Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/yG8E-i_JRq1PsSFo5U1ySZ5xMYo.roa
File: yG8E-i_JRq1PsSFo5U1ySZ5xMYo.roa (raw, json)
Hash identifier: obRX7yg4FPAG9d228zW3zd1tu6zYl7W48gxVQjExi0c=
Subject key identifier: C8:6F:04:FA:2F:C9:46:AD:4F:B1:21:68:E5:4D:72:49:9E:71:31:8A
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 018CC49227930A25CCA69AA6E660E06E02E6
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/yG8E-i_JRq1PsSFo5U1ySZ5xMYo.roa
Signing time: Mon 01 Jan 2024 10:29:21 +0000
ROA not before: Mon 01 Jan 2024 10:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49260
IP address blocks: 188.93.192.0/22 maxlen: 22
188.93.192.0/21 maxlen: 21
188.93.196.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 15 Mar 2024 12:44:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:27:93:0a:25:cc:a6:9a:a6:e6:60:e0:6e:02:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Jan 1 10:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c86f04fa2fc946ad4fb12168e54d72499e71318a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:21:41:c4:85:da:b1:60:ed:10:71:7d:1e:
2d:9c:9c:7c:f9:f7:51:a5:21:f6:76:ed:5b:6f:7f:
57:72:f6:c9:ce:da:51:30:4b:79:4f:8e:c1:38:b3:
e0:76:86:b6:cd:a4:86:a0:ae:81:19:8b:87:08:e2:
ed:21:f7:ee:8e:58:f9:fc:20:38:f8:d0:c5:5f:e6:
79:7e:8c:67:5f:d0:5e:34:34:7e:e8:5b:77:02:d6:
65:34:26:82:76:a1:95:5a:81:07:ad:14:f0:24:bc:
d4:3d:a5:3d:c4:a0:52:21:df:19:22:0b:1f:7c:86:
cf:1c:7d:ee:cc:6f:ee:ac:99:80:77:a0:ab:ce:43:
bc:3c:3f:7b:66:e1:40:cc:56:c7:5a:eb:75:01:c9:
ef:51:9a:d5:07:04:a3:90:61:7e:05:dc:60:c0:d1:
0a:de:b2:ba:f3:4d:f3:f7:1a:2a:3c:48:d0:b3:f7:
0a:94:5f:a4:37:21:f7:e8:1f:71:2a:01:7f:45:82:
d1:54:ed:83:01:90:64:4f:2f:65:57:99:0f:7a:f8:
20:9b:70:6a:66:da:ff:5f:ca:64:a2:28:7f:51:85:
f5:af:7f:d7:22:54:1f:2b:b1:7d:57:ec:1f:8c:ce:
72:25:6b:30:8c:64:1c:ae:ff:f6:e2:f3:7c:6b:6d:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6F:04:FA:2F:C9:46:AD:4F:B1:21:68:E5:4D:72:49:9E:71:31:8A
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/yG8E-i_JRq1PsSFo5U1ySZ5xMYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.192.0/21
Signature Algorithm: sha256WithRSAEncryption
65:c5:03:e4:d4:7f:5a:3c:e9:a8:84:1f:0a:fb:97:d2:fa:bb:
0b:58:78:2c:73:9a:b7:51:5d:ca:9a:8b:72:14:fa:39:e4:67:
58:e5:26:e5:5d:11:06:13:a8:5a:64:2c:99:7d:f0:d8:b5:c2:
e0:30:bc:bc:5b:3d:b5:d7:04:64:e2:40:68:d7:78:31:29:c0:
13:e1:a5:b5:2f:1c:78:9c:81:14:c3:f1:0d:c2:c9:ca:36:66:
8d:cf:c7:4e:44:e7:5e:27:22:e7:0f:14:7c:69:8a:39:18:25:
53:9e:09:01:2d:f3:a6:55:08:ab:12:52:ea:f3:16:1a:3a:e5:
9e:0b:67:5b:d5:39:9b:a5:5c:4f:96:b2:80:2a:eb:fb:e6:6c:
bb:85:ec:f0:c7:08:18:7e:10:fe:17:c0:7e:73:ca:b3:53:83:
f9:04:46:f0:a8:78:71:df:7f:96:55:49:f0:ce:74:90:92:7b:
eb:4e:69:41:13:a6:b9:3b:27:6a:b6:fe:70:11:fd:c2:a7:56:
8c:7f:ac:75:4e:c1:81:04:42:f6:49:36:5c:63:07:38:87:2f:
ee:57:1d:d2:af:cf:52:ae:0a:ca:99:64:7a:4b:88:c7:8a:99:
64:e2:48:7f:1f:c4:21:08:60:80:5b:42:58:9c:f7:1c:63:5b:
82:78:43:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkieTCiXMppqm5mDgbgLmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi
NjMwYmYwHhcNMjQwMTAxMTAyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODZmMDRmYTJmYzk0NmFkNGZiMTIxNjhlNTRkNzI0OTllNzEzMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM4hQcSF2rFg7RBxfR4tnJx8+fdR
pSH2du1bb39XcvbJztpRMEt5T47BOLPgdoa2zaSGoK6BGYuHCOLtIffujlj5/CA4
+NDFX+Z5foxnX9BeNDR+6Ft3AtZlNCaCdqGVWoEHrRTwJLzUPaU9xKBSId8ZIgsf
fIbPHH3uzG/urJmAd6CrzkO8PD97ZuFAzFbHWut1AcnvUZrVBwSjkGF+BdxgwNEK
3rK6803z9xoqPEjQs/cKlF+kNyH36B9xKgF/RYLRVO2DAZBkTy9lV5kPevggm3Bq
Ztr/X8pkoih/UYX1r3/XIlQfK7F9V+wfjM5yJWswjGQcrv/24vN8a22SOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhvBPovyUatT7EhaOVNckmecTGKMB8GA1UdIwQY
MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt
MTQ3MGFjMzY0ZGQyLzEveUc4RS1pX0pScTFQc1NGbzVVMXlTWjV4TVlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy
LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvF3AMA0G
CSqGSIb3DQEBCwUAA4IBAQBlxQPk1H9aPOmohB8K+5fS+rsLWHgsc5q3UV3Kmoty
FPo55GdY5SblXREGE6haZCyZffDYtcLgMLy8Wz211wRk4kBo13gxKcAT4aW1Lxx4
nIEUw/ENwsnKNmaNz8dOROdeJyLnDxR8aYo5GCVTngkBLfOmVQirElLq8xYaOuWe
C2db1TmbpVxPlrKAKuv75my7hezwxwgYfhD+F8B+c8qzU4P5BEbwqHhx33+WVUnw
znSQknvrTmlBE6a5Oydqtv5wEf3Cp1aMf6x1TsGBBEL2STZcYwc4hy/uVx3Sr89S
rgrKmWR6S4jHiplk4kh/H8QhCGCAW0JYnPccY1uCeENW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:29 2024 by rpki-client on console-fra.rpki-client.org