Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dS7C3_u5iyK3HNOg9RqlOSE81g4.roa
File: dS7C3_u5iyK3HNOg9RqlOSE81g4.roa (raw, json)
Hash identifier: Fk7f0B5X9HX4iLlKhVOvoqbCb44E/s9/tkxexfhI7aM=
Subject key identifier: 75:2E:C2:DF:FB:B9:8B:22:B7:1C:D3:A0:F5:1A:A5:39:21:3C:D6:0E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188B14E1100BD0EDE1289F87D5F1E2EE903
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dS7C3_u5iyK3HNOg9RqlOSE81g4.roa
Signing time: Mon 12 Jun 2023 20:31:03 +0000
ROA not before: Mon 12 Jun 2023 20:31:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 88.216.132.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b1:4e:11:00:bd:0e:de:12:89:f8:7d:5f:1e:2e:e9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 12 20:31:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=752ec2dffbb98b22b71cd3a0f51aa539213cd60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:b3:a2:26:3c:0e:0d:95:6f:4b:0b:c2:e3:
62:cc:77:6c:f8:a0:e3:55:d1:10:b2:20:be:94:25:
de:20:03:1b:47:5e:8b:1a:33:3d:55:a9:48:2e:8d:
88:47:15:0b:3f:0d:27:a4:0f:23:b5:8d:66:60:a2:
3a:1f:19:e8:5d:d8:63:61:f1:b2:5a:aa:6c:df:57:
4d:a3:8d:7d:b5:53:32:c4:14:58:d1:42:f4:05:ca:
3d:53:22:03:8b:b2:ab:99:f3:f5:ff:42:9a:4f:43:
c6:f1:59:1b:3c:c2:1b:00:2e:e5:cd:d2:18:84:8f:
d4:71:ac:72:25:3c:d7:a8:d6:3d:4c:08:21:c0:79:
6c:e3:99:5e:b5:8a:d2:d7:09:3e:34:e4:18:b3:d5:
7b:0e:42:84:74:2a:db:23:cb:da:6f:17:0c:2b:10:
d9:4a:6d:34:df:03:f5:9e:4e:33:d4:a8:ee:2f:d8:
10:a0:10:d0:4b:4b:54:9f:43:e9:a5:67:5c:6b:38:
7b:3d:be:fa:a1:eb:eb:39:b5:e2:fe:8c:92:b1:53:
71:c4:21:cd:0e:f7:59:a6:0d:72:07:71:50:5c:17:
c4:5e:e5:b4:bf:d1:3b:8b:d9:83:68:00:4c:5f:5d:
0c:12:64:f4:29:53:b1:c1:01:4f:3c:81:7e:ca:c5:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2E:C2:DF:FB:B9:8B:22:B7:1C:D3:A0:F5:1A:A5:39:21:3C:D6:0E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dS7C3_u5iyK3HNOg9RqlOSE81g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.247.0/24
88.216.132.0/24
Signature Algorithm: sha256WithRSAEncryption
40:3e:43:b3:d4:23:36:69:7d:dc:a7:33:e8:ee:0c:9a:22:ba:
e6:c1:c8:28:88:83:60:39:85:8e:11:07:fa:95:8f:7d:14:5d:
c9:90:98:93:df:ff:d5:8a:92:c4:b7:cd:bc:f9:e1:44:3a:52:
7c:8a:99:33:3f:6c:ab:ec:88:24:f0:72:2b:81:6d:4b:7d:e7:
9f:66:7e:de:8e:14:db:c4:cc:fc:24:ff:b7:ef:d1:18:df:45:
3f:3b:e3:aa:4e:fc:40:32:dd:7d:80:c2:d1:e8:15:41:ba:55:
02:89:2c:2b:c9:91:17:31:42:e0:c6:4f:e0:05:e3:f2:18:f4:
c5:54:c3:90:09:e7:52:14:9c:f2:a1:2e:b6:47:26:1e:30:f6:
70:a2:0c:ed:bc:50:5d:61:46:45:6a:e9:cd:1a:a9:27:36:ad:
b6:80:f4:25:17:a9:9c:83:20:7e:71:5a:33:bb:c8:b8:8f:c1:
22:06:b8:74:e3:5f:de:9e:30:f8:51:58:85:74:b6:9f:d9:7a:
f0:19:c8:0b:de:37:b3:06:42:c9:b0:2b:bb:fc:4c:81:5d:c3:
33:35:b5:0f:f2:1c:c5:6b:4a:02:cb:3b:f4:30:8f:7f:89:f9:
82:10:04:b7:a3:f8:5f:54:6b:79:6e:a1:1b:8e:1f:6d:bf:9f:
b2:6a:c8:3f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYixThEAvQ7eEon4fV8eLukDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNjEyMjAzMTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTJlYzJkZmZiYjk4YjIyYjcxY2QzYTBmNTFhYTUzOTIxM2NkNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqizoiY8Dg2Vb0sLwuNizHds+KDj
VdEQsiC+lCXeIAMbR16LGjM9ValILo2IRxULPw0npA8jtY1mYKI6HxnoXdhjYfGy
Wqps31dNo419tVMyxBRY0UL0Bco9UyIDi7KrmfP1/0KaT0PG8VkbPMIbAC7lzdIY
hI/UcaxyJTzXqNY9TAghwHls45letYrS1wk+NOQYs9V7DkKEdCrbI8vabxcMKxDZ
Sm003wP1nk4z1KjuL9gQoBDQS0tUn0PppWdcazh7Pb76oevrObXi/oySsVNxxCHN
DvdZpg1yB3FQXBfEXuW0v9E7i9mDaABMX10MEmT0KVOxwQFPPIF+ysXZnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHUuwt/7uYsitxzToPUapTkhPNYOMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvZFM3QzNfdTVpeUszSE5PZzlScWxPU0U4MWc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCD3AwQA
WNiEMA0GCSqGSIb3DQEBCwUAA4IBAQBAPkOz1CM2aX3cpzPo7gyaIrrmwcgoiINg
OYWOEQf6lY99FF3JkJiT3//VipLEt828+eFEOlJ8ipkzP2yr7Igk8HIrgW1Lfeef
Zn7ejhTbxMz8JP+379EY30U/O+OqTvxAMt19gMLR6BVBulUCiSwryZEXMULgxk/g
BePyGPTFVMOQCedSFJzyoS62RyYeMPZwogztvFBdYUZFaunNGqknNq22gPQlF6mc
gyB+cVozu8i4j8EiBrh041/enjD4UViFdLaf2XrwGcgL3jezBkLJsCu7/EyBXcMz
NbUP8hzFa0oCyzv0MI9/ifmCEAS3o/hfVGt5bqEbjh9tv5+yasg/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-fra.rpki-client.org