Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qbM97zOp8dqFNNXatVnOijmCIkI.roa
File: qbM97zOp8dqFNNXatVnOijmCIkI.roa (raw, json)
Hash identifier: sdOW4M8B8tOO5RSZi4HTcYF/O5xTtThzfq2o8Gu55XM=
Subject key identifier: A9:B3:3D:EF:33:A9:F1:DA:85:34:D5:DA:B5:59:CE:8A:39:82:22:42
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185E30ED11E9B2B2E695C419214880FD0EC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qbM97zOp8dqFNNXatVnOijmCIkI.roa
Signing time: Tue 24 Jan 2023 09:14:37 +0000
ROA not before: Tue 24 Jan 2023 09:14:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139660
IP address blocks: 88.216.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Feb 2023 17:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:0e:d1:1e:9b:2b:2e:69:5c:41:92:14:88:0f:d0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 24 09:14:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9b33def33a9f1da8534d5dab559ce8a39822242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f9:71:07:fd:af:a8:fd:55:b6:10:d7:a3:17:
02:ca:38:94:ca:21:26:3e:3a:f9:2f:a8:43:a3:17:
b1:cf:f0:bf:94:3d:9d:55:31:fb:f2:ef:5b:f4:ed:
00:e6:4e:c2:09:27:50:dc:54:5c:c2:44:f1:be:db:
ce:c8:90:dc:e0:f1:f9:21:69:6f:85:83:58:3d:fa:
51:28:0e:09:62:7d:10:98:d4:ba:96:c2:31:53:72:
9d:ed:92:44:86:38:6c:e4:44:ff:62:a4:aa:71:4f:
84:36:bd:9e:da:a6:a1:bb:aa:e7:26:dd:8d:32:44:
e7:dc:07:84:f4:41:80:17:5d:56:5d:a4:53:af:b2:
b6:ce:03:3f:63:c7:7b:ba:ad:e1:77:d7:d4:9d:51:
c5:56:27:5b:c2:89:56:1b:a4:56:f2:68:6b:53:37:
18:bd:42:54:c0:fe:54:52:4d:7c:e6:a6:5d:56:68:
87:6e:95:2e:29:d2:12:70:16:b1:36:52:77:eb:15:
99:bd:c2:8f:5a:c7:7c:59:0b:d7:ba:5b:ef:3e:4e:
87:98:2a:2f:a1:a5:bf:7c:6a:a3:b9:d1:1e:5c:f4:
aa:7b:0b:1c:1f:36:f0:92:e5:a7:79:0d:34:61:bb:
1e:37:6f:dd:50:6f:47:c5:4c:5d:fa:f7:13:26:a3:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B3:3D:EF:33:A9:F1:DA:85:34:D5:DA:B5:59:CE:8A:39:82:22:42
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/qbM97zOp8dqFNNXatVnOijmCIkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.1.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f9:1f:40:6e:81:9b:c1:c6:a5:d6:56:4b:75:b1:8c:08:16:
41:2b:10:20:29:db:8e:57:d4:a9:f3:5d:90:ec:36:f5:55:ce:
e1:bb:8e:3a:16:7f:76:d4:64:c3:f5:43:cc:4a:b2:63:ec:30:
f4:37:fa:15:69:29:ef:f3:2c:62:42:71:5d:cf:d9:0d:e4:65:
04:a0:26:be:a6:19:b7:61:af:2a:80:4a:13:95:97:13:70:7e:
82:bf:65:cc:6f:40:24:79:6f:37:25:b7:ba:d2:2a:89:27:44:
33:a2:ba:fd:5d:d4:58:c0:55:12:51:94:40:63:42:c2:9a:0a:
ff:18:b8:c5:14:40:0b:e2:ce:ef:cf:e6:13:7f:fc:6c:d4:aa:
33:d8:bd:cb:c3:4b:0a:f6:74:02:57:4e:9d:e5:ae:a0:bf:eb:
8f:f0:4f:5f:ad:43:1c:72:e5:ba:c8:66:72:77:07:d9:7b:fe:
8c:48:63:16:70:45:b4:a0:be:fe:7b:f0:83:6e:47:73:d0:3a:
98:3c:e5:0c:a1:cd:72:0b:38:7d:ef:0c:66:42:56:3f:2e:df:
28:6b:e5:98:3b:68:cf:99:16:bb:39:e6:f0:25:f2:6f:7c:1b:
77:1e:de:3b:9a:95:1a:68:23:a2:35:9b:2f:40:e6:7a:e1:6b:
fb:10:e4:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXjDtEemysuaVxBkhSID9DsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTI0MDkxNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWIzM2RlZjMzYTlmMWRhODUzNGQ1ZGFiNTU5Y2U4YTM5ODIyMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/lxB/2vqP1VthDXoxcCyjiUyiEm
Pjr5L6hDoxexz/C/lD2dVTH78u9b9O0A5k7CCSdQ3FRcwkTxvtvOyJDc4PH5IWlv
hYNYPfpRKA4JYn0QmNS6lsIxU3Kd7ZJEhjhs5ET/YqSqcU+ENr2e2qahu6rnJt2N
MkTn3AeE9EGAF11WXaRTr7K2zgM/Y8d7uq3hd9fUnVHFVidbwolWG6RW8mhrUzcY
vUJUwP5UUk185qZdVmiHbpUuKdIScBaxNlJ36xWZvcKPWsd8WQvXulvvPk6HmCov
oaW/fGqjudEeXPSqewscHzbwkuWneQ00YbseN2/dUG9HxUxd+vcTJqPmpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKmzPe8zqfHahTTV2rVZzoo5giJCMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvcWJNOTd6T3A4ZHFGTk5YYXRWbk9pam1DSWtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNgBMA0G
CSqGSIb3DQEBCwUAA4IBAQAB+R9AboGbwcal1lZLdbGMCBZBKxAgKduOV9Sp812Q
7Db1Vc7hu446Fn921GTD9UPMSrJj7DD0N/oVaSnv8yxiQnFdz9kN5GUEoCa+phm3
Ya8qgEoTlZcTcH6Cv2XMb0AkeW83Jbe60iqJJ0Qzorr9XdRYwFUSUZRAY0LCmgr/
GLjFFEAL4s7vz+YTf/xs1Koz2L3Lw0sK9nQCV06d5a6gv+uP8E9frUMccuW6yGZy
dwfZe/6MSGMWcEW0oL7+e/CDbkdz0DqYPOUMoc1yCzh97wxmQlY/Lt8oa+WYO2jP
mRa7OebwJfJvfBt3Ht47mpUaaCOiNZsvQOZ64Wv7EOQw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org