Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/f3eb66-d7d7-411a-ad0b-e538e29fb1c0/1/IOftuY2Kvec9RAJazXgwFYJoBYs.roa
File: IOftuY2Kvec9RAJazXgwFYJoBYs.roa (raw, json)
Hash identifier: GxrfwyzpY/0TLb/IZlqMGVFUuWmycYZBcIsQ8c1YJDE=
Subject key identifier: 20:E7:ED:B9:8D:8A:BD:E7:3D:44:02:5A:CD:78:30:15:82:68:05:8B
Certificate issuer: /CN=98db3dcf25d2c22c5b997d157a7cefac4d45f762
Certificate serial: 0186C58CF3F545DEF368341D07CB58B5977D
Authority key identifier: 98:DB:3D:CF:25:D2:C2:2C:5B:99:7D:15:7A:7C:EF:AC:4D:45:F7:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNs9zyXSwixbmX0VenzvrE1F92I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/f3eb66-d7d7-411a-ad0b-e538e29fb1c0/1/IOftuY2Kvec9RAJazXgwFYJoBYs.roa
Signing time: Thu 09 Mar 2023 08:46:34 +0000
ROA not before: Thu 09 Mar 2023 08:46:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209007
IP address blocks: 185.188.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:8c:f3:f5:45:de:f3:68:34:1d:07:cb:58:b5:97:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98db3dcf25d2c22c5b997d157a7cefac4d45f762
Validity
Not Before: Mar 9 08:46:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20e7edb98d8abde73d44025acd7830158268058b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:d0:71:bc:89:63:9a:ae:a5:26:53:4c:f4:
5e:fa:5a:32:0c:e5:e9:3e:a4:3f:d3:cf:3a:30:76:
cf:35:3b:42:3e:b1:de:a4:73:79:4e:8a:b1:06:60:
6a:a5:78:f7:45:30:35:e8:f4:93:6b:01:7d:df:3c:
fd:68:93:6d:ca:cc:c0:23:42:67:02:ca:63:f0:71:
22:bb:c4:6b:dd:71:14:79:55:32:4e:82:63:d6:16:
74:21:4c:16:56:9d:37:1c:3b:e2:bf:38:ab:ae:b9:
c3:8c:fb:ea:f3:1f:09:13:d8:df:87:ee:9a:f9:5b:
6d:25:75:9e:ac:82:35:82:45:aa:72:67:5b:d6:18:
be:bd:84:9b:c0:39:bf:f2:84:f6:10:ff:0e:e0:81:
d0:62:e4:2b:28:97:7d:b8:3e:78:42:56:f7:2c:cd:
c5:c2:33:39:00:3b:74:ba:25:9b:9a:fd:a2:a6:6f:
00:71:dc:51:f7:90:8c:e0:98:34:ba:60:c6:0b:a0:
1f:be:22:07:31:fd:84:8a:e8:18:4f:18:11:96:06:
10:db:d4:0c:c0:b7:30:11:5a:b7:47:a1:80:31:21:
78:5e:b2:42:11:41:8e:3a:15:19:95:d4:d5:2a:37:
4a:2e:eb:28:d5:dc:1a:84:2a:33:f6:b6:2f:c9:16:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E7:ED:B9:8D:8A:BD:E7:3D:44:02:5A:CD:78:30:15:82:68:05:8B
X509v3 Authority Key Identifier:
keyid:98:DB:3D:CF:25:D2:C2:2C:5B:99:7D:15:7A:7C:EF:AC:4D:45:F7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNs9zyXSwixbmX0VenzvrE1F92I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f3eb66-d7d7-411a-ad0b-e538e29fb1c0/1/IOftuY2Kvec9RAJazXgwFYJoBYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f3eb66-d7d7-411a-ad0b-e538e29fb1c0/1/mNs9zyXSwixbmX0VenzvrE1F92I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.29.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:98:c6:71:2f:d8:7b:6b:51:f2:18:73:48:b5:64:40:8f:fc:
