Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/alWMxghFOP14qIB6n70_yjoTDwQ.roa
File: alWMxghFOP14qIB6n70_yjoTDwQ.roa (raw, json)
Hash identifier: J33PyUJNy+EzqkEIOzYsFpZnnxMIwgGmDgKFIIryDgM=
Subject key identifier: 6A:55:8C:C6:08:45:38:FD:78:A8:80:7A:9F:BD:3F:CA:3A:13:0F:04
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC501417D8D1C8C444403EF83905D960B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/alWMxghFOP14qIB6n70_yjoTDwQ.roa
Signing time: Mon 01 Jan 2024 12:30:42 +0000
ROA not before: Mon 01 Jan 2024 12:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47838
IP address blocks: 88.216.72.0/22 maxlen: 24
88.216.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 12:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:41:7d:8d:1c:8c:44:44:03:ef:83:90:5d:96:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a558cc6084538fd78a8807a9fbd3fca3a130f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:87:7e:ab:06:4d:a1:b7:95:26:e7:f0:f3:
4a:34:11:0d:7c:d5:37:8a:ce:7f:d1:cd:7f:15:d0:
b8:7c:55:92:83:a4:47:84:36:d1:b2:c3:1c:54:75:
d6:36:29:a1:cc:4a:92:e1:7c:88:6a:5e:47:9b:f9:
e8:b5:c3:a0:48:61:06:84:52:0b:32:75:00:32:83:
85:05:10:c6:f7:9c:82:cc:d2:92:1f:c1:24:59:3e:
29:a8:25:e7:83:b2:85:80:01:d5:02:6e:ef:b8:f1:
a8:c0:a2:3c:70:f3:15:1c:d1:a2:81:7d:8c:fa:0d:
f2:d3:e3:6c:b8:39:11:d0:85:f6:9f:8e:d7:ff:bb:
25:06:d7:f9:a9:9e:48:03:e6:1a:fd:3b:66:37:45:
c5:27:79:87:2b:e4:69:73:10:62:21:f9:8a:9b:5c:
5b:65:c8:86:c4:6b:47:56:e7:6e:a0:71:a2:c1:65:
fd:1c:be:3b:05:d5:8a:04:25:79:e2:5d:9b:85:b3:
37:dd:30:45:09:a3:cd:1b:51:66:98:46:c2:d5:a3:
1f:ac:fe:88:7b:f9:2f:1c:97:c7:01:34:3b:e7:3d:
c7:ed:9b:14:f5:48:ab:8a:6d:92:0c:12:04:44:b0:
61:1c:da:93:e4:98:01:29:59:ba:d5:f7:c4:7f:58:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:55:8C:C6:08:45:38:FD:78:A8:80:7A:9F:BD:3F:CA:3A:13:0F:04
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/alWMxghFOP14qIB6n70_yjoTDwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.8.0/21
88.216.72.0/22
Signature Algorithm: sha256WithRSAEncryption
86:72:e1:64:50:0f:ad:83:db:ae:d8:b3:5b:99:a4:26:21:b4:
ea:21:24:93:cc:8c:f2:2c:27:37:da:16:51:bf:d0:8a:39:a1:
7e:b6:8f:55:22:a5:b9:99:4e:f6:a1:5d:36:d6:cc:c1:53:4b:
f6:7c:92:a2:94:f8:3d:6b:1b:2b:ee:0e:dd:63:40:69:45:79:
53:83:c7:f3:2e:f2:5f:aa:c9:08:97:7f:68:c7:c4:ee:3f:f5:
fb:4c:53:02:99:76:4b:24:14:e6:ac:d9:87:09:2e:f0:b3:fa:
21:ba:13:99:2f:61:35:d6:66:aa:fb:35:56:99:23:06:bf:37:
12:7e:3c:47:82:4d:48:3f:ed:83:47:e3:dd:5e:48:39:b6:77:
6b:0d:fe:18:c9:30:a1:40:f2:ab:dc:fa:ed:d9:c3:43:05:4a:
89:e2:f4:69:8f:73:8b:e5:05:ca:13:3f:ee:d9:be:42:d0:5f:
4a:7d:66:4a:05:1b:c4:5b:da:09:53:76:c4:d7:45:8a:a1:9b:
09:ac:10:fb:9d:e7:a2:31:a9:7a:51:20:c3:e7:4d:6c:2b:03:
3c:72:94:6b:d9:e9:ac:f5:7e:14:34:aa:e0:0b:50:42:e1:ad:
7c:be:80:3e:5d:5f:b9:85:09:7c:5a:cc:8a:6b:5a:54:aa:bd:
de:e7:33:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFAUF9jRyMREQD74OQXZYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjQwMTAxMTIzMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTU1OGNjNjA4NDUzOGZkNzhhODgwN2E5ZmJkM2ZjYTNhMTMwZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIGHfqsGTaG3lSbn8PNKNBENfNU3
is5/0c1/FdC4fFWSg6RHhDbRssMcVHXWNimhzEqS4XyIal5Hm/notcOgSGEGhFIL
MnUAMoOFBRDG95yCzNKSH8EkWT4pqCXng7KFgAHVAm7vuPGowKI8cPMVHNGigX2M
+g3y0+NsuDkR0IX2n47X/7slBtf5qZ5IA+Ya/TtmN0XFJ3mHK+RpcxBiIfmKm1xb
ZciGxGtHVuduoHGiwWX9HL47BdWKBCV54l2bhbM33TBFCaPNG1FmmEbC1aMfrP6I
e/kvHJfHATQ75z3H7ZsU9Uirim2SDBIERLBhHNqT5JgBKVm61ffEf1g6ywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGpVjMYIRTj9eKiAep+9P8o6Ew8EMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvYWxXTXhnaEZPUDE0cUlCNm43MF95am9URHdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDWNgIAwQC
WNhIMA0GCSqGSIb3DQEBCwUAA4IBAQCGcuFkUA+tg9uu2LNbmaQmIbTqISSTzIzy
LCc32hZRv9CKOaF+to9VIqW5mU72oV021szBU0v2fJKilPg9axsr7g7dY0BpRXlT
g8fzLvJfqskIl39ox8TuP/X7TFMCmXZLJBTmrNmHCS7ws/ohuhOZL2E11maq+zVW
mSMGvzcSfjxHgk1IP+2DR+PdXkg5tndrDf4YyTChQPKr3Prt2cNDBUqJ4vRpj3OL
5QXKEz/u2b5C0F9KfWZKBRvEW9oJU3bE10WKoZsJrBD7neeiMal6USDD501sKwM8
cpRr2ems9X4UNKrgC1BC4a18voA+XV+5hQl8WsyKa1pUqr3e5zOH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org