Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VNbpf0grDi5V1tLfy3fmBnrSKKk.roa
File: VNbpf0grDi5V1tLfy3fmBnrSKKk.roa (raw, json)
Hash identifier: gnv5tUscNG/uNX5Kos6BjipfzE6epewAyt8eXFgR/zg=
Subject key identifier: 54:D6:E9:7F:48:2B:0E:2E:55:D6:D2:DF:CB:77:E6:06:7A:D2:28:A9
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01856EAFADCD34BC58DCDDDF43DC1888F2DE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VNbpf0grDi5V1tLfy3fmBnrSKKk.roa
Signing time: Sun 01 Jan 2023 18:54:45 +0000
ROA not before: Sun 01 Jan 2023 18:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 88.216.212.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:ad:cd:34:bc:58:dc:dd:df:43:dc:18:88:f2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 18:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54d6e97f482b0e2e55d6d2dfcb77e6067ad228a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:91:54:e4:a6:3b:6b:6b:1d:1c:2b:22:77:08:
5c:9e:a3:25:9c:30:4a:56:0c:4a:4d:e2:f4:6f:d0:
6f:0c:48:34:fa:eb:46:66:b3:c4:7e:36:b6:48:19:
a2:03:55:8b:9e:78:cb:4a:8b:0f:b5:a1:e3:0b:31:
d3:02:7d:ed:de:89:5b:5e:ad:97:5e:7a:a2:01:c1:
21:fa:56:f2:63:24:b3:96:30:6c:26:4f:ba:dd:fd:
94:29:38:0e:61:6f:a5:17:62:49:0d:fe:fc:52:c8:
17:c3:72:50:10:ba:06:43:ce:83:bb:4b:4a:df:59:
6e:ff:98:d5:de:66:83:60:01:1e:1b:48:15:28:c8:
06:b1:e1:af:22:35:40:8d:bf:e0:bc:71:04:b5:2e:
3a:7c:58:5f:89:a2:91:6b:00:49:9d:b4:3f:97:3d:
93:fb:6d:95:f1:8b:ce:28:2a:60:1e:1f:70:e2:fb:
59:08:11:8f:f2:ce:d3:e3:5c:89:4f:ee:89:b6:4f:
93:ee:27:b0:c5:d0:45:85:b4:6c:2d:d0:45:66:9e:
06:51:7d:1d:31:ab:dd:1e:79:48:ea:e7:10:5a:14:
1d:a6:de:eb:0b:7e:41:18:b8:9e:85:4e:6d:84:ab:
5d:60:58:69:3e:57:1a:b9:02:4b:e5:a7:75:26:ee:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D6:E9:7F:48:2B:0E:2E:55:D6:D2:DF:CB:77:E6:06:7A:D2:28:A9
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VNbpf0grDi5V1tLfy3fmBnrSKKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:13:04:25:01:86:4b:cf:04:65:36:24:27:23:5d:76:be:7b:
d3:96:9a:fe:c2:e5:79:33:ac:23:7e:a8:f3:a0:84:02:4e:e7:
5d:77:4b:a5:91:4b:6e:48:45:9d:81:03:42:58:90:35:fe:94:
1b:10:70:99:43:49:3d:0f:e0:0c:f5:05:4f:0b:05:32:62:ed:
d9:5b:87:bb:88:2a:8c:b6:c1:09:13:87:b2:65:50:96:56:13:
76:42:66:3b:d7:79:85:d4:aa:99:45:b3:91:cf:35:f7:3b:74:
02:1f:47:3b:3d:65:70:65:d8:5f:d0:41:84:87:5f:56:8c:2f:
cb:a2:f9:95:12:1d:c2:f4:75:79:e7:d5:18:9b:de:2b:a1:0d:
23:24:f9:e6:9e:dc:23:9f:dd:c1:11:73:da:40:af:ab:e4:70:
07:81:55:c7:1d:a9:da:99:77:76:d1:53:ff:d7:be:88:5b:49:
73:86:99:ca:ee:99:e6:c8:df:7b:10:30:7c:46:50:fc:dc:1f:
5a:c9:ae:ef:c8:c4:69:fc:cc:f4:77:4a:59:e1:ce:e9:94:3e:
2c:44:f4:9f:1c:13:18:7f:bc:37:a9:9b:ea:53:03:53:3f:97:
6b:db:14:27:fe:57:32:dc:09:7f:2c:4b:9d:cd:89:8d:6e:b6:
6a:a7:24:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVur63NNLxY3N3fQ9wYiPLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTAxMTg1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGQ2ZTk3ZjQ4MmIwZTJlNTVkNmQyZGZjYjc3ZTYwNjdhZDIyOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55FU5KY7a2sdHCsidwhcnqMlnDBK
VgxKTeL0b9BvDEg0+utGZrPEfja2SBmiA1WLnnjLSosPtaHjCzHTAn3t3olbXq2X
XnqiAcEh+lbyYySzljBsJk+63f2UKTgOYW+lF2JJDf78UsgXw3JQELoGQ86Du0tK
31lu/5jV3maDYAEeG0gVKMgGseGvIjVAjb/gvHEEtS46fFhfiaKRawBJnbQ/lz2T
+22V8YvOKCpgHh9w4vtZCBGP8s7T41yJT+6Jtk+T7iewxdBFhbRsLdBFZp4GUX0d
MavdHnlI6ucQWhQdpt7rC35BGLiehU5thKtdYFhpPlcauQJL5ad1Ju5tcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFTW6X9IKw4uVdbS38t35gZ60iipMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvVk5icGYwZ3JEaTVWMXRMZnkzZm1CbnJTS0trLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWNjUMA0G
CSqGSIb3DQEBCwUAA4IBAQBvEwQlAYZLzwRlNiQnI112vnvTlpr+wuV5M6wjfqjz
oIQCTuddd0ulkUtuSEWdgQNCWJA1/pQbEHCZQ0k9D+AM9QVPCwUyYu3ZW4e7iCqM
tsEJE4eyZVCWVhN2QmY713mF1KqZRbORzzX3O3QCH0c7PWVwZdhf0EGEh19WjC/L
ovmVEh3C9HV559UYm94roQ0jJPnmntwjn93BEXPaQK+r5HAHgVXHHanamXd20VP/
176IW0lzhpnK7pnmyN97EDB8RlD83B9aya7vyMRp/Mz0d0pZ4c7plD4sRPSfHBMY
f7w3qZvqUwNTP5dr2xQn/lcy3Al/LEudzYmNbrZqpySp
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org