Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/Vf-ALlxnTgdSpq4PEE8U_zkyML8.roa
File: Vf-ALlxnTgdSpq4PEE8U_zkyML8.roa (raw, json)
Hash identifier: UY37MSmY26JEMMIYtr4K/Ai0ccEnoLAboHsEgjtjcyw=
Subject key identifier: 55:FF:80:2E:5C:67:4E:07:52:A6:AE:0F:10:4F:14:FF:39:32:30:BF
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 018572F11FC51CE27976F8C3B7443D210A2A
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/Vf-ALlxnTgdSpq4PEE8U_zkyML8.roa
Signing time: Mon 02 Jan 2023 14:44:42 +0000
ROA not before: Mon 02 Jan 2023 14:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212345
IP address blocks: 88.218.115.0/24 maxlen: 24
88.218.113.0/24 maxlen: 24
93.179.90.0/23 maxlen: 23
2a0f:52c1:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:1f:c5:1c:e2:79:76:f8:c3:b7:44:3d:21:0a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Jan 2 14:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55ff802e5c674e0752a6ae0f104f14ff393230bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:39:40:97:f3:ec:f3:85:0b:99:c2:fa:de:
1d:03:fa:e8:21:bc:b3:68:07:12:31:d1:a6:b1:6a:
09:2a:50:e9:d2:24:b8:e9:e1:62:16:b9:fe:71:03:
7a:6f:32:b5:8c:f9:45:19:fd:da:0e:87:68:99:cf:
df:dc:26:43:ab:0f:57:9e:65:63:bf:ab:4e:69:73:
c2:39:99:5d:af:c4:f1:f7:46:47:ec:95:4e:17:5e:
be:e7:ca:2d:a8:b9:83:76:57:19:1e:7e:58:52:7e:
6c:c5:ca:95:03:09:2f:e3:1a:ba:6e:63:c9:b7:41:
b4:b6:74:40:bf:c2:d4:97:bf:37:67:b2:69:2e:c6:
3a:d9:3a:d6:82:9a:e4:8a:0d:11:c3:10:39:5c:16:
df:00:73:10:4f:35:ea:21:2a:e2:ba:6e:05:b7:b7:
a2:df:a7:06:2e:1e:d2:30:49:21:1d:21:c4:90:b7:
d0:9e:03:69:ab:1f:f9:b2:82:96:88:0b:fd:48:fb:
ed:3c:86:94:bc:67:a8:b2:ab:b3:06:e8:7b:f2:d4:
5d:81:72:19:5b:20:b7:db:1b:af:9d:77:51:5f:c3:
c9:5f:d3:87:f1:f4:f0:1d:d6:a9:a1:2f:73:dd:0f:
29:b1:59:6e:62:35:be:5e:ad:b9:1e:d7:fa:5a:df:
7b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FF:80:2E:5C:67:4E:07:52:A6:AE:0F:10:4F:14:FF:39:32:30:BF
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/Vf-ALlxnTgdSpq4PEE8U_zkyML8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.113.0/24
88.218.115.0/24
93.179.90.0/23
IPv6:
2a0f:52c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
0d:04:7f:2d:23:95:e7:11:5b:01:9c:51:8e:2d:83:ff:ce:f7:
0f:49:d6:cc:24:59:10:47:4c:70:08:1e:b6:c7:30:1a:70:d6:
52:c6:7d:27:a4:73:2c:fb:55:13:ab:13:1f:19:be:cb:0a:aa:
3a:1c:4f:d9:e0:86:71:06:7d:84:8a:38:28:40:1c:58:b4:f9:
71:79:35:80:54:69:64:e9:c1:5c:38:2f:81:7d:81:82:b1:ee:
87:5a:d1:f8:ea:44:1a:c5:49:7c:18:98:5a:21:95:a1:a7:5d:
57:9b:20:18:b6:7b:17:0b:70:ea:58:aa:68:f8:54:db:fb:e1:
3d:8c:8e:44:0f:81:52:9a:bf:05:25:b1:af:2a:b6:a6:c7:19:
8f:2b:b1:d4:34:05:aa:66:5d:58:e7:b9:f2:5c:77:ed:2a:4f:
68:48:49:ff:e4:ae:31:00:ec:4f:a0:87:43:00:2d:5e:5b:1c:
3e:99:f5:87:5c:7f:2e:f1:6d:cd:6d:ca:7b:0f:01:08:c2:ef:
f8:6a:ab:b3:b2:be:41:f8:02:4e:bc:6d:11:f4:58:8d:a7:56:
3c:f3:94:5f:90:d8:f8:e1:87:0e:02:ad:d5:1f:2f:ab:b2:cd:
7c:1a:1e:e6:b0:65:29:d0:85:35:5a:34:d6:e7:68:71:21:38:
ea:da:22:92
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYVy8R/FHOJ5dvjDt0Q9IQoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2FhYWJiMjNjZDI0NWJmYTgyOGZiMDI1MjFkNjQ0YzZk
NWI1NjYwHhcNMjMwMTAyMTQ0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWZmODAyZTVjNjc0ZTA3NTJhNmFlMGYxMDRmMTRmZjM5MzIzMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtU5QJfz7POFC5nC+t4dA/roIbyz
aAcSMdGmsWoJKlDp0iS46eFiFrn+cQN6bzK1jPlFGf3aDodomc/f3CZDqw9XnmVj
v6tOaXPCOZldr8Tx90ZH7JVOF16+58otqLmDdlcZHn5YUn5sxcqVAwkv4xq6bmPJ
t0G0tnRAv8LUl783Z7JpLsY62TrWgprkig0RwxA5XBbfAHMQTzXqISrium4Ft7ei
36cGLh7SMEkhHSHEkLfQngNpqx/5soKWiAv9SPvtPIaUvGeosquzBuh78tRdgXIZ
WyC32xuvnXdRX8PJX9OH8fTwHdapoS9z3Q8psVluYjW+Xq25Htf6Wt977wIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFFX/gC5cZ04HUqauDxBPFP85MjC/MB8GA1UdIwQY
MBaAFKt6qrsjzSRb+oKPsCUh1kTG1bVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMt
OWVhZDgxZGEyZTQ0LzEvVmYtQUxseG5UZ2RTcHE0UEVFOFVfemt5TUw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMtOWVhZDgxZGEyZTQ0
LzEvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAWNpxAwQA
WNpzAwQBXbNaMA8EAgACMAkDBwAqD1LBAAEwDQYJKoZIhvcNAQELBQADggEBAA0E
fy0jlecRWwGcUY4tg//O9w9J1swkWRBHTHAIHrbHMBpw1lLGfSekcyz7VROrEx8Z
vssKqjocT9nghnEGfYSKOChAHFi0+XF5NYBUaWTpwVw4L4F9gYKx7oda0fjqRBrF
SXwYmFohlaGnXVebIBi2excLcOpYqmj4VNv74T2MjkQPgVKavwUlsa8qtqbHGY8r
sdQ0BapmXVjnufJcd+0qT2hISf/krjEA7E+gh0MALV5bHD6Z9Ydcfy7xbc1tynsP
AQjC7/hqq7OyvkH4Ak68bRH0WI2nVjzzlF+Q2Pjhhw4CrdUfL6uyzXwaHuawZSnQ
hTVaNNbnaHEhOOraIpI=
-----END CERTIFICATE-----
Generated at Tue Oct 24 10:37:11 2023 by rpki-client on console-fra.rpki-client.org