Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OGNyQBvB-2s7IyhNWmM6aOFWHuM.roa
File: OGNyQBvB-2s7IyhNWmM6aOFWHuM.roa (raw, json)
Hash identifier: iW8oyRI2nopdA/vKjqq3sqY3jysLoC5ApdqsbwkY1Qk=
Subject key identifier: 38:63:72:40:1B:C1:FB:6B:3B:23:28:4D:5A:63:3A:68:E1:56:1E:E3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01859BB6FFBC212C8825C106D39BE9A99A24
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OGNyQBvB-2s7IyhNWmM6aOFWHuM.roa
Signing time: Tue 10 Jan 2023 12:45:39 +0000
ROA not before: Tue 10 Jan 2023 12:45:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200710
IP address blocks: 88.216.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Mar 2023 10:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:b6:ff:bc:21:2c:88:25:c1:06:d3:9b:e9:a9:9a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 10 12:45:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=386372401bc1fb6b3b23284d5a633a68e1561ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:4c:41:7a:bf:1f:bf:e5:89:45:67:7f:ab:
e0:da:77:a1:72:12:e5:3c:b1:43:d7:ea:04:c1:96:
c7:ae:0d:71:c3:de:c3:25:2f:c1:7f:98:2c:74:29:
d5:00:4a:f1:3b:e1:f9:20:aa:fa:07:b0:59:ba:47:
36:0c:13:30:9f:19:24:08:a0:b0:be:0c:6a:bc:2f:
68:34:50:3f:a7:27:b7:13:58:a0:70:f9:02:0b:70:
37:c7:2e:2b:f7:e7:06:dc:21:30:fc:67:b9:cd:b4:
70:4e:79:e8:fa:f2:b0:0f:4d:4a:2c:1c:49:6c:9c:
e6:c8:b8:75:75:f9:36:82:bd:a9:6a:99:58:df:a4:
4a:51:8c:91:8c:0f:96:36:83:0a:ba:b2:3d:6a:c3:
e3:04:e5:e9:e7:c6:6e:52:9e:a7:07:44:57:51:11:
2f:cd:71:7f:00:93:48:f6:94:f7:c8:31:ab:7e:0a:
12:df:79:5b:9f:9e:3f:f7:33:e6:78:44:7c:b2:5c:
76:df:97:ec:35:6c:ff:b0:41:2b:5e:ef:69:12:a0:
6e:29:b3:e6:a6:0c:4b:5a:77:f3:c3:4a:2c:4c:94:
44:76:3e:9c:45:9f:7b:59:36:42:b4:23:72:cf:42:
f0:c6:23:5d:2a:13:f0:74:dc:64:6f:df:2d:40:65:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:72:40:1B:C1:FB:6B:3B:23:28:4D:5A:63:3A:68:E1:56:1E:E3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OGNyQBvB-2s7IyhNWmM6aOFWHuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4f:28:b4:be:da:97:b0:c3:6e:64:0d:39:72:7b:ce:8d:c7:
64:29:5d:83:e5:ae:03:9b:bc:cd:b5:c5:a3:e6:ae:67:4a:94:
a3:8c:c9:e6:9d:3f:2a:f0:62:20:37:2c:2f:51:e6:d5:4f:6e:
a0:fa:aa:07:03:ea:16:ea:81:e1:66:a5:ea:48:67:a5:21:26:
ba:c2:65:75:b1:b6:29:1e:1b:77:eb:81:22:c6:f5:f2:8a:cf:
ed:6b:d0:01:70:e9:fe:6c:e3:da:e9:88:b6:65:7b:2a:f9:7a:
06:26:6f:ec:d5:4c:04:00:bd:16:db:e5:cc:87:49:03:6f:df:
75:d4:2b:6b:32:92:a4:3d:1a:c7:3c:7e:8e:13:e6:44:0c:ee:
05:33:f8:42:a7:18:34:a5:60:9b:b7:59:04:26:0b:cb:89:00:
58:08:52:29:86:d8:11:0c:59:24:0b:7d:4c:50:38:e4:25:49:
39:12:2f:8a:85:a3:92:27:2e:fd:a6:60:b8:e3:d7:c5:73:eb:
ef:1d:bc:dd:c6:ee:4b:8e:25:48:99:aa:27:6c:44:96:1d:cb:
a0:df:4c:27:f5:02:ae:27:e9:70:89:7b:4b:8b:db:4a:da:88:
b9:de:7a:1f:ef:fd:87:e3:5e:69:b3:1a:f3:9b:bd:15:e3:79:
6c:b6:1f:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWbtv+8ISyIJcEG05vpqZokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTEwMTI0NTM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODYzNzI0MDFiYzFmYjZiM2IyMzI4NGQ1YTYzM2E2OGUxNTYxZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8pMQXq/H7/liUVnf6vg2nehchLl
PLFD1+oEwZbHrg1xw97DJS/Bf5gsdCnVAErxO+H5IKr6B7BZukc2DBMwnxkkCKCw
vgxqvC9oNFA/pye3E1igcPkCC3A3xy4r9+cG3CEw/Ge5zbRwTnno+vKwD01KLBxJ
bJzmyLh1dfk2gr2paplY36RKUYyRjA+WNoMKurI9asPjBOXp58ZuUp6nB0RXUREv
zXF/AJNI9pT3yDGrfgoS33lbn54/9zPmeER8slx235fsNWz/sEErXu9pEqBuKbPm
pgxLWnfzw0osTJREdj6cRZ97WTZCtCNyz0LwxiNdKhPwdNxkb98tQGXZSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhjckAbwftrOyMoTVpjOmjhVh7jMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvT0dOeVFCdkItMnM3SXloTldtTTZhT0ZXSHVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNi1MA0G
CSqGSIb3DQEBCwUAA4IBAQCOTyi0vtqXsMNuZA05cnvOjcdkKV2D5a4Dm7zNtcWj
5q5nSpSjjMnmnT8q8GIgNywvUebVT26g+qoHA+oW6oHhZqXqSGelISa6wmV1sbYp
Hht364EixvXyis/ta9ABcOn+bOPa6Yi2ZXsq+XoGJm/s1UwEAL0W2+XMh0kDb991
1CtrMpKkPRrHPH6OE+ZEDO4FM/hCpxg0pWCbt1kEJgvLiQBYCFIphtgRDFkkC31M
UDjkJUk5Ei+KhaOSJy79pmC449fFc+vvHbzdxu5LjiVImaonbESWHcug30wn9QKu
J+lwiXtLi9tK2oi53nof7/2H415psxrzm70V43lsth8q
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org