Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gr466AEpFHoCXVio0gofTqevDmk.roa
File: gr466AEpFHoCXVio0gofTqevDmk.roa (raw, json)
Hash identifier: EfBgLohqdQnIebbbeylxXMq/OpPh5jEb/BLO0bpDYt4=
Subject key identifier: 82:BE:3A:E8:01:29:14:7A:02:5D:58:A8:D2:0A:1F:4E:A7:AF:0E:69
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0187BA2FB766A58DA614D7D5CB665BE0C6FC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gr466AEpFHoCXVio0gofTqevDmk.roa
Signing time: Tue 25 Apr 2023 20:51:41 +0000
ROA not before: Tue 25 Apr 2023 20:51:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 88.216.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 14:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:2f:b7:66:a5:8d:a6:14:d7:d5:cb:66:5b:e0:c6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 25 20:51:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82be3ae80129147a025d58a8d20a1f4ea7af0e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:3a:1c:65:e2:f2:a9:38:7e:69:21:f5:1a:
1b:61:18:f5:67:a8:f1:64:0b:00:1d:13:db:7b:38:
98:9d:0c:c5:c5:41:82:54:36:40:fc:1e:3b:8b:ac:
87:31:4f:2c:9e:06:f6:0e:d4:4c:1d:1b:b7:1f:e1:
0c:ab:27:76:91:79:4f:9a:6f:a5:1c:73:1f:cc:07:
cb:0e:b5:fa:f3:3d:fc:57:b3:99:a4:31:f4:b1:63:
ea:2b:04:dd:ea:83:6a:e4:8d:a8:39:d6:cb:22:d0:
65:31:5e:c0:fb:87:27:6c:9a:1f:26:af:8d:fb:44:
11:a7:47:09:a2:af:28:2f:10:4d:89:20:f6:dc:4c:
6d:93:b7:82:b4:d5:e4:cb:a6:cd:1e:5a:ec:60:20:
82:3b:5a:1e:8f:b8:ec:0c:29:72:7c:47:61:c6:49:
14:fe:7f:5c:ae:5f:91:8a:f5:76:19:17:e5:50:12:
c0:cb:cc:dc:12:61:d1:8e:b2:26:08:42:ba:0a:c1:
e0:01:d1:04:4d:d1:1a:d2:26:4f:c2:68:51:0e:28:
82:db:a0:d3:05:bf:80:53:47:1d:c6:d5:f4:dd:35:
f3:7d:37:86:c9:a9:95:91:c5:dd:3a:2a:91:5e:be:
d2:dc:e9:2f:81:d9:37:0d:2f:db:eb:44:09:8f:0c:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BE:3A:E8:01:29:14:7A:02:5D:58:A8:D2:0A:1F:4E:A7:AF:0E:69
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/gr466AEpFHoCXVio0gofTqevDmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2a:0e:59:da:89:b8:ee:55:5f:4b:8f:47:ae:2e:32:e6:fe:
6b:51:d5:da:b8:c4:72:51:c6:2d:53:99:13:36:6a:9c:68:af:
36:75:48:4d:7c:60:a8:0c:47:21:0a:48:15:fe:58:d2:ec:9f:
ca:37:cb:04:2b:b4:a7:b9:01:cb:c7:5e:51:ac:87:c6:3a:70:
7d:97:8a:91:3d:24:42:7e:bf:64:0b:7e:21:fc:55:10:2e:1d:
9e:aa:db:4e:fb:8b:ce:cf:5f:91:46:5c:9f:74:a2:01:83:44:
16:1a:8d:94:94:03:4d:97:d5:7c:1f:0f:51:04:ca:98:c3:ef:
bd:ce:d9:34:be:7e:73:4d:13:15:47:f7:2c:00:e8:64:be:86:
5d:f1:73:01:59:d4:71:79:7c:87:de:4e:dc:6a:2a:75:34:36:
96:ca:ee:14:68:e8:fb:b4:26:d1:cd:65:53:81:03:f2:63:67:
2c:f5:e0:93:28:f3:19:56:21:c8:8c:3f:23:ba:d4:91:38:95:
fd:b3:ea:1a:af:34:f4:59:ef:16:de:a9:2e:d2:4e:53:d1:6b:
5c:94:6f:0d:0b:20:91:2f:c3:f6:6e:20:08:64:27:79:ea:7f:
73:02:56:1e:60:9d:12:00:e5:01:c8:c3:ad:3f:4f:e0:41:4b:
9c:ab:42:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYe6L7dmpY2mFNfVy2Zb4Mb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNDI1MjA1MTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmJlM2FlODAxMjkxNDdhMDI1ZDU4YThkMjBhMWY0ZWE3YWYwZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqM6HGXi8qk4fmkh9RobYRj1Z6jx
ZAsAHRPbeziYnQzFxUGCVDZA/B47i6yHMU8sngb2DtRMHRu3H+EMqyd2kXlPmm+l
HHMfzAfLDrX68z38V7OZpDH0sWPqKwTd6oNq5I2oOdbLItBlMV7A+4cnbJofJq+N
+0QRp0cJoq8oLxBNiSD23Extk7eCtNXky6bNHlrsYCCCO1oej7jsDClyfEdhxkkU
/n9crl+RivV2GRflUBLAy8zcEmHRjrImCEK6CsHgAdEETdEa0iZPwmhRDiiC26DT
Bb+AU0cdxtX03TXzfTeGyamVkcXdOiqRXr7S3Okvgdk3DS/b60QJjwx3vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIK+OugBKRR6Al1YqNIKH06nrw5pMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvZ3I0NjZBRXBGSG9DWFZpbzBnb2ZUcWV2RG1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNjQMA0G
CSqGSIb3DQEBCwUAA4IBAQBAKg5Z2om47lVfS49Hri4y5v5rUdXauMRyUcYtU5kT
NmqcaK82dUhNfGCoDEchCkgV/ljS7J/KN8sEK7SnuQHLx15RrIfGOnB9l4qRPSRC
fr9kC34h/FUQLh2eqttO+4vOz1+RRlyfdKIBg0QWGo2UlANNl9V8Hw9RBMqYw++9
ztk0vn5zTRMVR/csAOhkvoZd8XMBWdRxeXyH3k7caip1NDaWyu4UaOj7tCbRzWVT
gQPyY2cs9eCTKPMZViHIjD8jutSROJX9s+oarzT0We8W3qku0k5T0WtclG8NCyCR
L8P2biAIZCd56n9zAlYeYJ0SAOUByMOtP0/gQUucq0Lt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org