Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WKYtT0u8PRiUuTxJziWJPxOi0g0.roa
File: WKYtT0u8PRiUuTxJziWJPxOi0g0.roa (raw, json)
Hash identifier: 3qyuLPzLjcwl9ewaMSIrMvLEAX6lv48NA9ZkksuLfPk=
Subject key identifier: 58:A6:2D:4F:4B:BC:3D:18:94:B9:3C:49:CE:25:89:3F:13:A2:D2:0D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018C449FC2DCA73B60C930DBA0E5DDF31B8B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WKYtT0u8PRiUuTxJziWJPxOi0g0.roa
Signing time: Thu 07 Dec 2023 14:12:49 +0000
ROA not before: Thu 07 Dec 2023 14:12:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 88.216.57.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:9f:c2:dc:a7:3b:60:c9:30:db:a0:e5:dd:f3:1b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 7 14:12:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58a62d4f4bbc3d1894b93c49ce25893f13a2d20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:59:5b:58:ab:75:50:e6:f5:0d:37:c0:10:
f6:e5:1c:d0:fb:df:a5:2b:d9:12:58:f1:6f:5d:e5:
ab:d9:b0:d7:21:1c:d2:bc:65:16:d0:04:0a:2c:c8:
21:15:2e:32:38:be:83:52:0a:1d:d6:40:49:7c:42:
29:4d:26:dc:63:24:c3:cb:ec:35:77:bf:4e:5e:18:
16:68:27:c5:ef:8d:da:d8:2c:be:ef:87:55:12:74:
8e:40:fc:1c:5f:69:0e:a4:d7:1e:52:27:14:ae:c0:
28:03:43:7f:9e:4c:e5:bd:71:8f:e3:51:65:b7:73:
2a:6c:b2:85:fe:53:87:0a:9a:72:85:8d:7a:b0:12:
fe:5a:80:e0:c5:1e:72:ba:ce:1c:77:68:16:d4:1a:
62:24:b5:ad:30:fd:0a:23:79:43:02:f9:aa:3a:c8:
04:d3:56:8f:75:00:ae:0a:c0:d9:68:27:4b:96:fb:
d9:f8:66:55:4e:99:e6:32:4f:65:6a:66:59:2a:08:
8e:1c:6e:f7:5d:21:dd:3e:1d:1d:51:c1:57:f7:8e:
4b:0c:76:ae:bb:97:fd:6a:67:8b:c9:ab:00:56:d0:
d6:6e:8b:31:ce:91:04:db:de:3f:25:e9:b9:8e:d1:
06:85:d3:2b:0d:c2:d1:a9:3d:ac:9a:a3:47:6a:65:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A6:2D:4F:4B:BC:3D:18:94:B9:3C:49:CE:25:89:3F:13:A2:D2:0D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WKYtT0u8PRiUuTxJziWJPxOi0g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.57.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
97:5e:b1:3f:78:b3:09:0b:70:71:4f:45:b4:1c:27:12:f5:71:
d6:5c:0d:25:f6:a3:ce:3f:69:5e:77:d4:a7:88:d5:c0:da:69:
23:71:f9:4e:c4:cf:dd:07:35:da:71:0f:49:a4:11:8d:9b:5c:
f5:75:fa:28:37:16:be:ba:31:da:17:7b:2c:75:64:ef:36:a7:
0f:35:c7:d1:33:6f:a5:80:51:9b:ac:c2:a1:41:18:30:48:32:
ef:da:53:b7:58:9f:30:ba:0d:d6:ef:89:8e:18:4c:2a:8d:86:
55:89:17:5a:6e:a2:af:4e:a8:68:03:dc:68:69:10:3f:aa:6c:
a7:ad:9d:aa:b0:b8:31:0b:53:74:8b:39:40:ba:07:b0:6b:ef:
2e:e9:62:98:0b:22:a7:92:21:b1:c4:78:8e:8a:99:cc:81:62:
28:85:af:a1:30:c6:96:02:9f:95:ee:71:b5:68:f0:74:17:86:
c7:91:f8:53:f0:76:93:04:be:08:cd:86:6b:05:53:6f:2b:58:
dd:3b:0f:ac:c1:20:11:d7:b7:36:4d:38:bd:22:41:bc:8d:b3:
d3:dd:5f:50:53:a9:88:e0:6d:c0:7f:02:9d:b6:12:4d:4a:61:
7a:b4:72:fb:c8:bc:57:45:3d:b3:75:0f:dd:5f:bd:8b:d0:66:
aa:30:b0:67
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYxEn8LcpztgyTDboOXd8xuLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMjA3MTQxMjQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGE2MmQ0ZjRiYmMzZDE4OTRiOTNjNDljZTI1ODkzZjEzYTJkMjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKJZW1irdVDm9Q03wBD25RzQ+9+l
K9kSWPFvXeWr2bDXIRzSvGUW0AQKLMghFS4yOL6DUgod1kBJfEIpTSbcYyTDy+w1
d79OXhgWaCfF743a2Cy+74dVEnSOQPwcX2kOpNceUicUrsAoA0N/nkzlvXGP41Fl
t3MqbLKF/lOHCppyhY16sBL+WoDgxR5yus4cd2gW1BpiJLWtMP0KI3lDAvmqOsgE
01aPdQCuCsDZaCdLlvvZ+GZVTpnmMk9lamZZKgiOHG73XSHdPh0dUcFX945LDHau
u5f9ameLyasAVtDWbosxzpEE294/Jem5jtEGhdMrDcLRqT2smqNHamXmAwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFimLU9LvD0YlLk8Sc4liT8TotINMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvV0tZdFQwdThQUmlVdVR4SnppV0pQeE9pMGcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWNg5AwQC
WNjkAwQCWNjsMA0GCSqGSIb3DQEBCwUAA4IBAQCXXrE/eLMJC3BxT0W0HCcS9XHW
XA0l9qPOP2led9SniNXA2mkjcflOxM/dBzXacQ9JpBGNm1z1dfooNxa+ujHaF3ss
dWTvNqcPNcfRM2+lgFGbrMKhQRgwSDLv2lO3WJ8wug3W74mOGEwqjYZViRdabqKv
TqhoA9xoaRA/qmynrZ2qsLgxC1N0izlAugewa+8u6WKYCyKnkiGxxHiOipnMgWIo
ha+hMMaWAp+V7nG1aPB0F4bHkfhT8HaTBL4IzYZrBVNvK1jdOw+swSAR17c2TTi9
IkG8jbPT3V9QU6mI4G3AfwKdthJNSmF6tHL7yLxXRT2zdQ/dX72L0GaqMLBn
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:50 2024 by rpki-client on console-fra.rpki-client.org