Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mE_ZRvb9lZJP0_yFH1EMo4CETZw.roa
File: mE_ZRvb9lZJP0_yFH1EMo4CETZw.roa (raw, json)
Hash identifier: iQs7ABhqDtUIpXWsNqsSAwYH/GSJf9SMx/begVLgSbk=
Subject key identifier: 98:4F:D9:46:F6:FD:95:92:4F:D3:FC:85:1F:51:0C:A3:80:84:4D:9C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01886E50BB7EC9BE1BDCF94A59F2B8F28D44
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mE_ZRvb9lZJP0_yFH1EMo4CETZw.roa
Signing time: Tue 30 May 2023 20:19:24 +0000
ROA not before: Tue 30 May 2023 20:19:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35409
IP address blocks: 88.216.93.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6e:50:bb:7e:c9:be:1b:dc:f9:4a:59:f2:b8:f2:8d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 30 20:19:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=984fd946f6fd95924fd3fc851f510ca380844d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2a:3a:5b:5d:ed:06:85:6b:22:f7:94:72:93:
5b:5b:eb:04:91:77:44:9e:01:8b:84:4d:ce:72:88:
b6:a0:47:82:51:40:e2:f8:53:7b:ea:19:84:02:94:
95:00:a7:5a:a1:fc:5e:89:74:13:e0:a6:28:fe:2e:
f9:f2:b8:f2:b4:6b:e8:6e:4a:6b:cd:da:50:9f:e6:
b3:a5:0d:f9:c0:67:f5:52:22:84:ae:75:6e:95:27:
cf:7e:a8:24:0c:c9:b0:c3:8b:ca:9e:b7:55:4f:1a:
cd:f7:e7:7d:53:7f:90:92:44:d2:6a:df:59:db:fd:
5b:30:01:80:aa:06:80:3f:9a:b0:f4:15:27:d1:ac:
0d:ea:8e:df:8b:9e:59:1b:3c:d0:ab:fd:ef:77:5e:
d2:14:de:f7:9c:75:94:b0:db:5e:f1:34:e4:c9:1a:
eb:6e:87:bb:98:45:6d:94:c5:77:4d:52:f2:d2:42:
ad:fa:d3:bc:8a:6d:83:07:97:03:ec:69:eb:14:68:
2f:47:f1:2f:3c:1c:42:ba:d4:90:af:d0:10:1b:ca:
62:38:08:0f:55:05:41:45:65:7a:75:a0:19:68:e2:
8e:2f:ad:2f:8d:e1:f0:6a:7a:b7:03:7e:c8:c5:db:
30:8e:43:7a:f9:4b:e5:31:62:ea:a7:87:2e:74:bb:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4F:D9:46:F6:FD:95:92:4F:D3:FC:85:1F:51:0C:A3:80:84:4D:9C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mE_ZRvb9lZJP0_yFH1EMo4CETZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.2.0/24
88.216.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f4:ab:0b:d6:3d:ff:df:47:9f:e7:68:09:c9:13:50:bb:c7:
ed:61:49:d0:38:b5:96:98:a6:a8:62:b5:67:80:00:50:3a:5b:
63:35:70:c7:84:04:d8:a2:15:eb:d0:63:c9:43:77:af:29:13:
8a:c1:1d:05:57:35:a9:35:80:f7:15:8f:45:c4:fb:19:55:dc:
cb:83:e6:96:64:0b:6c:27:2a:5f:73:72:f7:14:c0:df:cd:87:
00:b4:c6:c5:7e:62:fd:c9:1c:64:13:04:9b:34:2a:64:12:93:
8d:d0:61:fa:4a:ff:2c:b6:bb:cc:41:cc:fe:81:5c:c7:37:10:
6b:f8:5c:8f:94:94:ae:f1:33:2f:b8:63:fe:64:df:18:5d:c5:
46:93:55:88:e4:fe:91:68:50:19:47:84:21:bd:d3:3c:b6:29:
cb:31:9b:69:f9:f1:a8:5b:60:5f:a3:76:3e:e9:33:cb:c2:00:
84:1d:ee:de:91:67:32:cc:ad:a1:f3:c1:ba:f8:78:2e:19:33:
b6:23:05:54:1c:66:d0:2a:6f:27:5b:74:13:64:1f:d6:34:ac:
14:25:4b:d5:88:f3:33:32:49:94:8f:3e:8c:cc:4c:27:e9:74:
30:3e:c0:96:7d:34:c4:27:38:1c:8f:ea:24:44:fe:9b:dc:74:
ba:70:66:55
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYhuULt+yb4b3PlKWfK48o1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNTMwMjAxOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODRmZDk0NmY2ZmQ5NTkyNGZkM2ZjODUxZjUxMGNhMzgwODQ0ZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSo6W13tBoVrIveUcpNbW+sEkXdE
ngGLhE3Ocoi2oEeCUUDi+FN76hmEApSVAKdaofxeiXQT4KYo/i758rjytGvobkpr
zdpQn+azpQ35wGf1UiKErnVulSfPfqgkDMmww4vKnrdVTxrN9+d9U3+QkkTSat9Z
2/1bMAGAqgaAP5qw9BUn0awN6o7fi55ZGzzQq/3vd17SFN73nHWUsNte8TTkyRrr
boe7mEVtlMV3TVLy0kKt+tO8im2DB5cD7GnrFGgvR/EvPBxCutSQr9AQG8piOAgP
VQVBRWV6daAZaOKOL60vjeHwanq3A37IxdswjkN6+UvlMWLqp4cudLu6BwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJhP2Ub2/ZWST9P8hR9RDKOAhE2cMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvbUVfWlJ2YjlsWkpQMF95RkgxRU1vNENFVFp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNgCAwQA
WNhdMA0GCSqGSIb3DQEBCwUAA4IBAQAM9KsL1j3/30ef52gJyRNQu8ftYUnQOLWW
mKaoYrVngABQOltjNXDHhATYohXr0GPJQ3evKROKwR0FVzWpNYD3FY9FxPsZVdzL
g+aWZAtsJypfc3L3FMDfzYcAtMbFfmL9yRxkEwSbNCpkEpON0GH6Sv8strvMQcz+
gVzHNxBr+FyPlJSu8TMvuGP+ZN8YXcVGk1WI5P6RaFAZR4QhvdM8tinLMZtp+fGo
W2Bfo3Y+6TPLwgCEHe7ekWcyzK2h88G6+HguGTO2IwVUHGbQKm8nW3QTZB/WNKwU
JUvViPMzMkmUjz6MzEwn6XQwPsCWfTTEJzgcj+okRP6b3HS6cGZV
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:50 2023 by rpki-client on console-fra.rpki-client.org