Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3-BQ-51Dbut_CW_nBNRLSfdkLwI.roa
File: 3-BQ-51Dbut_CW_nBNRLSfdkLwI.roa (raw, json)
Hash identifier: yyM1dxQi8dj0vW1EfmTLyEy1MaC/gEf1f5Ms+1z1bdw=
Subject key identifier: DF:E0:50:FB:9D:43:6E:EB:7F:09:6F:E7:04:D4:4B:49:F7:64:2F:02
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A6A8E71E7F46312D337858639B0BF6FB7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3-BQ-51Dbut_CW_nBNRLSfdkLwI.roa
Signing time: Wed 06 Sep 2023 12:53:54 +0000
ROA not before: Wed 06 Sep 2023 12:53:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210912
IP address blocks: 88.216.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 14:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:8e:71:e7:f4:63:12:d3:37:85:86:39:b0:bf:6f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 6 12:53:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfe050fb9d436eeb7f096fe704d44b49f7642f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:f1:0b:1e:26:af:ce:52:df:39:00:37:0e:
d5:a9:69:2b:ec:10:74:a0:68:86:53:78:73:ba:8f:
0e:08:50:7d:83:f2:fd:66:af:11:df:69:e0:fc:5e:
a9:28:32:fa:04:ec:d8:05:97:c5:e9:c2:31:40:77:
c0:31:3a:bb:ff:ad:0e:3b:c0:e8:5f:43:2b:df:aa:
ba:6e:b2:c8:e4:7b:b8:6e:36:6b:49:50:48:94:8c:
e0:86:60:a2:19:d9:bc:d1:70:cf:08:ef:43:a9:9d:
1c:32:e2:80:5f:d0:67:1d:fd:f8:85:0a:bd:e2:ab:
4e:a9:59:6d:a7:c8:77:0e:b7:47:4f:05:d5:1d:45:
b8:39:5e:c9:e6:0c:1e:25:56:1f:4f:16:50:3a:e5:
94:c5:f3:18:35:f2:69:d8:2d:99:a2:4c:94:3e:02:
81:2b:59:fd:f3:4d:ea:2d:03:63:35:54:2a:22:42:
e9:c2:32:9c:c8:e5:31:26:3f:1c:2c:6b:3b:a9:24:
10:43:a1:62:60:57:de:fe:ca:6c:85:00:26:50:97:
ca:d7:86:fc:5c:b7:50:16:db:81:76:5d:25:5a:b5:
f1:1f:6c:81:e6:84:21:67:e6:31:40:a2:c2:05:31:
98:8e:72:02:12:60:76:6c:7c:e7:07:ea:e5:ce:0e:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E0:50:FB:9D:43:6E:EB:7F:09:6F:E7:04:D4:4B:49:F7:64:2F:02
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/3-BQ-51Dbut_CW_nBNRLSfdkLwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.38.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e6:8c:42:cb:64:30:91:73:85:b4:f6:83:7c:05:de:74:9f:
e9:c9:c2:68:43:a7:0e:04:70:7f:2b:cf:1c:70:92:c9:d2:85:
0f:b0:bb:91:26:70:0f:65:24:8b:9c:36:55:94:52:2d:9b:f5:
ae:c4:45:9a:fa:da:1b:e8:82:3e:9a:c6:28:58:0e:fd:6f:fb:
1c:94:e4:60:d0:e2:95:03:7e:fd:6a:71:5d:bc:6b:1c:c8:c7:
85:69:49:de:9e:20:df:19:ed:92:92:07:43:fc:b0:0a:1a:d2:
82:4d:a1:73:04:d7:59:c1:a0:c3:70:9a:a8:fe:45:26:43:d8:
22:aa:60:fd:24:d8:04:61:6b:7f:02:47:20:7d:c8:cc:0d:9f:
b6:c7:83:f3:3c:b7:9b:7e:60:ff:46:4f:61:c9:2e:d6:4e:98:
76:c7:e5:9d:a9:f1:48:49:85:79:0e:44:67:ae:4a:f6:62:57:
09:47:2a:ff:ec:9a:72:fe:68:d1:72:d4:a1:11:95:0e:a5:85:
0c:14:97:df:4a:80:3c:c1:b8:e7:62:d8:3f:10:a0:9c:63:85:
2d:e8:18:c4:eb:03:ce:cc:74:d0:8d:6c:d9:cc:60:24:d6:a4:
c9:fc:64:fa:cb:8a:df:f4:16:d8:bf:88:9d:a8:93:8e:33:f5:
e9:1a:bc:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpqjnHn9GMS0zeFhjmwv2+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwOTA2MTI1MzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmUwNTBmYjlkNDM2ZWViN2YwOTZmZTcwNGQ0NGI0OWY3NjQyZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGfxCx4mr85S3zkANw7VqWkr7BB0
oGiGU3hzuo8OCFB9g/L9Zq8R32ng/F6pKDL6BOzYBZfF6cIxQHfAMTq7/60OO8Do
X0Mr36q6brLI5Hu4bjZrSVBIlIzghmCiGdm80XDPCO9DqZ0cMuKAX9BnHf34hQq9
4qtOqVltp8h3DrdHTwXVHUW4OV7J5gweJVYfTxZQOuWUxfMYNfJp2C2ZokyUPgKB
K1n9803qLQNjNVQqIkLpwjKcyOUxJj8cLGs7qSQQQ6FiYFfe/spshQAmUJfK14b8
XLdQFtuBdl0lWrXxH2yB5oQhZ+YxQKLCBTGYjnICEmB2bHznB+rlzg4QowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN/gUPudQ27rfwlv5wTUS0n3ZC8CMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvMy1CUS01MURidXRfQ1dfbkJOUkxTZmRrTHdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNgmMA0G
CSqGSIb3DQEBCwUAA4IBAQCE5oxCy2QwkXOFtPaDfAXedJ/pycJoQ6cOBHB/K88c
cJLJ0oUPsLuRJnAPZSSLnDZVlFItm/WuxEWa+tob6II+msYoWA79b/sclORg0OKV
A379anFdvGscyMeFaUneniDfGe2SkgdD/LAKGtKCTaFzBNdZwaDDcJqo/kUmQ9gi
qmD9JNgEYWt/AkcgfcjMDZ+2x4PzPLebfmD/Rk9hyS7WTph2x+WdqfFISYV5DkRn
rkr2YlcJRyr/7Jpy/mjRctShEZUOpYUMFJffSoA8wbjnYtg/EKCcY4Ut6BjE6wPO
zHTQjWzZzGAk1qTJ/GT6y4rf9BbYv4idqJOOM/XpGrxY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:30 2024 by rpki-client on console-fra.rpki-client.org