Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/ggJhDVsNiIhkVSzkyTNP3Qjcd_4.roa
File: ggJhDVsNiIhkVSzkyTNP3Qjcd_4.roa (raw, json)
Hash identifier: R1+DXDEp9LAeQ7hel0/Tqo/UCswkKNOKQ3ODg8h9opg=
Subject key identifier: 82:02:61:0D:5B:0D:88:88:64:55:2C:E4:C9:33:4F:DD:08:DC:77:FE
Certificate issuer: /CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Certificate serial: 018805BAD2BC2C20A79C87B49A85A4D0F919
Authority key identifier: 31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/ggJhDVsNiIhkVSzkyTNP3Qjcd_4.roa
Signing time: Wed 10 May 2023 12:55:09 +0000
ROA not before: Wed 10 May 2023 12:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62313
IP address blocks: 185.141.200.0/22 maxlen: 24
185.188.204.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:ba:d2:bc:2c:20:a7:9c:87:b4:9a:85:a4:d0:f9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Validity
Not Before: May 10 12:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8202610d5b0d888864552ce4c9334fdd08dc77fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:08:26:46:38:25:57:ae:ab:df:8c:cf:a7:
90:a4:ef:b9:66:d1:8c:65:f2:e7:bf:ca:7c:f4:1a:
54:54:af:0e:ae:06:c1:10:03:e5:aa:04:9b:67:80:
c1:43:ca:94:07:d6:0c:77:6b:06:f9:45:b4:9c:e1:
9e:83:e4:e3:31:d7:46:b0:25:bb:23:a5:5e:70:de:
ce:b9:7e:39:74:82:f7:0f:0e:04:7c:1b:70:2d:9b:
f4:7f:16:5d:2c:29:91:c7:61:4f:ed:0f:76:76:05:
de:da:35:fd:db:60:b0:c2:24:14:a7:1a:b2:2b:45:
50:28:b4:0c:62:39:98:b5:88:34:dc:e1:d5:56:ea:
e3:be:72:8a:60:1f:1d:0a:3a:c3:f9:31:ca:4e:c4:
80:19:09:5d:32:51:04:09:3b:27:01:f1:6f:68:ec:
3f:2a:61:05:d0:85:90:b0:77:8e:0f:fe:bc:b2:b0:
ba:40:82:4e:43:bf:6f:e2:c7:0d:f5:e6:71:ee:b2:
9a:45:71:5a:d1:87:ed:45:18:4b:72:71:b1:33:0b:
a9:65:00:50:50:d6:59:30:bf:79:e1:39:34:ac:34:
69:df:de:93:33:6a:02:3d:62:2f:41:a4:e6:91:aa:
ca:68:ed:ac:31:a6:2a:6f:e8:92:a8:44:d9:6d:9b:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:02:61:0D:5B:0D:88:88:64:55:2C:E4:C9:33:4F:DD:08:DC:77:FE
X509v3 Authority Key Identifier:
keyid:31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/ggJhDVsNiIhkVSzkyTNP3Qjcd_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.200.0/22
185.188.204.0/22
Signature Algorithm: sha256WithRSAEncryption
90:17:79:06:8a:3e:51:f1:3b:bb:d4:76:76:5a:c5:b9:1c:be:
df:6f:2a:42:7c:63:6f:c7:06:63:55:29:09:f2:41:c9:f0:ef:
b7:ed:65:d4:2b:08:27:15:a1:6a:45:41:8e:92:62:0c:d0:d5:
8b:2b:51:dc:60:a9:ea:d1:c6:1b:9b:f6:5d:78:e2:fb:b6:9a:
33:14:52:5a:3c:ca:0b:c6:45:52:bc:4e:b3:48:54:2e:75:e6:
19:4c:2b:60:fd:e3:21:3a:78:ee:48:b1:2b:2a:13:6f:a2:e4:
c7:3c:2f:88:19:c2:ba:93:72:37:5b:1f:d0:e2:7c:57:73:01:
c9:8b:c7:6a:8a:96:5a:50:b5:87:8b:a8:23:9b:c7:ab:ab:51:
cf:98:f0:b8:5c:79:3b:0b:34:bf:b1:0a:55:9a:2c:e3:c1:2a:
d3:c4:f7:62:e4:b0:da:e3:b9:0e:87:3f:02:15:66:02:34:af:
07:7c:84:74:4f:f5:0d:09:13:b5:35:9c:ce:40:a3:2f:4c:6e:
2a:3a:3f:79:b9:63:44:28:92:8d:4d:e8:40:95:af:c0:f4:88:
0c:d4:bc:0b:35:56:52:f9:c2:e2:d9:d5:d8:20:6c:ba:93:c5:
fd:f5:bf:75:c2:ae:ea:63:70:74:f6:04:e9:b6:04:31:6a:3c:
27:17:59:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYgFutK8LCCnnIe0moWk0PkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODhmYWUzZWJiYjNkNzRmZWVkZGNmNTA3ZjgzZTY3ZGI4
ODUwYTIwHhcNMjMwNTEwMTI1NTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjAyNjEwZDViMGQ4ODg4NjQ1NTJjZTRjOTMzNGZkZDA4ZGM3N2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjMIJkY4JVeuq9+Mz6eQpO+5ZtGM
ZfLnv8p89BpUVK8OrgbBEAPlqgSbZ4DBQ8qUB9YMd2sG+UW0nOGeg+TjMddGsCW7
I6VecN7OuX45dIL3Dw4EfBtwLZv0fxZdLCmRx2FP7Q92dgXe2jX922CwwiQUpxqy
K0VQKLQMYjmYtYg03OHVVurjvnKKYB8dCjrD+THKTsSAGQldMlEECTsnAfFvaOw/
KmEF0IWQsHeOD/68srC6QIJOQ79v4scN9eZx7rKaRXFa0YftRRhLcnGxMwupZQBQ
UNZZML954Tk0rDRp396TM2oCPWIvQaTmkarKaO2sMaYqb+iSqETZbZvGSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIICYQ1bDYiIZFUs5MkzT90I3Hf+MB8GA1UdIwQY
MBaAFDGI+uPruz10/u3c9Qf4PmfbiFCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlqNjQtdTdQWFQtN2R6MUJfZy1aOXVJVUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lYTI5ZjItYzM0MC00ZDYxLWI1YmIt
Yjg1M2RmZjg3NjVjLzEvZ2dKaERWc05pSWhrVlN6a3lUTlAzUWpjZF80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9lYTI5ZjItYzM0MC00ZDYxLWI1YmItYjg1M2RmZjg3NjVj
LzEvTVlqNjQtdTdQWFQtN2R6MUJfZy1aOXVJVUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuY3IAwQC
ubzMMA0GCSqGSIb3DQEBCwUAA4IBAQCQF3kGij5R8Tu71HZ2WsW5HL7fbypCfGNv
xwZjVSkJ8kHJ8O+37WXUKwgnFaFqRUGOkmIM0NWLK1HcYKnq0cYbm/ZdeOL7tpoz
FFJaPMoLxkVSvE6zSFQudeYZTCtg/eMhOnjuSLErKhNvouTHPC+IGcK6k3I3Wx/Q
4nxXcwHJi8dqipZaULWHi6gjm8erq1HPmPC4XHk7CzS/sQpVmizjwSrTxPdi5LDa
47kOhz8CFWYCNK8HfIR0T/UNCRO1NZzOQKMvTG4qOj95uWNEKJKNTehAla/A9IgM
1LwLNVZS+cLi2dXYIGy6k8X99b91wq7qY3B09gTptgQxajwnF1n2
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:40 2024 by rpki-client on console-ams.rpki-client.org