Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G5WNvCO4aK7xV-5CJ1hA4BoejzQ.roa
File: G5WNvCO4aK7xV-5CJ1hA4BoejzQ.roa (raw, json)
Hash identifier: FdTeuGci8/SjuEalk3TD5GnnNxFBJWu2PKpiIE6fFb4=
Subject key identifier: 1B:95:8D:BC:23:B8:68:AE:F1:57:EE:42:27:58:40:E0:1A:1E:8F:34
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018D6A45331950550BFC4B975C7811AA9651
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G5WNvCO4aK7xV-5CJ1hA4BoejzQ.roa
Signing time: Fri 02 Feb 2024 14:42:16 +0000
ROA not before: Fri 02 Feb 2024 14:42:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 138.188.174.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 10:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:45:33:19:50:55:0b:fc:4b:97:5c:78:11:aa:96:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Feb 2 14:42:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b958dbc23b868aef157ee42275840e01a1e8f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:9f:e9:54:30:2a:98:d4:43:c6:a5:ca:df:
7e:e4:13:52:c9:91:de:04:41:7d:73:3d:4c:3f:1c:
6e:d6:b8:cb:8e:d6:db:26:87:d9:91:8a:ff:4f:91:
23:b7:72:0d:8c:84:ad:e2:31:e8:00:eb:39:8c:b7:
66:36:0c:33:b4:10:a9:30:85:25:d4:a0:89:39:7d:
c3:0c:4e:78:ee:58:13:d3:cc:8e:49:72:b4:e7:1f:
0f:d0:97:82:b3:02:bc:d3:43:61:c0:fd:ae:9a:59:
e9:24:2f:0e:0f:a9:85:84:23:b9:77:7b:05:e9:ec:
66:08:27:24:d8:72:35:65:86:57:01:70:3c:7e:e0:
59:bd:f7:04:34:d2:fc:22:0d:ae:b0:65:23:58:1e:
5b:0a:f1:32:e9:dd:3b:8e:4e:97:80:a6:27:2f:01:
d1:12:0c:84:c9:56:eb:3e:17:9a:6b:8f:19:7c:54:
0d:18:0c:e7:09:3c:6e:d5:09:9f:98:1e:61:fc:95:
4b:a2:b0:15:bc:05:d4:aa:f0:80:c8:b1:f8:c1:7c:
4e:ec:b2:64:69:8a:cd:06:b6:5d:35:5c:d4:0e:d0:
fb:1c:fe:2a:13:5d:93:e4:4b:83:f0:d8:ad:ad:ac:
a5:e5:1f:e5:8c:99:af:9c:ad:c9:13:27:33:3e:9d:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:95:8D:BC:23:B8:68:AE:F1:57:EE:42:27:58:40:E0:1A:1E:8F:34
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/G5WNvCO4aK7xV-5CJ1hA4BoejzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.188.174.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:2a:2f:f9:0e:a5:de:d4:21:17:d6:28:89:ea:ce:6a:7a:fd:
ed:53:2d:7b:16:66:90:e7:3e:82:75:3a:e7:ac:e9:8f:6b:7d:
0b:ff:01:90:b7:e3:23:57:0c:46:77:4f:d3:5a:ca:9c:a9:ab:
38:c0:a7:e7:f8:86:fa:61:dd:2d:82:c3:6f:3f:7d:61:fe:f6:
c6:79:84:f5:2a:ab:7a:53:7a:02:e6:07:b0:9a:1a:95:08:8f:
92:10:e5:87:38:a8:2d:7e:b2:65:fd:2d:50:4d:2b:17:94:e6:
12:54:73:88:3d:d5:42:c1:83:c2:1b:ba:fd:62:d0:3c:1f:7a:
d5:a6:c8:bd:24:27:89:45:43:b2:c5:0a:0f:15:a3:80:0a:64:
8b:27:b1:69:ae:27:3e:7c:4d:6a:0d:be:90:5e:9c:a9:0a:d1:
bf:19:ec:fc:63:f2:46:d3:7e:06:c1:46:0a:9e:be:39:32:10:
95:66:55:89:03:c7:62:e3:d8:40:52:23:0c:34:ab:0b:ff:27:
a3:e7:81:25:b4:2f:34:fb:e7:7c:21:4e:ac:4a:b3:20:fe:79:
e8:01:68:fa:d5:ca:bb:b4:94:df:c9:7e:9f:c5:dc:96:be:91:
f9:be:c8:0b:42:d2:e8:b7:c3:2b:91:02:35:09:c3:df:e1:c6:
50:3f:ee:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1qRTMZUFUL/EuXXHgRqpZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjQwMjAyMTQ0MjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjk1OGRiYzIzYjg2OGFlZjE1N2VlNDIyNzU4NDBlMDFhMWU4ZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0uf6VQwKpjUQ8alyt9+5BNSyZHe
BEF9cz1MPxxu1rjLjtbbJofZkYr/T5Ejt3INjISt4jHoAOs5jLdmNgwztBCpMIUl
1KCJOX3DDE547lgT08yOSXK05x8P0JeCswK800NhwP2umlnpJC8OD6mFhCO5d3sF
6exmCCck2HI1ZYZXAXA8fuBZvfcENNL8Ig2usGUjWB5bCvEy6d07jk6XgKYnLwHR
EgyEyVbrPheaa48ZfFQNGAznCTxu1QmfmB5h/JVLorAVvAXUqvCAyLH4wXxO7LJk
aYrNBrZdNVzUDtD7HP4qE12T5EuD8Nitrayl5R/ljJmvnK3JEyczPp0s1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBuVjbwjuGiu8VfuQidYQOAaHo80MB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvRzVXTnZDTzRhSzd4Vi01Q0oxaEE0Qm9lanpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiryuMA0G
CSqGSIb3DQEBCwUAA4IBAQB+Ki/5DqXe1CEX1iiJ6s5qev3tUy17FmaQ5z6CdTrn
rOmPa30L/wGQt+MjVwxGd0/TWsqcqas4wKfn+Ib6Yd0tgsNvP31h/vbGeYT1Kqt6
U3oC5gewmhqVCI+SEOWHOKgtfrJl/S1QTSsXlOYSVHOIPdVCwYPCG7r9YtA8H3rV
psi9JCeJRUOyxQoPFaOACmSLJ7Fpric+fE1qDb6QXpypCtG/Gez8Y/JG034GwUYK
nr45MhCVZlWJA8di49hAUiMMNKsL/yej54EltC80++d8IU6sSrMg/nnoAWj61cq7
tJTfyX6fxdyWvpH5vsgLQtLot8MrkQI1CcPf4cZQP+5x
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:00:05 2025 by rpki-client