Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/syRz1z3_qY8Do30rv93T3MPRfzI.roa
File: syRz1z3_qY8Do30rv93T3MPRfzI.roa (raw, json)
Hash identifier: +wGs1f9KVWXGXiqxPe6XCZ6deSJtuJMlF+qM8tB1Czo=
Subject key identifier: B3:24:73:D7:3D:FF:A9:8F:03:A3:7D:2B:BF:DD:D3:DC:C3:D1:7F:32
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01867A7BC6621D77407D39464262F7378359
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/syRz1z3_qY8Do30rv93T3MPRfzI.roa
Signing time: Wed 22 Feb 2023 18:56:17 +0000
ROA not before: Wed 22 Feb 2023 18:56:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 88.216.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Mar 2023 20:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:7b:c6:62:1d:77:40:7d:39:46:42:62:f7:37:83:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 22 18:56:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b32473d73dffa98f03a37d2bbfddd3dcc3d17f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:fe:fa:17:c6:8e:36:c5:c4:87:c7:e7:84:
b4:08:21:0d:91:59:16:1f:36:bd:62:4d:7a:84:1f:
01:6b:6a:80:47:f2:73:01:11:79:5e:48:d9:3b:21:
c3:20:51:be:cb:3b:f2:d5:14:a1:ad:87:d6:a2:f1:
89:8b:3d:8f:7c:b4:2d:cd:29:82:93:59:4a:a3:2b:
1d:a3:c6:6e:b1:68:4e:f8:0e:ba:d0:1c:ec:fb:6a:
93:e7:83:f9:ea:dc:5b:de:ab:69:ea:9e:3c:73:49:
70:0a:a5:58:77:05:bf:0a:11:5b:4a:8a:9d:cf:8e:
c9:e8:5b:e1:f1:13:25:2b:58:7a:2c:2d:0d:94:d3:
11:8b:4b:fe:d3:2c:de:c6:33:20:03:1a:a7:b4:05:
82:9b:1b:83:c4:1f:b7:f5:73:57:0d:ca:a7:09:d1:
02:43:df:42:2c:cf:1f:5c:64:6f:9c:ea:2c:ea:8d:
20:ff:f6:33:de:76:71:af:6b:6d:8e:25:53:ce:3a:
04:0f:39:1a:3d:c7:78:43:06:b3:bb:de:bb:f2:0e:
f4:d7:8a:4b:e7:cc:e6:a2:86:e8:9c:2a:a6:d5:88:
df:13:ce:6c:cd:78:11:bc:92:0d:cc:0a:6c:b6:eb:
39:b7:4f:03:51:2c:16:8f:09:b4:0c:66:b9:cc:52:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:73:D7:3D:FF:A9:8F:03:A3:7D:2B:BF:DD:D3:DC:C3:D1:7F:32
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/syRz1z3_qY8Do30rv93T3MPRfzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.46.0/24
Signature Algorithm: sha256WithRSAEncryption
12:0c:48:1b:0f:c0:dc:8d:96:de:13:58:b3:e1:24:f6:0c:fa:
47:4c:b7:ce:ab:97:a0:4f:ff:ad:ec:ff:c7:5b:1b:8a:e8:7c:
27:e8:0c:21:95:e9:fe:49:52:b9:49:77:3b:2a:9e:22:00:b0:
01:f6:35:05:a9:b9:96:27:d9:a5:e4:0d:b9:1f:ec:6b:9e:cd:
af:ec:ac:8c:82:62:c4:46:a9:41:66:d4:c1:da:a6:29:5a:3e:
bd:10:a9:16:84:91:e7:ce:05:6e:d4:1d:51:d3:15:a5:18:e3:
87:a2:84:d2:ba:7e:b2:dd:bb:5e:b9:f6:6f:2a:ff:cb:c0:59:
f8:9e:a9:6d:ee:8c:ed:2d:e8:b2:4f:e8:31:9c:67:dd:d1:c6:
60:44:71:ec:b5:f1:d5:b6:46:d3:46:8f:7f:25:4d:79:df:91:
38:42:18:d9:91:64:c5:5a:e9:d2:52:7f:ca:83:94:46:3a:be:
fc:c3:07:ce:9f:49:01:19:03:a7:8b:40:61:6a:59:e3:03:58:
94:53:62:13:de:34:6e:08:ee:40:c2:69:41:41:d1:ea:c2:b9:
38:f9:d1:13:23:58:c4:e7:bb:e6:50:07:f6:1d:5d:a1:2b:8b:
da:65:b5:24:7e:f0:e6:e7:56:8e:bb:39:ef:06:5e:8a:1b:f8:
0c:29:e9:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ6e8ZiHXdAfTlGQmL3N4NZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMjIyMTg1NjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzI0NzNkNzNkZmZhOThmMDNhMzdkMmJiZmRkZDNkY2MzZDE3ZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vH++hfGjjbFxIfH54S0CCENkVkW
Hza9Yk16hB8Ba2qAR/JzARF5XkjZOyHDIFG+yzvy1RShrYfWovGJiz2PfLQtzSmC
k1lKoysdo8ZusWhO+A660Bzs+2qT54P56txb3qtp6p48c0lwCqVYdwW/ChFbSoqd
z47J6Fvh8RMlK1h6LC0NlNMRi0v+0yzexjMgAxqntAWCmxuDxB+39XNXDcqnCdEC
Q99CLM8fXGRvnOos6o0g//Yz3nZxr2ttjiVTzjoEDzkaPcd4Qwazu9678g7014pL
58zmoobonCqm1YjfE85szXgRvJINzApstus5t08DUSwWjwm0DGa5zFK+8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLMkc9c9/6mPA6N9K7/d09zD0X8yMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvc3lSejF6M19xWThEbzMwcnY5M1QzTVBSZnpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNguMA0G
CSqGSIb3DQEBCwUAA4IBAQASDEgbD8DcjZbeE1iz4ST2DPpHTLfOq5egT/+t7P/H
WxuK6Hwn6Awhlen+SVK5SXc7Kp4iALAB9jUFqbmWJ9ml5A25H+xrns2v7KyMgmLE
RqlBZtTB2qYpWj69EKkWhJHnzgVu1B1R0xWlGOOHooTSun6y3bteufZvKv/LwFn4
nqlt7oztLeiyT+gxnGfd0cZgRHHstfHVtkbTRo9/JU1535E4QhjZkWTFWunSUn/K
g5RGOr78wwfOn0kBGQOni0BhalnjA1iUU2IT3jRuCO5AwmlBQdHqwrk4+dETI1jE
57vmUAf2HV2hK4vaZbUkfvDm51aOuznvBl6KG/gMKel6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org