Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/ofIPSxsrtX9Qos8u-MemB4fTgYg.roa
File: ofIPSxsrtX9Qos8u-MemB4fTgYg.roa (raw, json)
Hash identifier: vCCM3wplEJJA4tmtypnD0VYDfHzhX2IyKQqNBBMGL/M=
Subject key identifier: A1:F2:0F:4B:1B:2B:B5:7F:50:A2:CF:2E:F8:C7:A6:07:87:D3:81:88
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 018CC79427C1D4400E390518DA6BF4353429
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/ofIPSxsrtX9Qos8u-MemB4fTgYg.roa
Signing time: Tue 02 Jan 2024 00:30:24 +0000
ROA not before: Tue 02 Jan 2024 00:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206224
IP address blocks: 88.119.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 09:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:27:c1:d4:40:0e:39:05:18:da:6b:f4:35:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 00:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1f20f4b1b2bb57f50a2cf2ef8c7a60787d38188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:cc:34:ab:e9:0f:ba:50:11:bb:01:47:05:
08:43:2f:2d:d6:77:c0:f2:be:7d:c5:c8:a5:0f:19:
82:e6:cb:07:04:bc:33:ed:64:ca:2e:0c:52:5e:a8:
4e:8e:d9:f1:85:fc:a5:e0:f6:e2:01:26:92:bd:77:
29:66:da:ba:a3:b6:02:eb:40:51:fa:4b:df:fe:56:
5e:c2:e8:c6:f8:e3:3b:3b:f4:03:f3:8f:a5:8b:9e:
89:60:8b:45:40:5b:f7:cf:ef:83:a5:f4:a0:4e:2a:
2e:95:3b:37:e3:7e:6a:24:5a:d8:f5:b0:1d:ea:33:
ea:34:42:4b:78:3f:5c:55:d6:15:b5:6c:6c:35:51:
be:56:56:8f:fd:f2:f4:91:18:e9:81:be:e7:e8:b3:
71:fb:9c:b3:d5:0e:60:1f:e7:19:c8:ae:74:06:8c:
88:f9:63:99:3f:a9:c7:df:a4:f9:f4:77:5c:a1:dc:
5f:57:eb:9f:7e:df:f2:22:10:8e:5f:42:73:94:12:
7f:b0:0a:1f:96:01:fc:22:f2:21:b1:84:d3:b4:1f:
b4:0a:67:3f:10:91:a3:fa:69:9f:55:53:3f:92:c6:
f5:59:8a:d3:60:9f:66:53:4a:e2:7f:e9:39:f6:3a:
69:1c:df:e2:c9:68:44:f7:83:96:3d:2b:d7:16:c2:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F2:0F:4B:1B:2B:B5:7F:50:A2:CF:2E:F8:C7:A6:07:87:D3:81:88
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/ofIPSxsrtX9Qos8u-MemB4fTgYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.119.181.0/24
Signature Algorithm: sha256WithRSAEncryption
25:39:a2:34:30:28:0e:bf:7b:db:7a:5a:bf:20:15:e4:3b:6e:
cc:bb:4a:07:28:e9:42:94:b8:9b:10:4b:60:a6:57:cd:72:ed:
e9:c4:1e:50:1a:2f:1e:d6:c7:2d:c5:cb:f6:7f:fd:89:33:37:
37:94:4e:75:97:48:95:b3:d9:1a:86:34:c2:c3:a0:5e:c5:05:
45:e1:00:dc:94:0d:44:e4:57:02:f8:ee:0c:9e:b9:ce:d8:c4:
6f:30:7e:94:a9:65:6f:5f:3a:95:8b:70:c3:76:38:53:a1:ed:
bf:86:2d:62:ee:d8:75:46:06:83:23:64:f7:dc:13:42:ed:83:
cc:67:2c:79:8a:ec:98:48:bb:94:36:69:a1:64:cf:20:24:49:
23:09:d5:51:5b:d7:31:d0:ec:27:fd:24:52:69:2b:39:57:ab:
01:12:05:2b:b4:c8:74:1f:15:b0:d6:68:2c:95:d2:4c:41:34:
49:5f:73:3e:6a:43:35:f4:60:9b:f9:f2:a6:9d:b5:86:7f:c5:
0d:0b:28:ec:e6:35:d3:85:62:a5:09:84:82:79:25:e0:6d:b3:
4b:0a:5e:dd:60:92:69:b8:eb:c3:22:1f:04:56:61:2b:79:cd:
b3:3f:b9:f8:3b:5a:84:81:66:13:8b:4c:ec:75:d2:03:36:92:
5a:45:75:e1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzHlCfB1EAOOQUY2mv0NTQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm
NDYyZWEwHhcNMjQwMTAyMDAzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWYyMGY0YjFiMmJiNTdmNTBhMmNmMmVmOGM3YTYwNzg3ZDM4MTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh/MNKvpD7pQEbsBRwUIQy8t1nfA
8r59xcilDxmC5ssHBLwz7WTKLgxSXqhOjtnxhfyl4PbiASaSvXcpZtq6o7YC60BR
+kvf/lZewujG+OM7O/QD84+li56JYItFQFv3z++DpfSgTioulTs3435qJFrY9bAd
6jPqNEJLeD9cVdYVtWxsNVG+VlaP/fL0kRjpgb7n6LNx+5yz1Q5gH+cZyK50BoyI
+WOZP6nH36T59HdcodxfV+ufft/yIhCOX0JzlBJ/sAoflgH8IvIhsYTTtB+0Cmc/
EJGj+mmfVVM/ksb1WYrTYJ9mU0rif+k59jppHN/iyWhE94OWPSvXFsIEvQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKHyD0sbK7V/UKLPLvjHpgeH04GIMB8GA1UdIwQY
MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw
LWJlNTgzMmQ1ZjdhYS8xL29mSVBTeHNydFg5UW9zOHUtTWVtQjRmVGdZZy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh
YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABYd7Uw
DQYJKoZIhvcNAQELBQADggEBACU5ojQwKA6/e9t6Wr8gFeQ7bsy7Sgco6UKUuJsQ
S2CmV81y7enEHlAaLx7Wxy3Fy/Z//YkzNzeUTnWXSJWz2RqGNMLDoF7FBUXhANyU
DUTkVwL47gyeuc7YxG8wfpSpZW9fOpWLcMN2OFOh7b+GLWLu2HVGBoMjZPfcE0Lt
g8xnLHmK7JhIu5Q2aaFkzyAkSSMJ1VFb1zHQ7Cf9JFJpKzlXqwESBSu0yHQfFbDW
aCyV0kxBNElfcz5qQzX0YJv58qadtYZ/xQ0LKOzmNdOFYqUJhIJ5JeBts0sKXt1g
kmm468MiHwRWYSt5zbM/ufg7WoSBZhOLTOx10gM2klpFdeE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:18 2024 by rpki-client on console-fra.rpki-client.org