Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iG0SKGgtmbtkhk-ztSVbJXD4srs.roa
File: iG0SKGgtmbtkhk-ztSVbJXD4srs.roa (raw, json)
Hash identifier: VRqNnM6m3X+7m5miCa0j6gFsWr9XNq9NHnnCFs3ag1k=
Subject key identifier: 88:6D:12:28:68:2D:99:BB:64:86:4F:B3:B5:25:5B:25:70:F8:B2:BB
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018ADA7FADDCCF35A04D963F6EE3E7C3D09C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iG0SKGgtmbtkhk-ztSVbJXD4srs.roa
Signing time: Thu 28 Sep 2023 06:35:15 +0000
ROA not before: Thu 28 Sep 2023 06:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211376
IP address blocks: 88.216.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Oct 2023 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:da:7f:ad:dc:cf:35:a0:4d:96:3f:6e:e3:e7:c3:d0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 28 06:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=886d1228682d99bb64864fb3b5255b2570f8b2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:80:be:e9:3d:c7:25:c7:f7:c7:04:b0:ce:
b5:8a:9a:d3:b1:93:45:a5:59:77:9d:6b:1e:ed:04:
43:1f:71:92:b8:28:8e:a4:23:3a:b4:bd:06:37:eb:
22:6a:4e:aa:25:a0:bc:fa:51:3d:94:f0:f4:62:d2:
22:b4:3e:f5:5a:6a:50:ef:42:19:ae:d9:4e:73:e7:
25:50:24:5e:f4:bc:13:8c:1d:7e:90:bb:bb:e5:6d:
80:8f:23:2d:6d:b6:31:b2:a9:2d:0e:b4:93:82:44:
7b:7d:66:5a:a8:23:11:c1:6d:ed:fe:4b:55:a6:4f:
3d:d9:43:69:ca:db:c1:cc:c2:3f:b8:81:23:24:40:
e8:51:b9:8a:7d:f8:b8:8a:fd:3d:36:78:41:1e:39:
65:b1:f2:90:bd:43:5a:e3:32:31:e4:ad:f4:72:23:
f1:2c:95:e8:44:31:ba:97:27:ff:7d:42:b8:b2:ae:
be:06:5f:6f:f3:27:8f:81:dd:98:2c:e2:69:db:84:
73:12:b2:30:e6:e6:12:8c:4b:e7:82:3c:61:b1:69:
15:3d:27:59:98:84:05:57:7f:61:7c:1a:27:0c:0b:
25:aa:3d:7c:58:b2:26:30:fb:f4:18:c5:a1:31:c4:
2d:2b:61:0f:de:fa:91:67:79:a7:0a:40:4c:d0:a0:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6D:12:28:68:2D:99:BB:64:86:4F:B3:B5:25:5B:25:70:F8:B2:BB
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iG0SKGgtmbtkhk-ztSVbJXD4srs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.43.0/24
Signature Algorithm: sha256WithRSAEncryption
01:5c:a9:03:86:f6:99:4d:9f:83:e2:63:47:e7:c8:b4:46:f7:
39:d6:20:7e:7f:b8:6f:87:f1:b8:66:c0:93:80:a5:ab:5c:99:
e3:ba:f1:a4:b7:8a:d1:7c:17:c6:e2:af:c1:01:72:e9:11:ea:
c6:52:cc:a9:75:d0:db:d1:1b:01:7c:8d:87:ba:e9:7a:ae:ea:
93:4d:94:d7:1a:d5:3e:60:5a:ce:d1:81:19:a6:4a:1e:18:02:
d2:6b:0e:37:9e:4c:20:91:4a:38:f0:d7:d9:b2:eb:31:ae:31:
a7:60:17:2f:06:ed:da:9f:fa:c9:36:36:1d:1b:63:2f:2e:a9:
b1:ef:ab:0d:5e:d8:e1:da:5b:c1:2e:de:72:75:0c:78:fe:64:
80:24:01:fc:db:2a:3b:a2:cf:f1:9b:53:12:ff:eb:14:b8:71:
75:11:50:cf:22:45:8c:1d:21:ce:25:28:54:cb:a0:c5:57:54:
7c:08:0e:58:8b:c2:29:75:e9:df:1a:9c:6c:58:08:d2:b9:77:
86:e5:55:a5:d6:ad:ed:49:db:b2:33:d8:8c:27:e8:62:42:04:
80:69:f3:35:f9:e2:1e:2b:0e:d2:0f:a3:4d:f5:26:da:ca:99:
66:4a:88:1c:e3:d4:f5:27:78:a0:49:e2:90:38:a9:b5:a4:f6:
66:de:29:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYraf63czzWgTZY/buPnw9CcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwOTI4MDYzNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODZkMTIyODY4MmQ5OWJiNjQ4NjRmYjNiNTI1NWIyNTcwZjhiMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpaAvuk9xyXH98cEsM61iprTsZNF
pVl3nWse7QRDH3GSuCiOpCM6tL0GN+siak6qJaC8+lE9lPD0YtIitD71WmpQ70IZ
rtlOc+clUCRe9LwTjB1+kLu75W2AjyMtbbYxsqktDrSTgkR7fWZaqCMRwW3t/ktV
pk892UNpytvBzMI/uIEjJEDoUbmKffi4iv09NnhBHjllsfKQvUNa4zIx5K30ciPx
LJXoRDG6lyf/fUK4sq6+Bl9v8yePgd2YLOJp24RzErIw5uYSjEvngjxhsWkVPSdZ
mIQFV39hfBonDAslqj18WLImMPv0GMWhMcQtK2EP3vqRZ3mnCkBM0KAE1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIhtEihoLZm7ZIZPs7UlWyVw+LK7MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvaUcwU0tHZ3RtYnRraGstenRTVmJKWEQ0c3JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNgrMA0G
CSqGSIb3DQEBCwUAA4IBAQABXKkDhvaZTZ+D4mNH58i0Rvc51iB+f7hvh/G4ZsCT
gKWrXJnjuvGkt4rRfBfG4q/BAXLpEerGUsypddDb0RsBfI2Huul6ruqTTZTXGtU+
YFrO0YEZpkoeGALSaw43nkwgkUo48NfZsusxrjGnYBcvBu3an/rJNjYdG2MvLqmx
76sNXtjh2lvBLt5ydQx4/mSAJAH82yo7os/xm1MS/+sUuHF1EVDPIkWMHSHOJShU
y6DFV1R8CA5Yi8IpdenfGpxsWAjSuXeG5VWl1q3tSduyM9iMJ+hiQgSAafM1+eIe
Kw7SD6NN9SbayplmSogc49T1J3igSeKQOKm1pPZm3ikn
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:30 2024 by rpki-client on console-ams.rpki-client.org