Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/4j9yICTe7IOLc3ZRz_I1MzXjPkk.roa
File: 4j9yICTe7IOLc3ZRz_I1MzXjPkk.roa (raw, json)
Hash identifier: CgEcp9vDBsH3wtOLJyAj+XBwHxb22A/wt+e1Xtu9svA=
Subject key identifier: E2:3F:72:20:24:DE:EC:83:8B:73:76:51:CF:F2:35:33:35:E3:3E:49
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018CC2DB56EA7811D84913476EB9695FE3E1
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/4j9yICTe7IOLc3ZRz_I1MzXjPkk.roa
Signing time: Mon 01 Jan 2024 02:30:03 +0000
ROA not before: Mon 01 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31108
IP address blocks: 88.221.82.0/24 maxlen: 24
2a02:26f0:1c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 06 Mar 2024 15:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:56:ea:78:11:d8:49:13:47:6e:b9:69:5f:e3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e23f722024deec838b737651cff2353335e33e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:41:0d:05:77:97:49:ff:b8:9d:e5:b1:7a:
74:3c:07:90:06:96:ae:19:02:27:52:d1:2b:dc:e3:
0c:49:a3:ac:1e:2b:30:1a:46:37:32:89:3b:c2:4e:
ec:c8:0c:1c:4d:27:eb:97:2b:54:55:f3:51:95:99:
d3:35:8d:98:be:19:e9:c8:f3:2b:5e:f8:ec:4b:4e:
05:f6:52:9a:fe:68:d8:c1:7b:d5:11:e3:a3:ca:7b:
72:c9:0e:6a:6b:a8:48:7e:58:7b:81:3e:d7:28:cc:
b6:d8:77:1b:4f:c7:42:36:00:cd:30:33:f2:f5:b5:
19:a7:22:1b:5e:37:10:09:6a:30:6b:45:f7:f2:8e:
35:3a:b3:49:81:7e:8c:9f:b1:b5:57:fe:08:af:af:
b8:96:65:5b:5e:1b:19:51:86:eb:9d:57:ce:70:84:
16:c7:40:bd:d6:e2:a2:10:f7:a5:d2:66:87:44:3d:
91:d7:ea:8e:4f:96:49:7e:c0:2e:cc:e9:10:56:a9:
9b:65:a0:1e:90:86:3a:76:35:fa:eb:cf:5d:db:b7:
2c:76:98:d3:b4:24:3a:f0:0a:7f:21:ce:d4:5e:fa:
2e:83:78:29:25:fd:fc:84:ce:6f:87:f8:79:a3:b1:
17:98:b7:2b:62:c3:f0:86:d2:67:b5:8f:47:08:e8:
71:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3F:72:20:24:DE:EC:83:8B:73:76:51:CF:F2:35:33:35:E3:3E:49
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/4j9yICTe7IOLc3ZRz_I1MzXjPkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.221.82.0/24
IPv6:
2a02:26f0:1c::/48
Signature Algorithm: sha256WithRSAEncryption
96:60:d8:e4:57:c0:31:87:24:90:68:3f:61:61:86:c3:dc:f6:
c4:6e:b5:bd:c4:39:92:e9:10:94:74:8a:14:cd:71:65:54:9a:
cb:22:a8:b8:b5:da:a6:be:6e:2b:fc:cc:a3:c8:94:cc:18:37:
e0:9c:8d:d6:76:f1:a7:7e:05:8d:5c:41:4d:2e:64:39:41:c3:
f3:11:f3:d2:36:11:c6:bb:56:56:8a:84:71:4e:ab:3a:29:3d:
b4:e3:04:31:9e:40:bd:41:7c:1e:20:76:e0:87:c5:86:f5:01:
b8:03:81:9b:82:2e:67:3a:81:dc:a9:bd:da:c8:8c:b1:d3:68:
e0:47:01:50:07:82:dc:88:77:af:dd:6d:80:fe:ec:72:39:d3:
ed:80:ec:8a:75:c7:76:55:b1:04:5e:ad:a3:21:a1:df:49:73:
08:90:5e:6f:d5:a2:59:2b:09:54:32:05:6c:ab:e9:bf:48:b4:
9e:b2:2f:af:54:14:26:34:ae:e3:c2:19:0c:70:38:36:1e:3b:
3f:42:85:c7:7f:ee:3c:81:a7:99:98:5f:ec:63:97:72:73:54:
e7:c8:03:2f:29:3d:1e:a0:8c:55:fc:a1:27:e3:da:43:ee:b0:
78:e0:39:e3:56:3d:94:f7:55:44:f4:79:51:2d:7a:7e:7a:ff:
c8:d2:e2:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzC21bqeBHYSRNHbrlpX+PhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjQwMTAxMDIzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjNmNzIyMDI0ZGVlYzgzOGI3Mzc2NTFjZmYyMzUzMzM1ZTMzZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM9BDQV3l0n/uJ3lsXp0PAeQBpau
GQInUtEr3OMMSaOsHiswGkY3Mok7wk7syAwcTSfrlytUVfNRlZnTNY2YvhnpyPMr
XvjsS04F9lKa/mjYwXvVEeOjyntyyQ5qa6hIflh7gT7XKMy22HcbT8dCNgDNMDPy
9bUZpyIbXjcQCWowa0X38o41OrNJgX6Mn7G1V/4Ir6+4lmVbXhsZUYbrnVfOcIQW
x0C91uKiEPel0maHRD2R1+qOT5ZJfsAuzOkQVqmbZaAekIY6djX6689d27csdpjT
tCQ68Ap/Ic7UXvoug3gpJf38hM5vh/h5o7EXmLcrYsPwhtJntY9HCOhx4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOI/ciAk3uyDi3N2Uc/yNTM14z5JMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvNGo5eUlDVGU3SU9MYzNaUnpfSTFNelhqUGtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWN1SMA8E
AgACMAkDBwAqAibwABwwDQYJKoZIhvcNAQELBQADggEBAJZg2ORXwDGHJJBoP2Fh
hsPc9sRutb3EOZLpEJR0ihTNcWVUmssiqLi12qa+biv8zKPIlMwYN+CcjdZ28ad+
BY1cQU0uZDlBw/MR89I2Eca7VlaKhHFOqzopPbTjBDGeQL1BfB4gduCHxYb1AbgD
gZuCLmc6gdypvdrIjLHTaOBHAVAHgtyId6/dbYD+7HI50+2A7Ip1x3ZVsQReraMh
od9JcwiQXm/VolkrCVQyBWyr6b9ItJ6yL69UFCY0ruPCGQxwODYeOz9Chcd/7jyB
p5mYX+xjl3JzVOfIAy8pPR6gjFX8oSfj2kPusHjgOeNWPZT3VUT0eVEten56/8jS
4gI=
-----END CERTIFICATE-----
Generated at Wed Mar 6 19:11:47 2024 by rpki-client on console-ams.rpki-client.org