Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/os_jtQf54zCz1SlgBQ5nvkJA604.roa
File: os_jtQf54zCz1SlgBQ5nvkJA604.roa (raw, json)
Hash identifier: pyRcKRyzVQHUFA5cSyeQbT43hv3NGN2fpAU/6+uivKQ=
Subject key identifier: A2:CF:E3:B5:07:F9:E3:30:B3:D5:29:60:05:0E:67:BE:42:40:EB:4E
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018BD81038F496986F86C68B0943826C2D64
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/os_jtQf54zCz1SlgBQ5nvkJA604.roa
Signing time: Thu 16 Nov 2023 12:17:03 +0000
ROA not before: Thu 16 Nov 2023 12:17:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42689
IP address blocks: 188.215.83.0/24 maxlen: 24
188.215.85.0/24 maxlen: 24
188.215.81.0/24 maxlen: 24
188.215.82.0/24 maxlen: 24
188.215.86.0/24 maxlen: 24
188.215.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:10:38:f4:96:98:6f:86:c6:8b:09:43:82:6c:2d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Nov 16 12:17:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2cfe3b507f9e330b3d52960050e67be4240eb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:0c:55:1d:b0:7c:8d:d7:04:05:20:de:41:
aa:8a:d8:dd:b6:b2:3b:65:e3:d8:1a:3a:91:4b:cc:
70:31:fa:68:e2:2e:1d:17:ca:3f:e9:9e:d3:ea:04:
31:c8:2a:28:6e:2e:be:0a:cc:f5:55:b4:49:c8:26:
c9:2a:9a:a1:f6:c1:af:13:cc:27:1c:8b:58:df:96:
3b:82:6b:28:d6:fe:e1:f9:c4:fe:95:4b:86:5c:f9:
12:83:7a:43:42:08:1e:72:92:12:2f:50:26:01:95:
92:df:ca:cd:1d:04:48:47:cb:3e:37:6b:84:ca:37:
c1:55:e3:27:17:ce:aa:53:af:6c:8b:3e:31:4b:52:
d7:7c:55:cc:ae:d9:07:a7:21:12:ae:d9:d1:93:47:
6b:a6:fd:94:1d:84:5e:73:02:5c:c9:93:80:dc:32:
b3:a5:3c:52:f6:e0:9a:15:88:61:9b:eb:bb:ac:3b:
36:62:60:b5:32:6f:96:39:cc:3b:4c:4d:72:fb:86:
be:55:8b:29:08:f6:88:18:dc:ae:70:e1:e0:2a:42:
73:7f:14:6d:35:6f:fe:a7:c7:19:34:ad:b6:2f:e3:
db:10:36:d1:24:cb:fe:67:c9:d9:37:94:b2:aa:96:
66:7f:ca:b9:90:7b:6e:d1:81:a3:97:2e:b3:cf:a5:
9a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CF:E3:B5:07:F9:E3:30:B3:D5:29:60:05:0E:67:BE:42:40:EB:4E
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/os_jtQf54zCz1SlgBQ5nvkJA604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.81.0-188.215.83.255
188.215.85.0-188.215.87.255
Signature Algorithm: sha256WithRSAEncryption
6d:e6:27:24:3b:4b:2e:eb:aa:10:cc:40:40:69:4c:ac:ef:dd:
28:fd:42:11:99:31:06:98:07:9d:a7:b9:c7:ab:be:e9:13:73:
d6:22:fd:cf:09:b2:b1:37:4e:a0:cc:b0:ba:92:57:d3:c5:c8:
0f:1b:b9:2f:fe:4d:f6:8d:df:26:75:a0:d3:1f:3e:8b:e9:62:
10:87:ce:30:c3:e4:68:a3:5c:b6:63:d8:39:4c:45:d4:48:47:
ae:d7:dc:81:a2:f3:d7:c7:30:b2:be:27:94:3f:bd:07:9c:c0:
ee:53:3e:bc:5f:36:3a:3a:e1:db:b4:d4:3d:41:85:c5:a7:b9:
1b:d1:d8:ca:28:b8:09:44:f9:2d:db:5a:dc:f8:8d:2b:a0:94:
90:c4:c1:e8:34:85:32:27:d0:5c:76:a7:85:3e:82:29:09:4b:
df:90:54:92:43:31:e5:42:0c:d7:79:71:af:5d:29:c4:30:3b:
26:55:3d:08:dd:84:11:b2:64:d9:f5:ac:c0:62:b7:6b:60:88:
82:f8:c5:82:f5:4d:81:23:77:28:81:e9:dc:7c:79:14:01:ed:
e8:51:36:be:65:d4:22:1e:64:49:80:a4:9c:ec:2d:23:a2:f0:
38:ff:08:eb:8f:d1:99:17:ec:18:cf:84:27:b4:d0:24:af:d8:
52:0e:48:b6
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYvYEDj0lphvhsaLCUOCbC1kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzhhYTE4NzMwZjRhODNlMjg1MmM1NjkyNTUxYWJiNWIx
ZWU3ZWEwHhcNMjMxMTE2MTIxNzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmNmZTNiNTA3ZjllMzMwYjNkNTI5NjAwNTBlNjdiZTQyNDBlYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH4MVR2wfI3XBAUg3kGqitjdtrI7
ZePYGjqRS8xwMfpo4i4dF8o/6Z7T6gQxyCoobi6+Csz1VbRJyCbJKpqh9sGvE8wn
HItY35Y7gmso1v7h+cT+lUuGXPkSg3pDQggecpISL1AmAZWS38rNHQRIR8s+N2uE
yjfBVeMnF86qU69siz4xS1LXfFXMrtkHpyESrtnRk0drpv2UHYRecwJcyZOA3DKz
pTxS9uCaFYhhm+u7rDs2YmC1Mm+WOcw7TE1y+4a+VYspCPaIGNyucOHgKkJzfxRt
NW/+p8cZNK22L+PbEDbRJMv+Z8nZN5SyqpZmf8q5kHtu0YGjly6zz6WaMwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFKLP47UH+eMws9UpYAUOZ75CQOtOMB8GA1UdIwQY
MBaAFLjIqhhzD0qD4oUsVpJVGrtbHufqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODkt
YTU3NjA0YTNmNmJiLzEvb3NfanRRZjU0ekN6MVNsZ0JRNW52a0pBNjA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODktYTU3NjA0YTNmNmJi
LzEvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAC811ED
BAK811AwDAMEALzXVQMEA7zXUDANBgkqhkiG9w0BAQsFAAOCAQEAbeYnJDtLLuuq
EMxAQGlMrO/dKP1CEZkxBpgHnae5x6u+6RNz1iL9zwmysTdOoMywupJX08XIDxu5
L/5N9o3fJnWg0x8+i+liEIfOMMPkaKNctmPYOUxF1EhHrtfcgaLz18cwsr4nlD+9
B5zA7lM+vF82Ojrh27TUPUGFxae5G9HYyii4CUT5Ldta3PiNK6CUkMTB6DSFMifQ
XHanhT6CKQlL35BUkkMx5UIM13lxr10pxDA7JlU9CN2EEbJk2fWswGK3a2CIgvjF
gvVNgSN3KIHp3Hx5FAHt6FE2vmXUIh5kSYCknOwtI6LwOP8I64/RmRfsGM+EJ7TQ
JK/YUg5Itg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:04 2024 by rpki-client on console-fra.rpki-client.org