Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/S__sn7O5kAVpI_Jdve62bdVkagY.roa
File: S__sn7O5kAVpI_Jdve62bdVkagY.roa (raw, json)
Hash identifier: vQIdkEbhcWU/MjLYLaV451SGG/wItvyL8W7mvpn3/rQ=
Subject key identifier: 4B:FF:EC:9F:B3:B9:90:05:69:23:F2:5D:BD:EE:B6:6D:D5:64:6A:06
Certificate issuer: /CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Certificate serial: 01857270F386D44D57ABC40D8400CF7AD6AF
Authority key identifier: 47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/S__sn7O5kAVpI_Jdve62bdVkagY.roa
Signing time: Mon 02 Jan 2023 12:24:43 +0000
ROA not before: Mon 02 Jan 2023 12:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203068
IP address blocks: 88.218.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 07:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:70:f3:86:d4:4d:57:ab:c4:0d:84:00:cf:7a:d6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Validity
Not Before: Jan 2 12:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bffec9fb3b990056923f25dbdeeb66dd5646a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:c5:c8:40:68:a9:50:4c:d4:1b:2c:3e:ec:
63:3e:54:8e:f5:f4:8b:8f:50:90:48:85:15:b8:96:
a5:b3:48:27:85:74:0f:6e:31:be:e5:00:8a:ee:4a:
3a:e4:37:47:81:51:d3:cc:00:67:4c:ec:3e:b9:f1:
3d:f0:67:48:ec:b1:38:cc:18:2f:8b:c4:bb:23:1c:
34:5d:4b:b3:1d:97:1e:54:f8:bb:25:44:c4:45:f9:
60:71:56:2a:84:4c:49:dd:76:82:cd:cf:52:8d:de:
90:21:91:1c:a5:94:9e:78:e5:46:ca:87:6d:32:53:
bb:25:c7:f6:d6:8a:4b:9e:eb:5e:4e:1b:2d:90:2f:
df:dc:36:76:6f:6e:ab:21:99:30:0d:a3:29:f2:c8:
e5:bf:98:ba:53:7d:40:73:fa:16:76:1f:f8:0a:63:
53:1e:17:55:a0:cf:a2:be:15:dc:d5:e6:81:4a:64:
43:d1:b5:45:18:e6:ea:cb:fb:0f:e9:b1:ad:7f:90:
15:75:5a:e3:6f:29:34:4c:78:1a:dc:52:79:0c:44:
9a:17:c8:b7:b2:a0:07:28:fe:24:33:5d:8e:55:79:
a5:6f:d3:42:94:a5:1b:5f:e1:4b:de:cf:15:f0:ef:
9e:56:0a:63:25:66:36:11:02:ec:48:83:0e:0b:a1:
99:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FF:EC:9F:B3:B9:90:05:69:23:F2:5D:BD:EE:B6:6D:D5:64:6A:06
X509v3 Authority Key Identifier:
keyid:47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/S__sn7O5kAVpI_Jdve62bdVkagY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.159.0/24
Signature Algorithm: sha256WithRSAEncryption
06:3c:9e:5c:71:67:42:c0:62:36:d6:74:d6:07:db:e1:1a:4d:
d5:22:b0:a2:f8:c4:fa:7a:3f:81:7e:1b:01:bf:da:84:81:b2:
31:c9:45:28:3f:2e:15:2a:40:af:81:30:79:e3:b0:5b:fa:19:
9c:d9:38:85:8d:e7:89:0c:b1:33:2c:86:93:c0:8a:37:d7:81:
4e:51:c5:9c:b4:89:ce:15:72:f0:58:1c:a0:0d:2b:15:b3:32:
2e:2e:ab:c0:e3:f0:d4:20:f6:ec:23:1e:61:6d:d4:07:a4:89:
57:73:d7:2c:4e:bd:e1:b2:c1:26:1e:f2:ce:6e:45:fa:40:24:
ec:84:6e:1c:78:27:27:8d:26:17:82:73:62:cf:47:f8:0f:b4:
0e:63:de:46:18:bd:5f:f8:d0:28:59:c5:73:93:8f:60:df:f5:
b2:8b:2b:17:03:c5:94:12:4d:69:d3:5c:46:dc:41:51:9f:7c:
be:3f:32:bd:31:e5:9f:47:02:35:da:7b:14:dd:b7:7a:f6:ef:
83:f6:b8:a1:42:fc:5f:a4:a6:2f:a7:89:c8:3f:e8:7e:9e:e0:
6a:ea:99:be:20:23:18:31:a7:61:a4:1e:8b:ef:5e:b3:ce:a4:
d6:10:1e:95:ee:80:4c:eb:f8:82:0a:b7:1c:bc:76:c2:79:9d:
12:e9:74:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVycPOG1E1Xq8QNhADPetavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzJkMGZjZTgzZmI2NzM4MmNlYWNlMzc1NmM4YjEzYzBh
OTVjOTgwHhcNMjMwMTAyMTIyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmZmZWM5ZmIzYjk5MDA1NjkyM2YyNWRiZGVlYjY2ZGQ1NjQ2YTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyrFyEBoqVBM1BssPuxjPlSO9fSL
j1CQSIUVuJals0gnhXQPbjG+5QCK7ko65DdHgVHTzABnTOw+ufE98GdI7LE4zBgv
i8S7Ixw0XUuzHZceVPi7JUTERflgcVYqhExJ3XaCzc9Sjd6QIZEcpZSeeOVGyodt
MlO7Jcf21opLnuteThstkC/f3DZ2b26rIZkwDaMp8sjlv5i6U31Ac/oWdh/4CmNT
HhdVoM+ivhXc1eaBSmRD0bVFGObqy/sP6bGtf5AVdVrjbyk0THga3FJ5DESaF8i3
sqAHKP4kM12OVXmlb9NClKUbX+FL3s8V8O+eVgpjJWY2EQLsSIMOC6GZpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEv/7J+zuZAFaSPyXb3utm3VZGoGMB8GA1UdIwQY
MBaAFEcy0PzoP7Zzgs6s43VsixPAqVyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpMUV9PZ190bk9DenF6amRXeUxFOENwWEpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kY2FjZDItZDc4MC00NmY3LWE1YjYt
NzljYzdhMTRiZjlhLzEvU19fc243TzVrQVZwSV9KZHZlNjJiZFZrYWdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9kY2FjZDItZDc4MC00NmY3LWE1YjYtNzljYzdhMTRiZjlh
LzEvUnpMUV9PZ190bk9DenF6amRXeUxFOENwWEpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNqfMA0G
CSqGSIb3DQEBCwUAA4IBAQAGPJ5ccWdCwGI21nTWB9vhGk3VIrCi+MT6ej+BfhsB
v9qEgbIxyUUoPy4VKkCvgTB547Bb+hmc2TiFjeeJDLEzLIaTwIo314FOUcWctInO
FXLwWBygDSsVszIuLqvA4/DUIPbsIx5hbdQHpIlXc9csTr3hssEmHvLObkX6QCTs
hG4ceCcnjSYXgnNiz0f4D7QOY95GGL1f+NAoWcVzk49g3/WyiysXA8WUEk1p01xG
3EFRn3y+PzK9MeWfRwI12nsU3bd69u+D9rihQvxfpKYvp4nIP+h+nuBq6pm+ICMY
MadhpB6L716zzqTWEB6V7oBM6/iCCrccvHbCeZ0S6XQ+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:03 2024 by rpki-client on console-ams.rpki-client.org