21:08:02:fe:02:82:16:6b:b4:8c:fb:95:af:73:05:34:8f:24:
5e:e5:43:a4:30:97:c7:1d:1a:5c:e8:d5:64:4f:ad:1d:12:74:
55:a1:eb:44:71:32:9a:cf:20:b1:39:c9:fb:1f:67:80:66:18:
f8:f1:c4:b9:79:c1:7c:5a:94:66:f3:50:a2:38:46:19:04:55:
4b:bf:66:16:72:df:22:3d:b0:cc:0c:4d:6c:73:1f:d0:16:82:
31:fc:22:e8:66:4c:d4:23:2e:f4:d4:03:3c:5a:e4:56:26:0f:
dc:77:a0:c5:83:a8:7f:64:a4:65:41:54:8d:5b:65:78:84:3d:
5c:54:c8:c5:f7:36:0e:67:31:97:cc:d4:a1:77:8b:26:ef:73:
b9:de:56:10:11:99:76:11:5e:84:cf:06:2b:40:b2:57:4a:b7:
59:1b:c7:ea:b3:f6:d7:af:7c:58:91:8f:ac:95:aa:ac:44:a5:
04:87:b2:1c:fd:cc:bf:a0:1a:0b:8a:c5:95:59:11:61:4d:d3:
b8:b8:8f:76:94:3b:29:81:28:1e:98:ae:d1:34:03:c9:43:fc:
c8:da:63:58:8b:42:9c:6c:6a:53:4e:48:f2:43:e4:ae:64:c8:
dd:bf:6d:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbFjPP1Rd7zaDQdB8tYtZd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZGIzZGNmMjVkMmMyMmM1Yjk5N2QxNTdhN2NlZmFjNGQ0
NWY3NjIwHhcNMjMwMzA5MDg0NjM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGU3ZWRiOThkOGFiZGU3M2Q0NDAyNWFjZDc4MzAxNTgyNjgwNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgvQcbyJY5qupSZTTPRe+loyDOXp
PqQ/0886MHbPNTtCPrHepHN5ToqxBmBqpXj3RTA16PSTawF93zz9aJNtyszAI0Jn
Aspj8HEiu8Rr3XEUeVUyToJj1hZ0IUwWVp03HDvivzirrrnDjPvq8x8JE9jfh+6a
+VttJXWerII1gkWqcmdb1hi+vYSbwDm/8oT2EP8O4IHQYuQrKJd9uD54Qlb3LM3F
wjM5ADt0uiWbmv2ipm8AcdxR95CM4Jg0umDGC6AfviIHMf2EiugYTxgRlgYQ29QM
wLcwEVq3R6GAMSF4XrJCEUGOOhUZldTVKjdKLuso1dwahCoz9rYvyRbnxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCDn7bmNir3nPUQCWs14MBWCaAWLMB8GA1UdIwQY
MBaAFJjbPc8l0sIsW5l9FXp876xNRfdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU5zOXp5WFN3aXhibVgwVmVuenZyRTFGOTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9mM2ViNjYtZDdkNy00MTFhLWFkMGIt
ZTUzOGUyOWZiMWMwLzEvSU9mdHVZMkt2ZWM5UkFKYXpYZ3dGWUpvQllzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9mM2ViNjYtZDdkNy00MTFhLWFkMGItZTUzOGUyOWZiMWMw
LzEvbU5zOXp5WFN3aXhibVgwVmVuenZyRTFGOTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubwdMA0G
CSqGSIb3DQEBCwUAA4IBAQBbmMZxL9h7a1HyGHNItWRAj/whCAL+AoIWa7SM+5Wv
cwU0jyRe5UOkMJfHHRpc6NVkT60dEnRVoetEcTKazyCxOcn7H2eAZhj48cS5ecF8
WpRm81CiOEYZBFVLv2YWct8iPbDMDE1scx/QFoIx/CLoZkzUIy701AM8WuRWJg/c
d6DFg6h/ZKRlQVSNW2V4hD1cVMjF9zYOZzGXzNShd4sm73O53lYQEZl2EV6EzwYr
QLJXSrdZG8fqs/bXr3xYkY+slaqsRKUEh7Ic/cy/oBoLisWVWRFhTdO4uI92lDsp
gSgemK7RNAPJQ/zI2mNYi0KcbGpTTkjyQ+SuZMjdv21N
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:27 2024 by rpki-client on console-fra.rpki-client.org