Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tYikVlzfFz5rseeZUFGSOSKu4_4.roa
File: tYikVlzfFz5rseeZUFGSOSKu4_4.roa (raw, json)
Hash identifier: wzKAGqil51vL0zq5z7bW4F+1Q8gjq+3XnIdfY/GgMb8=
Subject key identifier: B5:88:A4:56:5C:DF:17:3E:6B:B1:E7:99:50:51:92:39:22:AE:E3:FE
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185BBEBA8DFF7FBE38E69618B812BC3DF16
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tYikVlzfFz5rseeZUFGSOSKu4_4.roa
Signing time: Mon 16 Jan 2023 18:51:01 +0000
ROA not before: Mon 16 Jan 2023 18:51:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 88.216.189.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
88.216.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:eb:a8:df:f7:fb:e3:8e:69:61:8b:81:2b:c3:df:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 16 18:51:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b588a4565cdf173e6bb1e7995051923922aee3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3a:a3:0c:05:fe:9c:80:17:54:2d:82:67:a8:
2a:27:51:c1:51:46:d2:f2:7f:32:a1:08:a5:31:42:
ef:34:fe:5f:02:3a:4d:b5:96:8c:4d:f0:e9:4e:06:
f6:d2:36:3d:7b:81:4f:69:50:1f:c4:67:86:31:f4:
6e:9d:20:07:d0:07:f8:33:ac:eb:31:dc:05:6f:11:
4d:ac:09:5d:f5:f9:6c:2c:1a:7e:fb:ee:55:b3:74:
7e:64:77:50:c5:a2:50:76:ea:39:01:8a:7c:42:c7:
5c:9f:f9:51:bd:3e:e8:ca:e3:2e:33:6c:5d:d6:c9:
44:e0:0d:2d:55:c1:83:3b:87:b5:98:af:04:c4:9f:
a0:f4:46:46:00:71:49:5c:78:7c:a5:99:aa:2e:d0:
6a:c3:01:eb:1f:05:dd:2f:a5:78:77:11:34:cc:85:
9e:13:a8:b6:13:2a:24:28:a0:29:73:e7:d9:b3:ff:
65:65:90:93:6c:8b:bd:7f:b0:61:1e:6c:cf:9f:9e:
91:1b:a3:b3:0d:f5:47:e9:6a:12:a9:fe:59:dc:d5:
e2:76:6e:55:f7:5a:65:6f:a3:d9:c2:69:9e:02:91:
7f:28:a2:35:ff:e9:56:89:da:75:e6:9a:c1:3a:04:
4c:31:28:42:eb:6c:58:f8:74:13:23:9f:22:9c:b7:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:A4:56:5C:DF:17:3E:6B:B1:E7:99:50:51:92:39:22:AE:E3:FE
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/tYikVlzfFz5rseeZUFGSOSKu4_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.231.0/24
88.216.18.0/24
88.216.189.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d1:60:47:52:0a:c3:81:5c:b2:fa:37:3a:0d:c8:a4:05:cd:
04:ed:cd:4a:16:15:fa:36:5b:f7:77:bb:7a:68:1e:ca:ec:aa:
19:16:31:70:45:a3:ea:91:fc:d7:c4:b2:37:79:f0:ef:69:fb:
40:4f:3c:8c:7d:9a:ef:2b:38:e9:62:a3:58:24:30:2d:2d:5c:
63:bd:a9:f3:ec:8b:38:58:a2:4f:71:1e:c8:b3:8b:99:94:1d:
d5:a3:b1:55:5e:4a:8f:f6:8b:49:f9:7d:7a:53:4c:60:37:e7:
77:7b:3d:b7:97:26:5d:90:d1:e1:86:cd:fa:94:76:37:5f:0d:
07:3b:03:e1:24:74:e7:2d:bd:22:1d:30:a7:24:e1:34:9c:33:
5c:e9:91:8a:a2:81:8d:d7:cf:32:73:ae:e1:fa:44:24:cd:bb:
b4:de:3e:28:89:4b:40:00:68:31:5c:0a:9b:a4:fa:63:4e:26:
e3:54:38:0c:58:4a:2a:6d:13:e7:8a:d9:b5:e9:02:27:1e:b1:
78:0c:2c:d7:52:a5:75:9e:de:59:2f:ab:45:1b:42:fd:e4:30:
6f:e2:64:2f:b9:4a:09:6a:d2:3a:c8:f7:72:94:23:67:ce:bd:
9b:90:98:c6:a7:6f:f0:2f:65:9b:87:45:b4:f4:f1:43:56:64:
c9:2a:e7:9c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYW766jf9/vjjmlhi4Erw98WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTE2MTg1MTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTg4YTQ1NjVjZGYxNzNlNmJiMWU3OTk1MDUxOTIzOTIyYWVlM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zqjDAX+nIAXVC2CZ6gqJ1HBUUbS
8n8yoQilMULvNP5fAjpNtZaMTfDpTgb20jY9e4FPaVAfxGeGMfRunSAH0Af4M6zr
MdwFbxFNrAld9flsLBp+++5Vs3R+ZHdQxaJQduo5AYp8Qsdcn/lRvT7oyuMuM2xd
1slE4A0tVcGDO4e1mK8ExJ+g9EZGAHFJXHh8pZmqLtBqwwHrHwXdL6V4dxE0zIWe
E6i2EyokKKApc+fZs/9lZZCTbIu9f7BhHmzPn56RG6OzDfVH6WoSqf5Z3NXidm5V
91plb6PZwmmeApF/KKI1/+lWidp15prBOgRMMShC62xY+HQTI58inLdkTwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLWIpFZc3xc+a7HnmVBRkjkiruP+MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvdFlpa1ZsemZGejVyc2VlWlVGR1NPU0t1NF80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCDnAwQA
WNgSAwQAWNi9MA0GCSqGSIb3DQEBCwUAA4IBAQBz0WBHUgrDgVyy+jc6DcikBc0E
7c1KFhX6Nlv3d7t6aB7K7KoZFjFwRaPqkfzXxLI3efDvaftATzyMfZrvKzjpYqNY
JDAtLVxjvanz7Is4WKJPcR7Is4uZlB3Vo7FVXkqP9otJ+X16U0xgN+d3ez23lyZd
kNHhhs36lHY3Xw0HOwPhJHTnLb0iHTCnJOE0nDNc6ZGKooGN188yc67h+kQkzbu0
3j4oiUtAAGgxXAqbpPpjTibjVDgMWEoqbRPnitm16QInHrF4DCzXUqV1nt5ZL6tF
G0L95DBv4mQvuUoJatI6yPdylCNnzr2bkJjGp2/wL2Wbh0W09PFDVmTJKuec
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:51 2023 by rpki-client on console-fra.rpki-client.org