Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RPKILZ3te0QS0-NGsiwqR4-bCCk.roa
File: RPKILZ3te0QS0-NGsiwqR4-bCCk.roa (raw, json)
Hash identifier: qas//CB7ffaiMRjQOnMu2Yc2k7e2le3UmPm6vs/mjGs=
Subject key identifier: 44:F2:88:2D:9D:ED:7B:44:12:D3:E3:46:B2:2C:2A:47:8F:9B:08:29
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018795EC44CC653AD89804F1D4E8D252761A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RPKILZ3te0QS0-NGsiwqR4-bCCk.roa
Signing time: Tue 18 Apr 2023 19:51:41 +0000
ROA not before: Tue 18 Apr 2023 19:51:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 88.216.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 17:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:ec:44:cc:65:3a:d8:98:04:f1:d4:e8:d2:52:76:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 18 19:51:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44f2882d9ded7b4412d3e346b22c2a478f9b0829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:ba:25:24:f4:34:5a:2f:cc:09:6a:7a:8b:
a4:9e:25:e1:17:55:54:77:47:d7:df:ea:05:d8:cc:
d4:30:fb:d2:1a:8a:0c:44:ad:09:ae:a3:fb:6b:17:
35:1a:6f:1f:a8:3f:b6:33:c6:b0:5a:39:85:29:d0:
ff:f1:83:ba:4d:49:f9:5a:ae:c5:7c:2d:8c:d4:0d:
72:1a:f3:fc:6a:22:aa:00:30:28:b7:1a:94:de:49:
19:6b:ba:72:2c:38:2a:79:be:8f:12:96:ba:a0:2c:
a3:0a:1d:81:95:22:ce:09:97:ab:eb:60:00:4a:26:
7c:38:d8:d8:88:96:4f:ba:87:61:b6:33:c3:00:f6:
b8:f3:21:09:7e:f5:db:28:73:8d:65:32:1c:5f:43:
67:da:cd:b3:38:96:bb:46:2e:c0:c8:2f:db:7b:11:
f1:f8:8b:87:1f:32:20:4a:e5:53:7e:38:6e:3d:99:
88:8f:c0:41:ea:33:b6:dd:46:5e:da:6a:26:93:ba:
9e:6e:03:fe:b6:30:f4:e7:11:52:d6:17:71:e2:5d:
fd:f3:7a:57:40:49:e0:2b:11:c9:01:68:f8:a1:73:
eb:1b:ce:9e:06:d1:72:af:17:df:0e:ec:bb:52:56:
3d:7d:7f:72:2c:1c:79:6a:73:83:ff:1a:9c:55:46:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F2:88:2D:9D:ED:7B:44:12:D3:E3:46:B2:2C:2A:47:8F:9B:08:29
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RPKILZ3te0QS0-NGsiwqR4-bCCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.104.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c8:fd:f8:57:79:3a:2c:4f:87:ee:e3:b1:b1:af:51:73:3f:
49:90:d6:20:60:fa:87:e6:e6:6b:35:2d:15:7a:a2:77:45:fe:
d6:16:6f:71:1e:bf:13:af:eb:ae:99:ce:6e:4c:d9:20:fd:da:
48:3b:a1:47:0d:32:a9:f2:b0:04:2b:33:72:47:9c:03:92:52:
a2:05:62:c8:19:85:04:40:56:43:3b:c1:16:3a:ec:c3:57:0c:
6f:d9:df:07:40:21:f9:d1:eb:bc:e7:98:1d:4c:3d:4c:9f:0a:
b4:57:d6:e7:a3:2a:a7:cb:40:a3:56:1a:fe:06:1b:82:73:3f:
40:4e:5e:2b:00:c1:7b:f3:15:9c:6e:76:07:fe:e9:34:17:91:
aa:db:16:f0:b3:25:88:36:0b:71:ee:aa:a3:06:59:71:e3:8d:
00:da:34:ff:7f:0b:d2:de:2d:b4:c7:ef:fe:0b:0f:34:9a:27:
ce:08:46:a4:1e:e2:1c:1d:f6:12:96:7a:c1:94:0a:70:72:d5:
22:16:ff:e3:58:a2:ef:16:0c:44:bc:0b:8b:67:b5:96:18:e0:
db:c3:27:f3:0e:02:50:6b:c6:19:08:74:fb:7c:bd:c5:19:f0:
dd:e7:52:cf:3a:50:4e:e6:79:48:34:d2:c9:be:5d:60:de:02:
d5:13:31:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeV7ETMZTrYmATx1OjSUnYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNDE4MTk1MTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGYyODgyZDlkZWQ3YjQ0MTJkM2UzNDZiMjJjMmE0NzhmOWIwODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8+6JST0NFovzAlqeoukniXhF1VU
d0fX3+oF2MzUMPvSGooMRK0JrqP7axc1Gm8fqD+2M8awWjmFKdD/8YO6TUn5Wq7F
fC2M1A1yGvP8aiKqADAotxqU3kkZa7pyLDgqeb6PEpa6oCyjCh2BlSLOCZer62AA
SiZ8ONjYiJZPuodhtjPDAPa48yEJfvXbKHONZTIcX0Nn2s2zOJa7Ri7AyC/bexHx
+IuHHzIgSuVTfjhuPZmIj8BB6jO23UZe2momk7qebgP+tjD05xFS1hdx4l3983pX
QEngKxHJAWj4oXPrG86eBtFyrxffDuy7UlY9fX9yLBx5anOD/xqcVUaKlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFETyiC2d7XtEEtPjRrIsKkePmwgpMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvUlBLSUxaM3RlMFFTMC1OR3Npd3FSNC1iQ0NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNhoMA0G
CSqGSIb3DQEBCwUAA4IBAQBXyP34V3k6LE+H7uOxsa9Rcz9JkNYgYPqH5uZrNS0V
eqJ3Rf7WFm9xHr8Tr+uumc5uTNkg/dpIO6FHDTKp8rAEKzNyR5wDklKiBWLIGYUE
QFZDO8EWOuzDVwxv2d8HQCH50eu855gdTD1Mnwq0V9bnoyqny0CjVhr+BhuCcz9A
Tl4rAMF78xWcbnYH/uk0F5Gq2xbwsyWINgtx7qqjBllx440A2jT/fwvS3i20x+/+
Cw80mifOCEakHuIcHfYSlnrBlApwctUiFv/jWKLvFgxEvAuLZ7WWGODbwyfzDgJQ
a8YZCHT7fL3FGfDd51LPOlBO5nlINNLJvl1g3gLVEzHP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org