Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1-rreDW8QONQnUi3XEQpdJILvGRs.roa
File: 1-rreDW8QONQnUi3XEQpdJILvGRs.roa (raw, json)
Hash identifier: bK6Lw2y5bslSqHm+WdA3nkc0JEIP6UacF4M28et/T14=
Subject key identifier: FA:BA:DE:0D:6F:10:38:D4:27:52:2D:D7:11:0A:5D:24:82:EF:19:1B
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E14708180C4FAD4820FE070065A45DEB4
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1-rreDW8QONQnUi3XEQpdJILvGRs.roa
Signing time: Wed 06 Mar 2024 15:45:01 +0000
ROA not before: Wed 06 Mar 2024 15:45:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31108
IP address blocks: 88.221.82.0/24 maxlen: 24
2a02:26f0:1c::/48 maxlen: 48
2a02:26f0:3d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Mar 2024 15:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:70:81:80:c4:fa:d4:82:0f:e0:70:06:5a:45:de:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 6 15:45:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fabade0d6f1038d427522dd7110a5d2482ef191b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:a5:06:a6:2c:19:67:da:77:87:a5:06:9e:
90:13:52:27:32:73:f0:9d:dd:67:88:e0:07:cc:24:
fe:0b:29:28:7f:5e:f1:29:17:da:98:95:68:fb:a4:
05:52:ce:f5:2a:fb:10:d2:eb:35:7e:7b:a5:98:64:
08:75:aa:00:42:d6:5e:14:d3:74:50:ba:b1:d5:a0:
b8:c8:b1:39:6a:5c:67:6e:b7:4b:31:e2:8c:f8:15:
ad:70:4f:fc:b6:62:0e:b4:80:01:7a:2b:39:1b:69:
65:c0:5e:f9:bf:d9:51:09:1f:b7:1e:d1:60:21:fd:
31:b8:76:17:d1:23:d7:c6:ff:cc:73:b1:5e:b4:0a:
1f:78:0e:4e:a3:f4:41:e6:9e:2c:b9:fa:3b:41:1a:
78:b8:7d:e8:9c:b0:24:b6:19:70:6a:66:ab:d1:c2:
d2:15:a6:a3:c7:22:10:70:38:76:41:e3:18:a0:92:
18:80:60:70:1e:2f:16:d1:e6:16:1c:d3:05:c1:9d:
f2:b0:83:3f:05:7e:54:c1:87:ca:4d:99:bf:2d:a4:
86:3e:74:7e:46:16:cd:60:13:e5:6b:1e:48:d7:c3:
ae:17:f4:9e:c0:44:55:50:a5:dd:20:78:4a:f2:84:
a1:bc:c1:44:6e:7f:b0:1d:6c:af:47:26:53:ad:61:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BA:DE:0D:6F:10:38:D4:27:52:2D:D7:11:0A:5D:24:82:EF:19:1B
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1-rreDW8QONQnUi3XEQpdJILvGRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.221.82.0/24
IPv6:
2a02:26f0:1c::/48
2a02:26f0:3d::/48
Signature Algorithm: sha256WithRSAEncryption
01:48:fb:51:b5:ec:ef:62:4d:99:e9:8b:23:5b:a0:4e:f1:c7:
3b:09:bf:ff:6f:30:9a:34:e1:e7:16:57:16:19:e6:40:99:46:
3d:00:1d:e0:75:ec:a8:65:10:f4:35:c3:ac:d5:a5:b0:20:7a:
ca:2f:58:50:42:5a:9b:d4:92:03:bf:99:56:c6:44:cc:cb:cf:
b6:1e:5b:4a:18:0d:0b:d0:1b:58:ff:5d:1d:53:69:f2:91:46:
27:4d:ea:54:37:fc:43:c1:70:dc:cb:f7:ac:42:7e:88:51:12:
64:80:11:af:93:05:49:7d:b2:9d:9e:04:86:f9:15:4e:f2:79:
1b:8f:ef:7a:27:7d:ef:0b:86:ce:84:ee:68:f7:c9:bf:f3:30:
1e:e9:26:95:29:26:58:ea:02:59:fb:21:8e:c5:29:25:38:88:
b4:b7:31:d9:df:7a:4f:9e:25:5b:5f:3c:8a:52:8e:22:bd:47:
d6:b8:7e:a5:2a:c5:5c:5a:2a:3c:d7:8c:7f:a4:92:ff:42:02:
6e:80:59:32:70:71:b1:e2:81:9a:95:a4:67:1c:6a:54:b1:66:
16:63:72:1c:e8:eb:bf:47:b3:25:80:7f:87:42:35:f8:0f:d6:
8d:af:8a:cc:e4:96:df:77:ee:37:11:c7:d7:e4:1e:b0:1a:58:
a7:6f:64:08
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAY4UcIGAxPrUgg/gcAZaRd60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjQwMzA2MTU0NTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWJhZGUwZDZmMTAzOGQ0Mjc1MjJkZDcxMTBhNWQyNDgyZWYxOTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwmlBqYsGWfad4elBp6QE1InMnPw
nd1niOAHzCT+Cykof17xKRfamJVo+6QFUs71KvsQ0us1fnulmGQIdaoAQtZeFNN0
ULqx1aC4yLE5alxnbrdLMeKM+BWtcE/8tmIOtIABeis5G2llwF75v9lRCR+3HtFg
If0xuHYX0SPXxv/Mc7FetAofeA5Oo/RB5p4sufo7QRp4uH3onLAkthlwamar0cLS
FaajxyIQcDh2QeMYoJIYgGBwHi8W0eYWHNMFwZ3ysIM/BX5UwYfKTZm/LaSGPnR+
RhbNYBPlax5I18OuF/SewERVUKXdIHhK8oShvMFEbn+wHWyvRyZTrWGTlwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFPq63g1vEDjUJ1It1xEKXSSC7xkbMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvMS1ycmVEVzhRT05RblVpM1hFUXBkSklMdkdScy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzAvMDQyMTg4LWRmYjYtNGFkNC05MWE0LTg4ZDFjYWM5ZTRm
MS8xL2ExX0x2cVNKTjZSQ3VyMnpNQ0V5eEx5YjFxby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwDAQCAAEwBgMEAFjdUjAY
BAIAAjASAwcAKgIm8AAcAwcAKgIm8AA9MA0GCSqGSIb3DQEBCwUAA4IBAQABSPtR
tezvYk2Z6YsjW6BO8cc7Cb//bzCaNOHnFlcWGeZAmUY9AB3gdeyoZRD0NcOs1aWw
IHrKL1hQQlqb1JIDv5lWxkTMy8+2HltKGA0L0BtY/10dU2nykUYnTepUN/xDwXDc
y/esQn6IURJkgBGvkwVJfbKdngSG+RVO8nkbj+96J33vC4bOhO5o98m/8zAe6SaV
KSZY6gJZ+yGOxSklOIi0tzHZ33pPniVbXzyKUo4ivUfWuH6lKsVcWio814x/pJL/
QgJugFkycHGx4oGalaRnHGpUsWYWY3Ic6Ou/R7MlgH+HQjX4D9aNr4rM5Jbfd+43
EcfX5B6wGlinb2QI
-----END CERTIFICATE-----
Generated at Wed Mar 20 19:31:58 2024 by rpki-client on console-fra.rpki-client.org