Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4Q6U4FbYjJDKSgznOHUJEsArGP8.roa
File: 4Q6U4FbYjJDKSgznOHUJEsArGP8.roa (raw, json)
Hash identifier: wdyRDz36Z+Dv7V7vbkHY9WGqHsyQdGnvseL+qF7RPPc=
Subject key identifier: E1:0E:94:E0:56:D8:8C:90:CA:4A:0C:E7:38:75:09:12:C0:2B:18:FF
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFC64DC26FB57B53697C0393923CAE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4Q6U4FbYjJDKSgznOHUJEsArGP8.roa
Signing time: Sun 01 Jan 2023 18:54:51 +0000
ROA not before: Sun 01 Jan 2023 18:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141968
IP address blocks: 88.216.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:c6:4d:c2:6f:b5:7b:53:69:7c:03:93:92:3c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e10e94e056d88c90ca4a0ce738750912c02b18ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:00:d1:a4:0d:91:44:12:aa:19:87:9e:c5:
4f:7a:19:15:dc:52:73:4a:2d:fb:d5:51:16:9f:04:
45:8d:cb:ea:9d:7d:e0:ce:2e:4f:7a:5d:81:01:8a:
35:d2:8f:64:31:d7:59:64:29:6e:bc:b5:b5:fc:15:
07:8c:b5:f5:83:92:77:15:e5:c3:86:6b:01:90:84:
be:c2:6d:ce:cb:26:f7:69:ce:e1:04:a8:fb:8b:1e:
6b:a4:8d:a9:da:38:c8:b0:d0:0b:8e:f4:6b:a1:fc:
04:b2:8f:8d:ea:4e:f5:3e:4b:30:9e:c6:9f:be:27:
b8:b7:37:ca:5c:a4:9b:2f:e3:b8:fe:54:d3:8f:86:
10:36:db:43:f3:36:7e:31:9a:bc:76:7b:fa:9e:7a:
51:6b:03:32:f7:f6:b3:23:11:09:3e:2d:aa:9f:4e:
49:23:05:6a:f8:06:18:42:f0:95:06:4e:c1:a2:1d:
58:18:3a:d3:11:a9:a9:15:30:67:62:50:e9:42:8c:
e5:1d:da:58:87:4d:29:04:3a:e1:1e:f0:be:20:56:
87:cb:60:77:72:4d:62:6b:2b:d2:7e:71:5a:aa:e6:
83:26:5a:9d:9c:37:4c:6b:5b:00:cf:9d:52:f3:e0:
3f:1c:b8:44:b1:81:f3:a9:b1:31:61:4d:01:5f:4b:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0E:94:E0:56:D8:8C:90:CA:4A:0C:E7:38:75:09:12:C0:2B:18:FF
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4Q6U4FbYjJDKSgznOHUJEsArGP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3f:a6:7c:7e:5c:8a:a4:bb:56:c9:2a:16:49:c8:4d:b2:4d:
e2:81:33:24:79:68:fa:0e:20:2a:2e:48:56:c8:5e:27:d2:6a:
23:36:d7:ce:8a:60:fd:89:46:72:59:38:03:08:42:cd:47:d9:
c2:b4:12:cd:12:c0:22:ac:75:4c:37:3d:0e:51:b1:b8:3f:01:
a0:de:eb:c4:50:8b:ce:42:40:72:69:e3:9e:fa:ca:51:d1:63:
49:e0:4f:d3:5a:6e:54:24:5a:a4:2d:93:05:1e:ff:f0:d6:cf:
b1:d9:bc:8e:85:2b:c6:b4:73:19:36:6c:03:24:e9:68:48:c3:
cc:6d:cd:f5:57:bd:6f:cf:e8:4d:35:e5:c5:d0:26:9e:ca:12:
28:2a:10:19:ef:5c:a4:20:56:03:6c:fd:ab:80:9a:87:fc:8d:
5e:3f:21:28:1b:6f:20:dc:aa:80:9e:92:5f:64:70:1b:f4:fe:
cf:3a:57:b1:d1:2b:fc:8d:86:d7:e3:7b:f7:7d:07:03:f2:a9:
c6:97:fb:82:fd:00:40:3d:39:8f:cc:2f:93:3e:0a:9e:17:be:
29:08:45:66:77:8f:2f:6f:62:30:1f:df:21:9d:1f:4d:4f:02:
ac:92:ce:01:bf:86:e1:ab:c2:50:e0:e6:74:94:aa:6f:ac:da:
dd:23:49:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVur8ZNwm+1e1NpfAOTkjyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTAxMTg1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTBlOTRlMDU2ZDg4YzkwY2E0YTBjZTczODc1MDkxMmMwMmIxOGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzUA0aQNkUQSqhmHnsVPehkV3FJz
Si371VEWnwRFjcvqnX3gzi5Pel2BAYo10o9kMddZZCluvLW1/BUHjLX1g5J3FeXD
hmsBkIS+wm3Oyyb3ac7hBKj7ix5rpI2p2jjIsNALjvRrofwEso+N6k71Pkswnsaf
vie4tzfKXKSbL+O4/lTTj4YQNttD8zZ+MZq8dnv6nnpRawMy9/azIxEJPi2qn05J
IwVq+AYYQvCVBk7Boh1YGDrTEampFTBnYlDpQozlHdpYh00pBDrhHvC+IFaHy2B3
ck1iayvSfnFaquaDJlqdnDdMa1sAz51S8+A/HLhEsYHzqbExYU0BX0v6GwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOEOlOBW2IyQykoM5zh1CRLAKxj/MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvNFE2VTRGYllqSkRLU2d6bk9IVUpFc0FyR1A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNi0MA0G
CSqGSIb3DQEBCwUAA4IBAQCSP6Z8flyKpLtWySoWSchNsk3igTMkeWj6DiAqLkhW
yF4n0mojNtfOimD9iUZyWTgDCELNR9nCtBLNEsAirHVMNz0OUbG4PwGg3uvEUIvO
QkByaeOe+spR0WNJ4E/TWm5UJFqkLZMFHv/w1s+x2byOhSvGtHMZNmwDJOloSMPM
bc31V71vz+hNNeXF0CaeyhIoKhAZ71ykIFYDbP2rgJqH/I1ePyEoG28g3KqAnpJf
ZHAb9P7POlex0Sv8jYbX43v3fQcD8qnGl/uC/QBAPTmPzC+TPgqeF74pCEVmd48v
b2IwH98hnR9NTwKsks4Bv4bhq8JQ4OZ0lKpvrNrdI0mw
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:44 2023 by rpki-client on console-fra.rpki-client.org