Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/U-wzb-vCBBpTduyCivqhQwsyM2I.roa
File: U-wzb-vCBBpTduyCivqhQwsyM2I.roa (raw, json)
Hash identifier: PhbIqJSgXhCjB/86Eiq7qU0Y4x0iZynKFpnlRKrxdoc=
Subject key identifier: 53:EC:33:6F:EB:C2:04:1A:53:76:EC:82:8A:FA:A1:43:0B:32:33:62
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018A978378E46F6D91E5AA0A14E2D3A259F7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/U-wzb-vCBBpTduyCivqhQwsyM2I.roa
Signing time: Fri 15 Sep 2023 06:24:50 +0000
ROA not before: Fri 15 Sep 2023 06:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206505
IP address blocks: 88.216.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:97:83:78:e4:6f:6d:91:e5:aa:0a:14:e2:d3:a2:59:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 15 06:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53ec336febc2041a5376ec828afaa1430b323362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:be:a7:81:a4:4f:1e:0a:60:a2:43:0d:6d:
7d:85:8c:30:4a:92:78:0e:f6:e3:d9:dc:86:bf:65:
02:3f:e0:e9:3c:81:0f:69:d3:ec:ea:4f:01:2a:88:
d7:f4:ce:b3:8c:d0:c2:a0:e6:f0:2a:ef:93:3c:24:
c3:8f:f4:eb:79:4f:a3:d6:fa:f7:9c:3d:e2:9d:90:
a4:da:05:e1:5f:99:e0:6e:76:5f:c7:cf:6b:4f:3e:
2c:d4:8b:ad:fe:e1:8c:ee:eb:64:c6:aa:50:e4:27:
69:e6:b4:2a:54:d5:7f:f9:4f:bc:6b:9e:96:61:98:
33:c1:b4:95:29:d6:af:cc:c9:3a:a4:25:6c:29:c5:
3a:ce:9c:89:23:99:3a:98:01:3a:95:e9:3d:ce:95:
b9:20:e6:29:c1:b5:f3:69:65:f3:41:e3:dc:67:cc:
4f:45:24:86:c0:e5:9a:5c:08:3c:e9:ce:30:f6:85:
00:21:66:9b:7e:2c:4b:f2:08:ab:06:5c:0e:20:f8:
d2:e5:fa:d9:8b:32:05:3a:f5:1f:13:cf:78:10:ff:
7e:e1:00:a1:16:c1:2c:b4:79:01:bd:8c:8d:ca:e9:
b8:21:90:b6:f5:06:76:8d:65:06:e3:e5:f3:8e:21:
af:73:c2:d6:83:3c:bc:c1:5a:eb:53:b0:8b:11:64:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EC:33:6F:EB:C2:04:1A:53:76:EC:82:8A:FA:A1:43:0B:32:33:62
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/U-wzb-vCBBpTduyCivqhQwsyM2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.222.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ef:9e:50:8f:02:b1:f0:fb:ed:8c:ba:f7:ac:13:48:31:ad:
93:27:b2:87:53:bb:1e:42:74:04:d0:3b:79:e8:4c:b2:7c:94:
39:5d:01:48:a0:32:38:bc:f5:a8:82:69:08:61:6a:47:d2:c4:
20:b5:26:36:a3:e3:9e:c3:7b:83:b8:ba:8a:31:31:cc:78:2a:
67:d0:06:15:e8:c1:d6:d8:e2:d7:99:05:66:e5:95:67:82:d2:
8a:f5:df:0a:b8:8a:d2:80:69:2a:df:15:d4:b4:09:8b:20:9c:
90:1d:6d:14:7d:b1:b9:62:b3:90:a0:ed:04:b3:58:cc:5f:2e:
2b:a6:0b:ce:ed:02:05:de:56:48:49:10:7c:7c:59:3b:c1:f9:
d9:b4:47:65:ef:22:14:6d:b6:c9:98:ab:60:a1:3a:18:af:a4:
f6:8c:59:27:ea:56:a4:f3:da:de:2a:2d:96:d1:b3:39:a0:d5:
3e:c2:2a:e4:0c:e5:fb:30:a6:9d:8d:94:d9:5e:51:a7:cf:e4:
d0:17:72:23:52:b4:50:82:cf:db:90:94:e6:df:a7:fd:e6:12:
fa:85:95:de:60:c9:9d:07:00:a8:7f:c4:b0:4f:77:d8:b4:fd:
91:10:a8:06:77:e2:1c:b7:de:9a:b1:b9:03:a5:0a:d1:cc:7b:
12:a2:1c:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqXg3jkb22R5aoKFOLToln3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwOTE1MDYyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2VjMzM2ZmViYzIwNDFhNTM3NmVjODI4YWZhYTE0MzBiMzIzMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU2+p4GkTx4KYKJDDW19hYwwSpJ4
Dvbj2dyGv2UCP+DpPIEPadPs6k8BKojX9M6zjNDCoObwKu+TPCTDj/TreU+j1vr3
nD3inZCk2gXhX5ngbnZfx89rTz4s1Iut/uGM7utkxqpQ5Cdp5rQqVNV/+U+8a56W
YZgzwbSVKdavzMk6pCVsKcU6zpyJI5k6mAE6lek9zpW5IOYpwbXzaWXzQePcZ8xP
RSSGwOWaXAg86c4w9oUAIWabfixL8girBlwOIPjS5frZizIFOvUfE894EP9+4QCh
FsEstHkBvYyNyum4IZC29QZ2jWUG4+XzjiGvc8LWgzy8wVrrU7CLEWRZjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFPsM2/rwgQaU3bsgor6oUMLMjNiMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvVS13emItdkNCQnBUZHV5Q2l2cWhRd3N5TTJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNjeMA0G
CSqGSIb3DQEBCwUAA4IBAQB5755QjwKx8PvtjLr3rBNIMa2TJ7KHU7seQnQE0Dt5
6EyyfJQ5XQFIoDI4vPWogmkIYWpH0sQgtSY2o+Oew3uDuLqKMTHMeCpn0AYV6MHW
2OLXmQVm5ZVngtKK9d8KuIrSgGkq3xXUtAmLIJyQHW0UfbG5YrOQoO0Es1jMXy4r
pgvO7QIF3lZISRB8fFk7wfnZtEdl7yIUbbbJmKtgoToYr6T2jFkn6lak89reKi2W
0bM5oNU+wirkDOX7MKadjZTZXlGnz+TQF3IjUrRQgs/bkJTm36f95hL6hZXeYMmd
BwCof8SwT3fYtP2REKgGd+Ict96asbkDpQrRzHsSohxX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:33 2024 by rpki-client on console-fra.rpki-client.org