Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/2on2IbtT1j7EZ2OI-Bfj-sNAsTE.roa
File: 2on2IbtT1j7EZ2OI-Bfj-sNAsTE.roa (raw, json)
Hash identifier: tTadaUxgnhyE16m0bW3jLJVe1Sae3inRoF3SJVWyCWI=
Subject key identifier: DA:89:F6:21:BB:53:D6:3E:C4:67:63:88:F8:17:E3:FA:C3:40:B1:31
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018CC94CA3A83174FA38980B0B22C2250408
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/2on2IbtT1j7EZ2OI-Bfj-sNAsTE.roa
Signing time: Tue 02 Jan 2024 08:31:32 +0000
ROA not before: Tue 02 Jan 2024 08:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.191.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 17:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a3:a8:31:74:fa:38:98:0b:0b:22:c2:25:04:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 08:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da89f621bb53d63ec4676388f817e3fac340b131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0a:25:99:1e:fb:32:0c:3c:88:30:e7:82:69:
6a:fe:23:cd:72:3e:aa:11:1e:d8:06:2b:42:f1:bd:
e9:ef:f2:d8:7c:9b:ad:68:0f:ca:2b:f7:9a:4b:0e:
3e:1b:1d:bd:49:15:27:e5:af:9d:5d:51:c2:2e:f8:
7d:d1:26:cb:a4:54:a5:95:36:e1:e8:b1:12:fc:7d:
0e:c6:f8:03:87:77:25:8e:b4:0f:42:76:54:6f:96:
25:00:d3:ea:07:e2:14:49:ac:eb:17:d8:0c:30:7e:
89:55:0d:fc:74:f2:56:0f:8c:2c:fd:bd:b6:86:ea:
e1:e3:05:b5:8a:8f:46:b4:0e:47:e3:65:9f:99:71:
b6:2e:99:dc:1a:10:78:15:e9:dc:e4:f5:38:79:2c:
3b:1e:e7:72:a9:ba:8b:a2:8c:c6:c0:6e:48:af:c8:
60:5c:63:ee:08:a0:80:2e:c6:23:15:fd:35:95:e0:
4d:42:17:bd:2d:ad:45:90:89:d2:10:b0:d1:9b:01:
d8:ec:7d:05:6b:5e:f7:29:2b:ab:29:d5:06:79:3a:
ca:b4:9d:41:de:39:a6:d0:d1:7b:df:cb:3c:98:7b:
a5:31:5a:e0:99:ef:29:a1:93:35:23:12:4e:d0:ae:
60:d0:5a:77:5c:87:c0:ec:d6:42:b0:bc:8a:16:ff:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:89:F6:21:BB:53:D6:3E:C4:67:63:88:F8:17:E3:FA:C3:40:B1:31
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/2on2IbtT1j7EZ2OI-Bfj-sNAsTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:72:05:a4:08:89:f5:44:fb:8e:32:a8:d7:ff:ab:f9:c9:76:
a2:b5:5f:3d:8a:4f:50:6e:a1:f4:18:8b:d1:9c:3b:f3:bc:a4:
5a:b5:7c:4f:9e:ec:11:0a:95:11:c8:2b:5e:58:04:c3:fa:a3:
97:09:61:8d:d4:66:a5:1e:fd:f9:aa:bf:e2:b6:39:1c:0c:c4:
bc:46:f6:86:08:dc:14:a8:01:d0:4d:ab:a5:12:27:d2:0c:f4:
1d:82:37:f8:bd:85:f6:18:d4:d8:87:be:fe:5a:4c:34:3b:55:
4c:24:8a:51:51:4f:26:ff:a5:d1:15:9c:d9:41:4c:1f:e8:d6:
2e:32:4c:33:26:49:01:07:33:cb:36:65:20:c9:35:c7:a6:4f:
20:b4:6d:eb:2c:6f:47:2c:46:bf:b5:f7:a6:99:8f:d7:59:2c:
b7:32:e0:20:7d:8d:34:ba:ff:ad:2c:56:2f:6b:ae:9a:01:8c:
49:6d:83:7d:8e:7d:42:05:fd:dd:30:d0:e9:c4:33:ea:1c:d4:
8b:96:95:9b:48:36:29:9a:05:12:0e:78:66:1e:c7:69:80:44:
3e:ba:9b:1a:7d:3b:22:c1:b0:10:a9:a3:86:cb:fd:c2:b2:45:
79:a7:29:fc:3d:79:f3:d4:a2:22:1a:e2:88:e8:42:87:12:5e:
9b:ba:b3:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTKOoMXT6OJgLCyLCJQQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjQwMTAyMDgzMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTg5ZjYyMWJiNTNkNjNlYzQ2NzYzODhmODE3ZTNmYWMzNDBiMTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAolmR77Mgw8iDDngmlq/iPNcj6q
ER7YBitC8b3p7/LYfJutaA/KK/eaSw4+Gx29SRUn5a+dXVHCLvh90SbLpFSllTbh
6LES/H0OxvgDh3cljrQPQnZUb5YlANPqB+IUSazrF9gMMH6JVQ38dPJWD4ws/b22
hurh4wW1io9GtA5H42WfmXG2LpncGhB4Fenc5PU4eSw7HudyqbqLoozGwG5Ir8hg
XGPuCKCALsYjFf01leBNQhe9La1FkInSELDRmwHY7H0Fa173KSurKdUGeTrKtJ1B
3jmm0NF738s8mHulMVrgme8poZM1IxJO0K5g0Fp3XIfA7NZCsLyKFv9rsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNqJ9iG7U9Y+xGdjiPgX4/rDQLExMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvMm9uMklidFQxajdFWjJPSS1CZmotc05Bc1RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9kMA0G
CSqGSIb3DQEBCwUAA4IBAQA6cgWkCIn1RPuOMqjX/6v5yXaitV89ik9QbqH0GIvR
nDvzvKRatXxPnuwRCpURyCteWATD+qOXCWGN1GalHv35qr/itjkcDMS8RvaGCNwU
qAHQTaulEifSDPQdgjf4vYX2GNTYh77+Wkw0O1VMJIpRUU8m/6XRFZzZQUwf6NYu
MkwzJkkBBzPLNmUgyTXHpk8gtG3rLG9HLEa/tfemmY/XWSy3MuAgfY00uv+tLFYv
a66aAYxJbYN9jn1CBf3dMNDpxDPqHNSLlpWbSDYpmgUSDnhmHsdpgEQ+upsafTsi
wbAQqaOGy/3CskV5pyn8PXnz1KIiGuKI6EKHEl6burP+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:48 2024 by rpki-client on console-ams.rpki-client.org