Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DFD5RuRY2cIK1lOAARwRQB4EiZQ.roa
File: DFD5RuRY2cIK1lOAARwRQB4EiZQ.roa (raw, json)
Hash identifier: h9687bEpvR55/ylBKavMs4gTb+yE0DAVxH+kR+yjKTE=
Subject key identifier: 0C:50:F9:46:E4:58:D9:C2:0A:D6:53:80:01:1C:11:40:1E:04:89:94
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018C7C1343B84363FB87ABD3A76422F2578A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DFD5RuRY2cIK1lOAARwRQB4EiZQ.roa
Signing time: Mon 18 Dec 2023 08:38:06 +0000
ROA not before: Mon 18 Dec 2023 08:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9087
IP address blocks: 88.216.182.0/23 maxlen: 23
84.32.208.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:13:43:b8:43:63:fb:87:ab:d3:a7:64:22:f2:57:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 18 08:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c50f946e458d9c20ad65380011c11401e048994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0c:86:f1:4f:7e:21:ca:74:11:80:a6:56:fb:
ea:15:54:df:69:bc:4c:68:30:6e:75:2c:07:c5:38:
89:18:3d:2a:e2:ee:9b:5e:fd:65:25:7c:78:56:0a:
70:1b:7a:78:71:51:6c:c9:a7:ce:46:35:15:57:8b:
ab:9c:0a:32:f5:47:7e:55:d6:78:da:d3:51:78:f5:
6d:ce:70:62:77:02:04:29:7e:fb:44:80:36:f4:2c:
53:a7:65:ee:26:7b:87:71:8f:c0:2e:59:be:63:66:
58:ee:75:4b:8f:ee:90:03:53:03:d6:8e:09:bd:23:
b7:0f:70:1b:01:c2:c9:fc:a0:2f:ce:f7:88:20:54:
64:88:63:37:b0:db:a5:dc:0b:8a:5e:1d:e0:37:e1:
cb:f8:c0:92:bd:06:1a:c9:ae:fb:ae:47:15:50:f1:
79:f6:34:f0:7c:26:f5:de:69:4e:1e:84:90:3e:fb:
55:40:4b:a5:60:d7:cc:88:79:16:30:a2:c3:57:9f:
36:d1:3b:2e:c1:8a:8e:b2:0f:b4:fc:78:0a:ef:05:
31:30:cb:e2:62:3c:5c:bf:8a:b3:fc:6e:7f:85:04:
b9:4b:63:be:59:f9:73:9c:34:99:2c:3c:da:fb:57:
50:ff:f1:02:79:6a:5c:13:34:e8:48:c2:ed:99:52:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:50:F9:46:E4:58:D9:C2:0A:D6:53:80:01:1C:11:40:1E:04:89:94
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/DFD5RuRY2cIK1lOAARwRQB4EiZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.208.0/23
88.216.182.0/23
Signature Algorithm: sha256WithRSAEncryption
36:75:3b:44:a9:1f:7c:87:1f:ab:2a:7d:0c:8e:93:37:43:92:
97:c1:57:e1:bb:bd:1f:a8:f1:48:be:de:84:c4:3b:36:53:22:
90:86:0f:52:81:4f:0d:a5:49:e6:81:01:49:c0:77:d1:aa:46:
30:87:e0:2c:ca:60:f1:a5:d9:90:eb:64:75:7d:98:58:4c:8d:
3c:86:90:a4:5d:41:ef:19:b3:c5:77:f0:53:ce:81:55:e5:67:
ba:98:65:de:56:d9:c4:19:ba:d7:6f:53:dc:d6:8e:85:d3:e9:
3e:63:22:7f:78:c1:e5:33:da:3a:36:62:3e:15:38:12:39:81:
a2:a7:16:4a:bf:26:b7:ee:b4:5c:32:78:12:5a:cc:b4:17:6c:
06:1c:30:c4:f7:de:87:c1:71:45:de:0c:e8:e2:3e:d9:db:9d:
b2:51:51:e4:24:cb:e7:33:89:48:65:c7:7e:5f:47:24:12:f1:
61:7d:87:3e:73:60:a0:e5:94:93:89:68:9a:69:f6:e7:13:71:
1b:e0:f6:60:db:3a:97:fd:29:43:11:76:a2:dc:cb:fd:f5:b1:
45:cf:d4:62:9d:04:f5:1e:f8:68:23:31:c4:12:40:41:a2:99:
6e:99:c1:5d:85:61:b4:0b:c2:91:bb:2f:15:55:e4:9d:7d:a2:
97:06:3e:0e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYx8E0O4Q2P7h6vTp2Qi8leKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMjE4MDgzODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzUwZjk0NmU0NThkOWMyMGFkNjUzODAwMTFjMTE0MDFlMDQ4OTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAyG8U9+Icp0EYCmVvvqFVTfabxM
aDBudSwHxTiJGD0q4u6bXv1lJXx4VgpwG3p4cVFsyafORjUVV4urnAoy9Ud+VdZ4
2tNRePVtznBidwIEKX77RIA29CxTp2XuJnuHcY/ALlm+Y2ZY7nVLj+6QA1MD1o4J
vSO3D3AbAcLJ/KAvzveIIFRkiGM3sNul3AuKXh3gN+HL+MCSvQYaya77rkcVUPF5
9jTwfCb13mlOHoSQPvtVQEulYNfMiHkWMKLDV5820TsuwYqOsg+0/HgK7wUxMMvi
Yjxcv4qz/G5/hQS5S2O+WflznDSZLDza+1dQ//ECeWpcEzToSMLtmVKoiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAxQ+UbkWNnCCtZTgAEcEUAeBImUMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvREZENVJ1UlkyY0lLMWxPQUFSd1JRQjRFaVpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVCDQAwQB
WNi2MA0GCSqGSIb3DQEBCwUAA4IBAQA2dTtEqR98hx+rKn0MjpM3Q5KXwVfhu70f
qPFIvt6ExDs2UyKQhg9SgU8NpUnmgQFJwHfRqkYwh+AsymDxpdmQ62R1fZhYTI08
hpCkXUHvGbPFd/BTzoFV5We6mGXeVtnEGbrXb1Pc1o6F0+k+YyJ/eMHlM9o6NmI+
FTgSOYGipxZKvya37rRcMngSWsy0F2wGHDDE996HwXFF3gzo4j7Z252yUVHkJMvn
M4lIZcd+X0ckEvFhfYc+c2Cg5ZSTiWiaafbnE3Eb4PZg2zqX/SlDEXai3Mv99bFF
z9RinQT1HvhoIzHEEkBBoplumcFdhWG0C8KRuy8VVeSdfaKXBj4O
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:41 2024 by rpki-client on console-ams.rpki-client.org