Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pkZF0LctzEY5h5Rh7QXJds2nAxs.roa
File: pkZF0LctzEY5h5Rh7QXJds2nAxs.roa (raw, json)
Hash identifier: zGW9syX8vOzvjW+HcyaKRBAsrGrJPty9u/F9KtJwYMg=
Subject key identifier: A6:46:45:D0:B7:2D:CC:46:39:87:94:61:ED:05:C9:76:CD:A7:03:1B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018649AAB1BF918E702785ACE00137419FD3
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pkZF0LctzEY5h5Rh7QXJds2nAxs.roa
Signing time: Mon 13 Feb 2023 07:26:08 +0000
ROA not before: Mon 13 Feb 2023 07:26:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16125
IP address blocks: 88.216.236.0/22 maxlen: 24
84.32.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:aa:b1:bf:91:8e:70:27:85:ac:e0:01:37:41:9f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 13 07:26:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a64645d0b72dcc4639879461ed05c976cda7031b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e7:15:9c:61:4b:e8:3d:96:99:4e:5b:88:e8:
98:a7:cc:98:3e:91:6d:11:41:73:99:71:f6:a7:b6:
cb:15:c8:75:1f:0a:31:fa:5f:dd:c1:56:ce:42:d9:
87:4e:ae:99:39:44:f8:eb:3b:33:4f:af:50:16:94:
2c:89:d7:7c:b8:79:2e:5f:82:38:65:e8:38:67:1f:
0b:48:48:80:ce:c1:33:4e:56:80:37:fd:20:3b:05:
5d:a9:ba:0c:9a:a7:3f:5f:a6:0a:be:27:f5:2c:4b:
b0:fa:e6:4f:3a:a9:12:56:a5:6c:61:e2:58:81:79:
13:f0:86:43:19:a5:29:d7:19:07:e9:93:68:ac:54:
22:b0:21:1c:91:18:6c:f4:0e:a2:96:b2:01:ca:33:
4e:71:f1:f4:88:26:71:19:4b:c2:92:4c:ca:30:9c:
e7:6f:94:f1:ea:16:f7:c2:b2:8b:8f:13:a4:08:49:
ca:5d:0b:8a:2d:df:91:e5:7b:7b:09:9c:42:0a:e6:
32:73:d1:65:8a:53:8d:2a:10:39:60:e4:bb:48:7e:
20:49:fe:87:f1:4a:d1:93:25:82:76:d5:ed:2b:2a:
88:21:d3:7b:86:a9:94:be:52:d6:90:6e:07:88:c1:
35:33:99:cd:10:b1:cd:9c:17:20:90:27:c7:7e:22:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:46:45:D0:B7:2D:CC:46:39:87:94:61:ED:05:C9:76:CD:A7:03:1B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pkZF0LctzEY5h5Rh7QXJds2nAxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.248.0/24
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
98:d6:81:6d:4e:b2:ae:d1:e3:44:4f:c0:68:eb:a5:45:5c:63:
88:b5:ab:94:02:52:9d:08:07:aa:4d:ed:45:f0:2c:f3:d1:95:
5a:4c:d7:4f:98:fa:b3:91:ed:65:b4:6b:92:c3:5d:46:3f:f3:
b4:c1:11:72:8c:67:c9:04:95:cf:ac:9c:14:a9:ea:de:6f:22:
1b:ad:9f:3e:99:63:10:21:fa:e6:39:1f:78:10:c0:56:19:06:
8b:41:96:d1:8c:d4:02:08:fc:8e:9d:63:f5:91:43:53:20:52:
0e:48:bb:6d:ed:e4:39:4f:16:fb:85:19:1f:e2:bc:f5:49:50:
15:57:02:0e:fb:5f:18:ec:90:d6:39:42:43:2c:83:cb:9e:49:
52:f9:35:9c:96:f3:d2:bb:fa:8f:24:6d:8a:d9:45:ae:15:cd:
be:c8:75:22:bb:45:db:75:4f:86:5a:47:fa:b5:f0:12:1c:cf:
de:f5:43:fb:0e:10:ca:3b:ad:d8:95:e3:05:36:54:d0:6b:46:
f1:47:bf:49:56:be:dc:13:d0:5e:ff:c3:72:1f:ce:a5:21:32:
71:cb:d4:4c:f7:04:e7:b3:f2:af:db:64:8c:66:43:47:64:0b:
2c:90:59:3e:ed:a5:df:4b:23:86:08:1f:e6:be:98:11:14:90:
60:61:ab:cf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZJqrG/kY5wJ4Ws4AE3QZ/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMjEzMDcyNjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjQ2NDVkMGI3MmRjYzQ2Mzk4Nzk0NjFlZDA1Yzk3NmNkYTcwMzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOcVnGFL6D2WmU5biOiYp8yYPpFt
EUFzmXH2p7bLFch1Hwox+l/dwVbOQtmHTq6ZOUT46zszT69QFpQsidd8uHkuX4I4
Zeg4Zx8LSEiAzsEzTlaAN/0gOwVdqboMmqc/X6YKvif1LEuw+uZPOqkSVqVsYeJY
gXkT8IZDGaUp1xkH6ZNorFQisCEckRhs9A6ilrIByjNOcfH0iCZxGUvCkkzKMJzn
b5Tx6hb3wrKLjxOkCEnKXQuKLd+R5Xt7CZxCCuYyc9FlilONKhA5YOS7SH4gSf6H
8UrRkyWCdtXtKyqIIdN7hqmUvlLWkG4HiME1M5nNELHNnBcgkCfHfiLI/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKZGRdC3LcxGOYeUYe0FyXbNpwMbMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvcGtaRjBMY3R6RVk1aDVSaDdRWEpkczJuQXhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCD4AwQC
WNjsMA0GCSqGSIb3DQEBCwUAA4IBAQCY1oFtTrKu0eNET8Bo66VFXGOItauUAlKd
CAeqTe1F8Czz0ZVaTNdPmPqzke1ltGuSw11GP/O0wRFyjGfJBJXPrJwUqerebyIb
rZ8+mWMQIfrmOR94EMBWGQaLQZbRjNQCCPyOnWP1kUNTIFIOSLtt7eQ5Txb7hRkf
4rz1SVAVVwIO+18Y7JDWOUJDLIPLnklS+TWclvPSu/qPJG2K2UWuFc2+yHUiu0Xb
dU+GWkf6tfASHM/e9UP7DhDKO63YleMFNlTQa0bxR79JVr7cE9Be/8NyH86lITJx
y9RM9wTns/Kv22SMZkNHZAsskFk+7aXfSyOGCB/mvpgRFJBgYavP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:33 2023 by rpki-client on console-ams.rpki-client.org