Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LnC8cqxZ_CUQQ-7NKgOBCfFUzkc.roa
File: LnC8cqxZ_CUQQ-7NKgOBCfFUzkc.roa (raw, json)
Hash identifier: fxq4G+kqgA9OoX0yxcOOq/Im0Ul0OrevzY2sHfVKGEY=
Subject key identifier: 2E:70:BC:72:AC:59:FC:25:10:43:EE:CD:2A:03:81:09:F1:54:CE:47
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018856FAEBD14CEFA79180E40F12BF9EFD9E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LnC8cqxZ_CUQQ-7NKgOBCfFUzkc.roa
Signing time: Fri 26 May 2023 07:34:24 +0000
ROA not before: Fri 26 May 2023 07:34:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 88.216.104.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:56:fa:eb:d1:4c:ef:a7:91:80:e4:0f:12:bf:9e:fd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 26 07:34:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e70bc72ac59fc251043eecd2a038109f154ce47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:5a:18:8e:10:5d:11:a2:1e:99:d8:b6:67:
51:41:95:66:5f:83:de:bd:4d:01:5e:e8:b3:7d:7e:
b2:ba:d8:c2:9e:c6:6c:2a:db:13:bc:36:e7:b1:30:
9c:35:2e:a2:f4:a8:53:12:6e:42:74:8e:75:10:8b:
aa:0b:48:b2:d5:a8:96:6d:e2:3e:b4:9b:0f:b1:dd:
2e:02:4c:8c:09:fa:52:87:69:f5:0b:fa:a7:c2:de:
b8:9e:3d:fe:c3:20:88:83:06:9a:4e:5a:cb:9c:4a:
31:3f:9a:6a:82:a0:e3:b1:da:04:cb:db:b1:1c:fa:
77:32:cb:83:2f:fd:3e:91:3c:e6:9d:ae:53:25:cb:
a1:0d:4e:43:98:02:9e:25:09:f4:90:32:f8:21:45:
62:1f:92:c8:cf:53:93:e1:ad:df:71:9e:9f:0b:17:
a0:5c:d5:59:cd:79:30:e1:95:87:df:47:8e:e1:1b:
66:31:e0:73:6f:2f:dc:de:11:e5:97:a7:b0:b3:a1:
67:b6:8d:2d:f9:3c:81:5b:12:13:58:2c:97:9c:ab:
e7:0c:4d:55:47:c1:d1:34:79:1e:79:60:7f:f3:56:
9d:e8:88:35:19:e1:7c:ec:e4:84:9a:89:fb:98:bd:
e8:e9:82:7e:b6:23:10:e8:ff:aa:fc:4f:02:ed:c1:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:70:BC:72:AC:59:FC:25:10:43:EE:CD:2A:03:81:09:F1:54:CE:47
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LnC8cqxZ_CUQQ-7NKgOBCfFUzkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.104.0/24
88.216.107.0/24
88.216.110.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b9:e6:a6:25:e4:4f:5b:81:b8:5b:1b:e7:bd:db:c7:0a:1b:
e8:04:fa:e5:1e:69:62:1c:88:b0:fd:a6:6e:1e:88:59:4f:a1:
27:47:b9:1c:8a:04:b9:73:20:a4:fc:d6:12:3b:a5:f4:30:82:
6a:27:08:61:29:9b:b3:2f:0d:6e:c2:ab:d8:c5:a0:1f:72:7d:
da:be:3a:56:b7:a4:08:1c:e5:78:7b:d0:b0:a4:d1:5c:57:c0:
af:f0:83:a5:13:36:cc:6b:58:4c:24:0b:d0:b1:04:b7:67:13:
53:f4:0f:39:37:a6:5a:b0:2a:12:f0:d5:0e:6d:be:08:79:bc:
33:0f:82:cc:1c:d4:8b:11:e6:bb:c6:2e:38:2d:df:68:6b:4f:
58:1f:1f:60:03:12:34:26:81:bd:4e:9a:bf:fe:a9:f9:d4:9c:
af:1e:2c:e5:60:3c:d3:b2:14:ef:89:08:24:eb:f4:b3:28:d5:
55:f7:d0:43:b1:16:cb:58:1f:1c:c3:55:07:03:84:80:d4:b9:
d3:97:05:01:78:7c:29:b7:a5:d8:4c:8a:cd:e1:3d:84:93:25:
c3:86:5a:8c:b0:3c:e4:2d:9c:e2:e4:bf:12:e8:b2:7b:52:2b:
e4:8a:65:29:24:bb:a2:fe:5e:e0:86:d0:4a:e4:76:34:45:51:
e3:81:01:20
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYhW+uvRTO+nkYDkDxK/nv2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNTI2MDczNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTcwYmM3MmFjNTlmYzI1MTA0M2VlY2QyYTAzODEwOWYxNTRjZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1laGI4QXRGiHpnYtmdRQZVmX4Pe
vU0BXuizfX6yutjCnsZsKtsTvDbnsTCcNS6i9KhTEm5CdI51EIuqC0iy1aiWbeI+
tJsPsd0uAkyMCfpSh2n1C/qnwt64nj3+wyCIgwaaTlrLnEoxP5pqgqDjsdoEy9ux
HPp3MsuDL/0+kTzmna5TJcuhDU5DmAKeJQn0kDL4IUViH5LIz1OT4a3fcZ6fCxeg
XNVZzXkw4ZWH30eO4RtmMeBzby/c3hHll6ews6Fnto0t+TyBWxITWCyXnKvnDE1V
R8HRNHkeeWB/81ad6Ig1GeF87OSEmon7mL3o6YJ+tiMQ6P+q/E8C7cG/wwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC5wvHKsWfwlEEPuzSoDgQnxVM5HMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvTG5DOGNxeFpfQ1VRUS03TktnT0JDZkZVemtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWNhoAwQA
WNhrAwQAWNhuMA0GCSqGSIb3DQEBCwUAA4IBAQBjueamJeRPW4G4WxvnvdvHChvo
BPrlHmliHIiw/aZuHohZT6EnR7kcigS5cyCk/NYSO6X0MIJqJwhhKZuzLw1uwqvY
xaAfcn3avjpWt6QIHOV4e9CwpNFcV8Cv8IOlEzbMa1hMJAvQsQS3ZxNT9A85N6Za
sCoS8NUObb4IebwzD4LMHNSLEea7xi44Ld9oa09YHx9gAxI0JoG9Tpq//qn51Jyv
HizlYDzTshTviQgk6/SzKNVV99BDsRbLWB8cw1UHA4SA1LnTlwUBeHwpt6XYTIrN
4T2EkyXDhlqMsDzkLZzi5L8S6LJ7UivkimUpJLui/l7ghtBK5HY0RVHjgQEg
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:29 2023 by rpki-client on console-ams.rpki-client.org