Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/GiQ87jdQdYjlmoQ-bwplGRtj5ak.roa
File: GiQ87jdQdYjlmoQ-bwplGRtj5ak.roa (raw, json)
Hash identifier: 3zh2l2B2MQMvWvjxhaa9I+8MvJDqL1k7T7JNh0n3kq4=
Subject key identifier: 1A:24:3C:EE:37:50:75:88:E5:9A:84:3E:6F:0A:65:19:1B:63:E5:A9
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 018CC2DB2D90FCBCA331F286AF08449B8EAD
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/GiQ87jdQdYjlmoQ-bwplGRtj5ak.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210570
IP address blocks: 176.126.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jan 2024 01:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2d:90:fc:bc:a3:31:f2:86:af:08:44:9b:8e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a243cee37507588e59a843e6f0a65191b63e5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:ff:10:02:ba:64:06:ac:d8:8e:a7:38:e2:
bd:01:75:27:fd:48:5a:a5:13:43:d2:6a:ec:35:f5:
9d:f2:4e:e5:6a:b3:1f:49:ab:0d:b1:49:ee:b8:c4:
c9:bb:13:e0:96:ab:b0:bc:5c:6d:69:67:87:32:f4:
16:5c:7c:64:07:03:cb:17:5c:79:4f:42:8a:2e:c7:
0f:44:99:5a:fd:44:a5:33:01:cf:7f:6c:cc:d3:e1:
05:3d:f5:b9:f5:3a:94:79:8d:ae:d9:22:d9:b3:7f:
60:3b:da:ed:77:8b:b7:3a:b2:40:5d:c5:ca:f4:29:
3d:61:c4:40:43:d5:a1:6b:98:54:28:bf:77:38:35:
93:9c:c5:74:0e:a5:d4:a3:83:f9:f6:ea:dc:48:e9:
d0:7c:cd:fc:56:96:e5:eb:77:89:ce:2b:69:9f:cc:
28:50:97:ce:13:c6:93:4f:84:a2:ed:3c:a0:9f:48:
79:fd:aa:6d:9b:11:7d:b9:9a:81:be:75:3e:3a:ff:
56:e3:59:a3:3f:7b:0e:25:8a:8b:90:e3:31:4d:35:
43:1d:67:2b:0f:6e:13:47:e2:1e:1f:75:fa:f2:f7:
32:ac:aa:4c:6a:ad:b0:44:1b:48:e6:52:31:b9:9f:
9b:49:9c:32:39:0b:d9:c0:e1:9b:c2:f6:39:63:fe:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:24:3C:EE:37:50:75:88:E5:9A:84:3E:6F:0A:65:19:1B:63:E5:A9
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/GiQ87jdQdYjlmoQ-bwplGRtj5ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.127.0/24
Signature Algorithm: sha256WithRSAEncryption
66:50:1a:10:e3:c6:c7:e5:f6:7a:8b:e2:79:e8:11:58:27:61:
72:40:13:dd:c7:d9:7b:2a:b1:56:dd:28:d7:d0:77:f2:c9:01:
77:14:54:59:dd:5c:9b:8b:6e:37:83:62:fc:b4:26:84:72:74:
c2:de:18:0b:dd:0e:2a:50:5f:f2:eb:79:ae:ed:68:c3:fb:03:
f8:c6:3e:86:e5:11:05:25:fd:81:68:63:cf:6d:e6:22:3f:22:
bb:3d:4e:f4:b2:59:d2:db:f3:1a:5c:1f:dc:b2:c5:14:f0:fd:
0c:2f:fc:44:7e:5b:81:8b:d1:d4:ff:f4:b4:b6:22:bc:ff:e6:
d0:05:76:91:a9:e7:1c:1f:36:91:8b:9e:47:c1:b7:93:15:5f:
f5:ae:8d:fa:6d:f7:07:a6:f9:d8:a8:79:c2:4d:06:d9:8c:4f:
20:54:61:20:69:fd:de:56:77:05:88:4e:64:25:c3:c3:92:2e:
93:30:4f:81:21:4b:0d:02:1c:1c:8f:e8:cd:88:39:92:90:c7:
8a:59:f2:c1:1a:c3:03:81:82:64:d9:5b:a3:6f:af:62:09:05:
ee:62:f7:35:8e:28:64:4c:36:cc:48:85:b8:37:ef:fb:f2:f4:
f3:38:7f:8d:38:63:70:c1:ce:49:7f:5b:62:3a:9e:2b:75:d2:
e8:c5:f1:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2y2Q/LyjMfKGrwhEm46tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NWJlNzRkMDlkOWIwNTI1MWRhZDJjOTY5Njc5M2MwNGI0
MGYyNDEwHhcNMjQwMTAxMDIyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTI0M2NlZTM3NTA3NTg4ZTU5YTg0M2U2ZjBhNjUxOTFiNjNlNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoz/EAK6ZAas2I6nOOK9AXUn/Uha
pRND0mrsNfWd8k7larMfSasNsUnuuMTJuxPglquwvFxtaWeHMvQWXHxkBwPLF1x5
T0KKLscPRJla/USlMwHPf2zM0+EFPfW59TqUeY2u2SLZs39gO9rtd4u3OrJAXcXK
9Ck9YcRAQ9Wha5hUKL93ODWTnMV0DqXUo4P59urcSOnQfM38Vpbl63eJzitpn8wo
UJfOE8aTT4Si7Tygn0h5/aptmxF9uZqBvnU+Ov9W41mjP3sOJYqLkOMxTTVDHWcr
D24TR+IeH3X68vcyrKpMaq2wRBtI5lIxuZ+bSZwyOQvZwOGbwvY5Y/5P/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBokPO43UHWI5ZqEPm8KZRkbY+WpMB8GA1UdIwQY
MBaAFIVb500J2bBSUdrSyWlnk8BLQPJBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZ2blRRblpzRkpSMnRMSmFXZVR3RXRBOGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80OGQwOTItYTc2Yy00YzI4LWI4NGIt
MzlhZDgwZjU0MmEwLzEvR2lRODdqZFFkWWpsbW9RLWJ3cGxHUnRqNWFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC80OGQwOTItYTc2Yy00YzI4LWI4NGItMzlhZDgwZjU0MmEw
LzEvaFZ2blRRblpzRkpSMnRMSmFXZVR3RXRBOGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsH5/MA0G
CSqGSIb3DQEBCwUAA4IBAQBmUBoQ48bH5fZ6i+J56BFYJ2FyQBPdx9l7KrFW3SjX
0HfyyQF3FFRZ3Vybi243g2L8tCaEcnTC3hgL3Q4qUF/y63mu7WjD+wP4xj6G5REF
Jf2BaGPPbeYiPyK7PU70slnS2/MaXB/cssUU8P0ML/xEfluBi9HU//S0tiK8/+bQ
BXaRqeccHzaRi55HwbeTFV/1ro36bfcHpvnYqHnCTQbZjE8gVGEgaf3eVncFiE5k
JcPDki6TME+BIUsNAhwcj+jNiDmSkMeKWfLBGsMDgYJk2Vujb69iCQXuYvc1jihk
TDbMSIW4N+/78vTzOH+NOGNwwc5Jf1tiOp4rddLoxfFt
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:39 2024 by rpki-client on console-ams.rpki-client.org