Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NGwnFVzYRmibXWWhX9aCvUrD0FM.roa
File: NGwnFVzYRmibXWWhX9aCvUrD0FM.roa (raw, json)
Hash identifier: +qYHb3O2CZG7Sjc7CnnVnWxLEW7GEFfEicouh9IWLy4=
Subject key identifier: 34:6C:27:15:5C:D8:46:68:9B:5D:65:A1:5F:D6:82:BD:4A:C3:D0:53
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFC325DB71AFC70FD092C49A5067D2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NGwnFVzYRmibXWWhX9aCvUrD0FM.roa
Signing time: Sun 01 Jan 2023 18:54:50 +0000
ROA not before: Sun 01 Jan 2023 18:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62164
IP address blocks: 88.216.99.0/24 maxlen: 24
84.32.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:c3:25:db:71:af:c7:0f:d0:92:c4:9a:50:67:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=346c27155cd846689b5d65a15fd682bd4ac3d053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d6:74:32:d4:e0:96:5d:b4:3e:1b:c4:45:9b:
a1:13:2f:c7:6d:09:67:e7:86:38:fb:11:f3:5a:fd:
04:77:58:25:3c:e2:a1:e3:05:46:87:b7:50:09:35:
cd:36:dd:da:20:f7:be:15:79:e8:3a:fd:7c:b6:84:
c5:7d:f9:e2:4e:40:e3:52:da:9f:8c:e5:77:58:55:
74:b0:ff:f6:ac:95:60:c0:fc:19:9a:ac:06:a8:52:
4f:db:0b:3b:27:78:cb:98:96:f7:f2:b2:a9:49:0f:
b4:94:5f:e7:a7:97:5f:0c:56:a0:3d:b2:6e:8d:8c:
83:6c:c5:d6:6f:de:74:95:2a:05:5c:3c:24:21:eb:
38:eb:aa:91:dd:af:05:03:d9:a1:e9:93:58:15:14:
f5:4a:e7:27:29:6e:47:bc:1e:34:47:ab:f4:d7:0e:
87:23:3a:a0:26:ad:fa:7c:44:2a:c7:91:4e:77:4a:
83:7d:81:78:44:14:d3:b8:34:73:73:17:e4:0a:f4:
c2:f6:8f:87:14:c0:c3:9d:16:57:0a:ce:be:41:44:
0b:97:da:9f:09:7b:54:4c:b8:aa:fb:9c:8f:72:4a:
96:4c:b2:2d:32:6d:ee:57:e4:81:9e:5c:0f:ab:cd:
e4:0c:bb:fe:1f:a8:23:bd:fa:19:99:1a:39:29:4d:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6C:27:15:5C:D8:46:68:9B:5D:65:A1:5F:D6:82:BD:4A:C3:D0:53
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NGwnFVzYRmibXWWhX9aCvUrD0FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.5.0/24
88.216.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:da:c3:b5:29:52:0c:b5:2e:a5:8d:ef:c8:cd:2a:5c:b4:ea:
cd:c8:07:4b:59:6b:df:5d:75:05:09:65:bd:9b:9c:0d:10:1c:
23:d3:c9:2c:84:f4:c8:16:dc:21:46:f3:48:ac:2b:da:3f:3b:
69:5d:eb:62:50:31:60:e7:fa:05:0d:44:9a:73:66:18:b5:bc:
5e:db:05:3c:71:1e:a6:3e:4c:c4:f6:34:ac:1e:64:22:9c:2c:
96:ee:19:58:47:a9:f1:cc:c1:37:d7:1e:38:6f:12:06:17:46:
a2:85:4f:55:b6:2f:1f:fe:86:5e:74:6f:90:93:e2:5b:be:46:
d2:0d:f6:e3:34:b2:8d:7b:7a:10:f2:b0:b3:e4:e9:1a:b2:5f:
08:6f:14:31:95:ea:59:d5:88:7d:ee:84:6b:c7:e4:8d:f2:7b:
f4:b6:68:5e:0a:9a:69:29:2d:5b:08:5b:7d:bb:89:99:85:a4:
3b:9d:46:98:6a:c5:4b:14:f8:50:42:c2:9b:3e:d2:f0:7a:16:
a0:70:33:79:76:52:fa:e4:3d:b6:c3:e8:b6:8b:73:f9:d0:31:
bc:7d:d7:4b:dd:74:b5:47:7b:17:ba:49:a1:93:84:db:6e:30:
c3:f9:69:18:f6:93:49:8c:d2:60:1f:7c:bf:ae:84:08:8e:86:
b9:7f:e9:90
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVur8Ml23Gvxw/QksSaUGfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTAxMTg1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDZjMjcxNTVjZDg0NjY4OWI1ZDY1YTE1ZmQ2ODJiZDRhYzNkMDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNZ0MtTgll20PhvERZuhEy/HbQln
54Y4+xHzWv0Ed1glPOKh4wVGh7dQCTXNNt3aIPe+FXnoOv18toTFffniTkDjUtqf
jOV3WFV0sP/2rJVgwPwZmqwGqFJP2ws7J3jLmJb38rKpSQ+0lF/np5dfDFagPbJu
jYyDbMXWb950lSoFXDwkIes466qR3a8FA9mh6ZNYFRT1SucnKW5HvB40R6v01w6H
IzqgJq36fEQqx5FOd0qDfYF4RBTTuDRzcxfkCvTC9o+HFMDDnRZXCs6+QUQLl9qf
CXtUTLiq+5yPckqWTLItMm3uV+SBnlwPq83kDLv+H6gjvfoZmRo5KU0whQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDRsJxVc2EZom11loV/Wgr1Kw9BTMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvTkd3bkZWellSbWliWFdXaFg5YUN2VXJEMEZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCAFAwQA
WNhjMA0GCSqGSIb3DQEBCwUAA4IBAQAv2sO1KVIMtS6lje/IzSpctOrNyAdLWWvf
XXUFCWW9m5wNEBwj08kshPTIFtwhRvNIrCvaPztpXetiUDFg5/oFDUSac2YYtbxe
2wU8cR6mPkzE9jSsHmQinCyW7hlYR6nxzME31x44bxIGF0aihU9Vti8f/oZedG+Q
k+JbvkbSDfbjNLKNe3oQ8rCz5Okasl8IbxQxlepZ1Yh97oRrx+SN8nv0tmheCppp
KS1bCFt9u4mZhaQ7nUaYasVLFPhQQsKbPtLwehagcDN5dlL65D22w+i2i3P50DG8
fddL3XS1R3sXukmhk4TbbjDD+WkY9pNJjNJgH3y/roQIjoa5f+mQ
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:41 2024 by rpki-client on console-ams.rpki-client.org