Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rAAns2SP_DMyM8L-KUIOwk05jlg.roa
File: rAAns2SP_DMyM8L-KUIOwk05jlg.roa (raw, json)
Hash identifier: hEu1epZ+pNxAnChZBiXwHFn4D6g1JapHkKyXX+ERuYY=
Subject key identifier: AC:00:27:B3:64:8F:FC:33:32:33:C2:FE:29:42:0E:C2:4D:39:8E:58
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185E7BB5930B0660671A5BCC88AB35F0B15
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rAAns2SP_DMyM8L-KUIOwk05jlg.roa
Signing time: Wed 25 Jan 2023 07:01:33 +0000
ROA not before: Wed 25 Jan 2023 07:01:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 88.216.90.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Feb 2023 06:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:bb:59:30:b0:66:06:71:a5:bc:c8:8a:b3:5f:0b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 25 07:01:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac0027b3648ffc333233c2fe29420ec24d398e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:3c:fa:75:2e:55:03:a9:8c:ee:4d:8b:43:
cc:3e:83:d2:69:22:62:f5:7a:42:1c:dd:db:95:da:
ec:e9:53:24:d1:44:eb:1a:5b:76:80:b4:0d:b3:fe:
11:c4:94:42:6b:ff:e9:2b:fc:64:00:1d:7d:a2:3d:
58:7a:33:50:1d:56:66:74:2e:bf:2e:57:77:c5:1f:
63:95:6c:c7:8c:0a:9d:3a:7d:ca:7b:8b:70:4d:4b:
86:10:2a:3a:a4:36:b3:6f:39:14:48:63:42:82:f2:
df:54:1b:7b:12:84:02:de:2e:69:fa:c5:55:c0:af:
6e:a1:d7:c2:fa:db:ae:9b:91:37:03:fe:d8:72:d0:
b8:cc:47:5d:8e:fd:fc:07:76:53:c3:8f:13:b7:90:
ec:10:6f:d0:e8:3a:b7:c3:06:f6:2e:c9:d0:b5:41:
0e:de:89:b5:dc:ef:4d:fd:fb:95:98:2a:e0:35:6b:
f8:bf:27:d7:83:a6:01:69:ec:8d:c5:fe:d7:ec:d9:
bd:82:f3:9d:23:85:b7:2a:f3:19:50:4b:01:60:3e:
49:29:30:05:60:a4:67:9c:f4:d4:9a:53:8e:57:49:
26:ec:a3:e4:80:6f:89:e9:03:6d:37:09:f0:35:bd:
7a:49:7b:f5:19:9a:39:9d:77:07:27:f4:f0:58:7c:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:00:27:B3:64:8F:FC:33:32:33:C2:FE:29:42:0E:C2:4D:39:8E:58
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rAAns2SP_DMyM8L-KUIOwk05jlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.22.0/23
88.216.90.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:99:45:83:e5:83:95:d0:73:1d:4c:c7:a1:8b:db:b4:e9:9a:
56:f5:0c:c5:d1:a4:3a:53:db:c5:57:1c:ed:96:de:88:46:db:
bb:d7:45:a0:11:ba:14:97:59:1f:7e:52:48:a9:e3:4a:fd:73:
6f:f2:06:3d:74:84:03:25:4a:2a:05:99:3d:d9:31:f7:17:98:
96:5b:4f:36:50:3b:44:ad:52:d6:47:af:b7:de:8d:35:33:17:
f4:b9:45:9c:a4:89:27:28:12:f6:da:58:c0:80:d4:e3:ae:da:
17:ea:9c:df:ef:d7:23:7d:f4:75:c6:50:2f:30:85:2a:83:d3:
1d:c9:31:d2:07:e3:37:b6:33:2d:09:d3:83:68:1b:76:e3:f0:
ea:9e:b7:bb:68:af:58:8e:48:88:fb:7d:5f:f0:b9:0f:b5:bc:
26:d5:40:57:1e:83:97:97:8b:3b:d5:44:54:c2:66:bb:3c:76:
54:52:f5:2a:8a:39:ad:77:e9:c7:a5:c8:24:e5:ec:d8:24:86:
a0:20:54:ee:72:ff:3d:4b:bf:38:20:ed:8f:29:68:c7:a4:85:
bd:af:fd:53:61:e4:70:91:46:f0:85:8f:a0:da:a8:c0:b1:d3:
a7:9c:a4:be:f9:87:a4:d8:d5:fb:86:58:db:e9:ae:7b:a9:0f:
e5:e0:34:83
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXnu1kwsGYGcaW8yIqzXwsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTI1MDcwMTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzAwMjdiMzY0OGZmYzMzMzIzM2MyZmUyOTQyMGVjMjRkMzk4ZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxU8+nUuVQOpjO5Ni0PMPoPSaSJi
9XpCHN3bldrs6VMk0UTrGlt2gLQNs/4RxJRCa//pK/xkAB19oj1YejNQHVZmdC6/
Lld3xR9jlWzHjAqdOn3Ke4twTUuGECo6pDazbzkUSGNCgvLfVBt7EoQC3i5p+sVV
wK9uodfC+tuum5E3A/7YctC4zEddjv38B3ZTw48Tt5DsEG/Q6Dq3wwb2LsnQtUEO
3om13O9N/fuVmCrgNWv4vyfXg6YBaeyNxf7X7Nm9gvOdI4W3KvMZUEsBYD5JKTAF
YKRnnPTUmlOOV0km7KPkgG+J6QNtNwnwNb16SXv1GZo5nXcHJ/TwWHzs8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKwAJ7Nkj/wzMjPC/ilCDsJNOY5YMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvckFBbnMyU1BfRE15TThMLUtVSU93azA1amxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBWNgWAwQB
WNhaMA0GCSqGSIb3DQEBCwUAA4IBAQArmUWD5YOV0HMdTMehi9u06ZpW9QzF0aQ6
U9vFVxztlt6IRtu710WgEboUl1kfflJIqeNK/XNv8gY9dIQDJUoqBZk92TH3F5iW
W082UDtErVLWR6+33o01Mxf0uUWcpIknKBL22ljAgNTjrtoX6pzf79cjffR1xlAv
MIUqg9MdyTHSB+M3tjMtCdODaBt24/Dqnre7aK9YjkiI+31f8LkPtbwm1UBXHoOX
l4s71URUwma7PHZUUvUqijmtd+nHpcgk5ezYJIagIFTucv89S784IO2PKWjHpIW9
r/1TYeRwkUbwhY+g2qjAsdOnnKS++Yek2NX7hljb6a57qQ/l4DSD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org