Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pK_PS1F7HHXIiFxv9fxkDXX0zT0.roa
File: pK_PS1F7HHXIiFxv9fxkDXX0zT0.roa (raw, json)
Hash identifier: OHRqTgSzZ2ckY6i37cVGJEMBjwtaAXAYqArkvS7/P7o=
Subject key identifier: A4:AF:CF:4B:51:7B:1C:75:C8:88:5C:6F:F5:FC:64:0D:75:F4:CD:3D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01888F5EC2D8000DE2DD14DF424214A5A064
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pK_PS1F7HHXIiFxv9fxkDXX0zT0.roa
Signing time: Tue 06 Jun 2023 06:22:12 +0000
ROA not before: Tue 06 Jun 2023 06:22:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 88.216.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:5e:c2:d8:00:0d:e2:dd:14:df:42:42:14:a5:a0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 6 06:22:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4afcf4b517b1c75c8885c6ff5fc640d75f4cd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:8d:f4:08:32:69:a7:5b:9b:16:54:a3:46:
61:a4:4d:7d:45:b5:ee:98:92:fb:6e:f9:c0:5d:d6:
ef:91:03:9c:83:2a:12:db:6f:74:78:c8:55:c7:55:
29:38:18:65:c4:51:3f:e2:19:dd:b6:5a:ff:a3:20:
9c:54:89:cb:5e:6a:4e:70:ba:07:6b:e1:77:74:67:
ff:b0:44:50:2b:8f:ee:3a:3e:fb:0d:2c:a8:80:56:
1b:c5:e1:68:9f:7d:a1:c9:7d:f2:99:7c:de:c9:1b:
39:94:4d:fa:c8:0e:c3:61:5a:24:c1:5c:f9:2d:a2:
fe:84:f1:ab:7a:5d:f5:dd:6d:50:0a:c1:7d:0b:48:
55:5a:2a:6a:c8:8a:84:be:f6:3f:a3:de:ba:a7:8d:
fa:f4:e6:7a:e6:85:5d:45:c5:de:02:2c:43:ef:25:
6f:ca:05:99:0c:32:03:77:60:1b:1c:d0:26:bb:89:
b4:c5:66:1a:46:ae:5f:5e:fd:04:ea:de:a2:9e:2e:
f7:dd:91:db:34:1e:a4:13:c1:81:ff:6a:4e:14:40:
f3:8c:29:9e:55:60:6c:75:b5:4a:64:f3:a0:03:b2:
ca:71:99:fa:5b:a7:44:d1:05:33:bf:01:27:fc:94:
77:52:4d:eb:fb:11:a8:24:c2:8a:70:d6:d2:f7:2d:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AF:CF:4B:51:7B:1C:75:C8:88:5C:6F:F5:FC:64:0D:75:F4:CD:3D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pK_PS1F7HHXIiFxv9fxkDXX0zT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:bc:66:c5:fb:f8:83:09:e3:d3:ba:54:3c:2c:ff:29:f9:e5:
ae:59:65:1f:bb:9a:f2:05:6a:e4:cb:1b:5e:be:c2:e7:f2:9d:
d3:24:b6:af:dc:e3:27:f8:21:c5:e5:b1:3a:59:b1:ee:6d:cb:
af:70:9c:4b:8a:a0:f2:55:52:85:fe:9d:7f:63:04:7d:f0:bd:
58:2d:cf:d2:e7:27:2c:d8:d0:69:ea:50:09:fa:44:ac:1a:b4:
5f:b8:00:2f:39:92:56:78:73:a5:e4:04:0a:dc:8e:26:a0:aa:
1c:cc:94:b6:24:22:27:2f:cf:da:db:a8:bb:ac:36:3d:8e:92:
d6:85:bb:06:74:26:dc:51:91:e1:bb:7e:98:e0:86:6f:a5:b5:
20:5d:dc:84:fc:08:4d:09:00:a9:02:a3:de:f3:32:04:9c:37:
7a:ed:d1:b5:e4:e0:94:c9:b0:8b:65:ff:0b:ab:f7:e5:48:b2:
da:7c:af:cd:a5:c1:44:fc:c4:4f:57:6f:04:85:77:60:81:5f:
b9:b8:67:f5:60:9b:89:08:6d:6b:77:97:6c:61:08:d2:47:e4:
44:ad:e3:f6:81:23:7e:f9:25:d1:0c:e4:62:dd:3e:31:cd:fb:
09:e9:17:47:df:3d:e8:69:55:eb:be:1b:91:11:8f:71:f4:d8:
b7:f9:55:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiPXsLYAA3i3RTfQkIUpaBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNjA2MDYyMjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGFmY2Y0YjUxN2IxYzc1Yzg4ODVjNmZmNWZjNjQwZDc1ZjRjZDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy6N9AgyaadbmxZUo0ZhpE19RbXu
mJL7bvnAXdbvkQOcgyoS2290eMhVx1UpOBhlxFE/4hndtlr/oyCcVInLXmpOcLoH
a+F3dGf/sERQK4/uOj77DSyogFYbxeFon32hyX3ymXzeyRs5lE36yA7DYVokwVz5
LaL+hPGrel313W1QCsF9C0hVWipqyIqEvvY/o966p4369OZ65oVdRcXeAixD7yVv
ygWZDDIDd2AbHNAmu4m0xWYaRq5fXv0E6t6ini733ZHbNB6kE8GB/2pOFEDzjCme
VWBsdbVKZPOgA7LKcZn6W6dE0QUzvwEn/JR3Uk3r+xGoJMKKcNbS9y1ZTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKSvz0tRexx1yIhcb/X8ZA119M09MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvcEtfUFMxRjdISFhJaUZ4djlmeGtEWFgwelQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNiDMA0G
CSqGSIb3DQEBCwUAA4IBAQBOvGbF+/iDCePTulQ8LP8p+eWuWWUfu5ryBWrkyxte
vsLn8p3TJLav3OMn+CHF5bE6WbHubcuvcJxLiqDyVVKF/p1/YwR98L1YLc/S5ycs
2NBp6lAJ+kSsGrRfuAAvOZJWeHOl5AQK3I4moKoczJS2JCInL8/a26i7rDY9jpLW
hbsGdCbcUZHhu36Y4IZvpbUgXdyE/AhNCQCpAqPe8zIEnDd67dG15OCUybCLZf8L
q/flSLLafK/NpcFE/MRPV28EhXdggV+5uGf1YJuJCG1rd5dsYQjSR+REreP2gSN+
+SXRDORi3T4xzfsJ6RdH3z3oaVXrvhuREY9x9Ni3+VVB
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:50 2023 by rpki-client on console-fra.rpki-client.org