65:7d:6d:4f:a9:d3:
01:13:52:9c:4d:11:72:d8:25:22:36:80:8b:2c:35:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CC:38:06:01:3C:14:A5:6F:9F:70:DA:87:52:5F:CD:DE:9B:13:2A
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/rsw4BgE8FKVvn3Dah1Jfzd6bEyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.193.0/24
88.84.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e1:47:b0:51:33:9a:da:b6:c4:c7:9e:0d:08:47:0d:c2:5c:
55:34:f3:72:13:ff:93:15:e5:a9:f8:a4:f8:db:9e:79:a2:9f:
dc:34:10:5f:8b:88:b7:cf:8a:bf:90:95:74:52:6c:ee:91:61:
d6:70:94:9d:d1:33:8a:da:69:fb:db:97:78:2a:db:2f:89:60:
b7:f5:16:86:42:b4:ee:62:a6:57:d2:a5:e7:69:7b:a4:1b:eb:
7e:a3:8c:74:12:db:eb:56:41:87:d0:d3:4b:28:44:52:3e:e7:
48:a0:2c:7f:4e:43:ed:65:bd:5f:e8:49:8c:21:a8:2a:c8:39:
f8:37:39:01:5f:e0:7a:a2:c3:0d:e4:23:1a:88:fb:61:f6:73:
29:29:d5:75:47:e4:51:2e:41:94:71:42:93:ea:c5:02:97:03:
8c:8b:d9:f7:50:eb:f2:47:65:0d:5a:fb:47:83:89:fe:60:2a:
7e:1b:7b:46:03:a7:9a:37:0a:e6:9f:3a:25:f1:98:28:7e:2d:
c8:76:33:5a:cc:29:82:4b:b0:2a:f7:69:cb:9c:98:f0:61:61:
d3:ea:2c:e5:23:7b:46:1c:b9:66:ef:63:4c:d6:0e:58:40:6f:
f5:3c:c2:39:74:17:54:3a:24:69:e4:47:8c:f2:4b:36:87:1f:
ac:86:48:d8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVy3uGCL/YlPz6gRCyscKM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTBjZGQzMWQzYTcxZGExY2U0YTRiZDg1ZjE5ODdlM2Nh
NGVhZmEwHhcNMjMwMTAyMTQyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWNjMzgwNjAxM2MxNGE1NmY5ZjcwZGE4NzUyNWZjZGRlOWIxMzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1K+eMbT7JiovTthNOgu4CH/tof7
+kcMpmm4i96g+f/uxmh5uPVmWo6Iw3F4SPQX+sl0KpViyDJAlqVh9KVZrRb4n84g
du3oF/pl70RKuxSaYFeIleIgw2FMRO/xkn1gwWR/b9+G5Wr8zoXpGHaUspx/2pKt
mig4/FGxCFKOUoEOjPI/MXBAbm98nB+Kkq5Xzd/d2AeVfehpTMZXkFeOfClIr8dT
lu6+aY3MySrWh2lHv+3QKC6ta8ntrZ6IcDvLyDrzWbkn+a4WktSemmex5ciH1pln
aZUHZBGracRAPbUAH2bwipHv5tdlfW1PqdMBE1KcTRFy2CUiNoCLLDVeUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK7MOAYBPBSlb59w2odSX83emxMqMB8GA1UdIwQY
MBaAFGCQzdMdOnHaHOSkvYXxmH48pOr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2Yt
NzM1MWY4NjliNDJiLzEvcnN3NEJnRThGS1Z2bjNEYWgxSmZ6ZDZiRXlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2YtNzM1MWY4NjliNDJi
LzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWFTBAwQA
WFTQMA0GCSqGSIb3DQEBCwUAA4IBAQBa4UewUTOa2rbEx54NCEcNwlxVNPNyE/+T
FeWp+KT42555op/cNBBfi4i3z4q/kJV0UmzukWHWcJSd0TOK2mn725d4KtsviWC3
9RaGQrTuYqZX0qXnaXukG+t+o4x0EtvrVkGH0NNLKERSPudIoCx/TkPtZb1f6EmM
IagqyDn4NzkBX+B6osMN5CMaiPth9nMpKdV1R+RRLkGUcUKT6sUClwOMi9n3UOvy
R2UNWvtHg4n+YCp+G3tGA6eaNwrmnzol8Zgofi3IdjNazCmCS7Aq92nLnJjwYWHT
6izlI3tGHLlm72NM1g5YQG/1PMI5dBdUOiRp5EeM8ks2hx+shkjY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:11 2024 by rpki-client on console-fra.rpki-client.org