Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6QDQRSd8EotFEOpvDWrD9wM6diU.roa
File: 6QDQRSd8EotFEOpvDWrD9wM6diU.roa (raw, json)
Hash identifier: 4yfWMJZOGi05H6zUvxNcw+WGybyPodj8l5AfgdHCz3w=
Subject key identifier: E9:00:D0:45:27:7C:12:8B:45:10:EA:6F:0D:6A:C3:F7:03:3A:76:25
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01891BCBD5C592E25766A388DB96FF19EF68
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6QDQRSd8EotFEOpvDWrD9wM6diU.roa
Signing time: Mon 03 Jul 2023 12:48:10 +0000
ROA not before: Mon 03 Jul 2023 12:48:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 88.216.67.0/24 maxlen: 24
88.216.66.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 07:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1b:cb:d5:c5:92:e2:57:66:a3:88:db:96:ff:19:ef:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 3 12:48:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e900d045277c128b4510ea6f0d6ac3f7033a7625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:75:27:be:37:37:59:a0:a7:8c:0e:19:60:95:
6e:cf:6a:12:7c:24:0e:2f:c3:0d:5e:47:72:cc:93:
53:cd:80:45:11:86:9d:70:96:2a:79:7e:99:99:0b:
ce:15:c7:ff:b8:52:f8:9c:6e:26:78:9c:94:28:92:
aa:16:bf:0d:1e:af:bd:67:81:fe:15:c3:80:83:b7:
a2:8e:3a:a0:aa:d2:12:60:69:64:a7:e1:b0:f8:04:
30:51:75:78:b7:9f:19:fa:62:8e:7f:77:6a:33:f4:
06:d6:c3:18:60:9c:4d:51:f5:af:8e:5e:e8:6a:05:
84:0f:c6:9e:aa:eb:97:51:e5:4b:b4:02:ef:6b:58:
48:94:7d:76:56:b7:ae:4e:99:47:20:d6:48:e5:fd:
ec:02:b2:04:55:a8:77:85:2c:93:50:45:2b:5e:6f:
5b:94:1f:3a:7a:7e:a0:51:e6:7b:d5:52:8e:0b:c9:
2a:b0:cd:8f:4b:9b:0e:f2:32:fa:e9:2c:b2:7e:33:
b4:96:ca:84:90:d1:8f:6d:1c:11:80:b7:a4:21:d8:
1b:75:36:5f:80:b8:2f:54:a2:87:50:f0:7d:4c:62:
59:e4:96:ca:00:8e:76:d7:23:f6:c3:af:af:1c:36:
cc:ba:29:8a:ec:83:ec:51:31:db:3d:71:8a:91:34:
68:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:D0:45:27:7C:12:8B:45:10:EA:6F:0D:6A:C3:F7:03:3A:76:25
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/6QDQRSd8EotFEOpvDWrD9wM6diU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.28.0/24
84.32.49.0/24
88.216.66.0/23
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8f:6a:32:ad:26:9a:2c:0e:03:bb:3a:12:da:7c:0f:ef:79:
3f:63:6d:76:32:ff:b3:93:83:a4:4e:96:7d:33:5f:52:2a:40:
2b:93:62:08:06:cc:fe:06:89:0e:fc:3e:d6:f6:e0:f8:c4:87:
69:71:17:7f:21:d5:9f:e3:d3:37:07:b5:66:83:02:ba:98:f0:
1d:9b:55:2a:ae:4b:48:9f:4b:99:43:e2:4e:14:48:e2:62:02:
f6:a1:b1:4e:16:27:dc:8a:84:29:0c:57:22:e3:98:e0:f2:34:
ff:54:fa:bc:9a:10:7f:cb:8e:73:63:2c:44:4e:2b:9a:1d:fd:
f1:66:4a:1e:ad:86:65:1e:02:7b:f2:fe:f0:15:74:a6:ff:05:
39:f7:d6:92:b0:29:db:bd:41:ff:e7:c1:c4:8c:21:af:1a:56:
d8:07:81:ba:57:24:4c:34:8d:42:ff:9b:38:1e:4d:ad:d1:ba:
6f:6e:82:d7:9e:1d:ae:96:d0:44:ab:d7:30:f0:26:62:39:b0:
19:3e:85:e3:4b:8d:b1:c8:c3:d1:92:09:d6:fd:ba:ee:a8:7f:
00:c2:13:ea:dc:68:93:92:75:d3:28:15:a5:54:01:82:30:0f:
19:28:b1:de:b4:ab:d1:c4:13:af:ee:6d:e9:6b:47:b1:66:05:
f1:b2:ad:a6
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYkby9XFkuJXZqOI25b/Ge9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNzAzMTI0ODEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTAwZDA0NTI3N2MxMjhiNDUxMGVhNmYwZDZhYzNmNzAzM2E3NjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnUnvjc3WaCnjA4ZYJVuz2oSfCQO
L8MNXkdyzJNTzYBFEYadcJYqeX6ZmQvOFcf/uFL4nG4meJyUKJKqFr8NHq+9Z4H+
FcOAg7eijjqgqtISYGlkp+Gw+AQwUXV4t58Z+mKOf3dqM/QG1sMYYJxNUfWvjl7o
agWED8aequuXUeVLtALva1hIlH12VreuTplHINZI5f3sArIEVah3hSyTUEUrXm9b
lB86en6gUeZ71VKOC8kqsM2PS5sO8jL66SyyfjO0lsqEkNGPbRwRgLekIdgbdTZf
gLgvVKKHUPB9TGJZ5JbKAI521yP2w6+vHDbMuimK7IPsUTHbPXGKkTRokwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOkA0EUnfBKLRRDqbw1qw/cDOnYlMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvNlFEUVJTZDhFb3RGRU9wdkRXckQ5d002ZGlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVCAcAwQA
VCAxAwQBWNhCAwQAWNjfMA0GCSqGSIb3DQEBCwUAA4IBAQBdj2oyrSaaLA4DuzoS
2nwP73k/Y212Mv+zk4OkTpZ9M19SKkArk2IIBsz+BokO/D7W9uD4xIdpcRd/IdWf
49M3B7VmgwK6mPAdm1UqrktIn0uZQ+JOFEjiYgL2obFOFifcioQpDFci45jg8jT/
VPq8mhB/y45zYyxETiuaHf3xZkoerYZlHgJ78v7wFXSm/wU599aSsCnbvUH/58HE
jCGvGlbYB4G6VyRMNI1C/5s4Hk2t0bpvboLXnh2ultBEq9cw8CZiObAZPoXjS42x
yMPRkgnW/bruqH8AwhPq3GiTknXTKBWlVAGCMA8ZKLHetKvRxBOv7m3pa0exZgXx
sq2m
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:24 2024 by rpki-client on console-ams.rpki-client.org