Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1Lc-tccZlkveNtI3g-W3UTl0WXg.roa
File: 1Lc-tccZlkveNtI3g-W3UTl0WXg.roa (raw, json)
Hash identifier: oa1I/TlYNO68j9yRVAc7Xsd42y18wfPjAxvJNMOWz9s=
Subject key identifier: D4:B7:3E:B5:C7:19:96:4B:DE:36:D2:37:83:E5:B7:51:39:74:59:78
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018AF32179473FC9444CC2E068943E99D15F
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1Lc-tccZlkveNtI3g-W3UTl0WXg.roa
Signing time: Tue 03 Oct 2023 01:22:51 +0000
ROA not before: Tue 03 Oct 2023 01:22:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.209.128.0/22 maxlen: 22
188.209.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Oct 2023 04:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f3:21:79:47:3f:c9:44:4c:c2:e0:68:94:3e:99:d1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 3 01:22:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4b73eb5c719964bde36d23783e5b75139745978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ab:66:42:28:2c:aa:84:32:1b:ab:f5:49:f9:
57:d5:7d:35:0d:7e:9b:82:15:9a:dd:d0:fd:85:63:
f8:3f:8d:50:fb:38:08:f3:d1:44:f8:8d:c3:79:80:
d6:61:f4:62:ff:af:cc:2e:8c:ea:c3:33:f7:b1:07:
52:fc:76:ad:2d:80:ed:71:c5:bf:8f:23:38:0c:43:
e9:ae:cf:9d:6b:62:19:a4:15:f4:69:56:a7:7b:d9:
64:04:24:85:4a:a7:c1:3f:8c:dd:1e:e3:51:21:1a:
1e:d3:9e:cb:af:7f:cd:1e:b2:de:03:11:6f:9e:73:
98:62:88:ff:19:44:ba:57:91:51:ea:95:08:f0:b9:
84:d6:67:a5:89:88:bf:03:b3:bd:10:18:0e:3d:e5:
6e:02:f5:58:36:a8:39:50:02:91:b2:38:1d:80:ea:
4b:48:e5:33:72:ba:2e:b7:49:78:cc:2c:54:6b:55:
7f:f7:fe:4f:28:7c:ef:9e:ef:e6:a1:b0:a0:13:8c:
4d:f4:0b:cb:30:d4:d3:30:c1:3d:a8:57:1a:e9:76:
01:36:58:d1:de:ef:f9:ff:9e:07:8c:c3:92:11:77:
a3:2f:8b:66:f7:ba:5a:58:12:ca:80:0b:db:ba:f0:
d4:03:66:8c:61:ac:77:92:8a:7e:bc:ff:f9:01:f9:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B7:3E:B5:C7:19:96:4B:DE:36:D2:37:83:E5:B7:51:39:74:59:78
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1Lc-tccZlkveNtI3g-W3UTl0WXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/22
188.209.140.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:f5:4e:dd:10:3f:61:5f:b6:ec:65:6f:8e:09:e1:12:56:ad:
ef:29:16:3c:5a:09:26:0c:1f:b4:4a:fe:1d:d0:45:c9:ef:e4:
c8:3a:12:48:71:27:3b:c1:61:ab:ca:4b:b4:2e:d5:0b:7b:16:
84:c2:1a:58:80:43:33:4c:2e:88:5f:2a:e2:07:57:47:94:c8:
22:19:90:80:48:ca:de:11:41:34:e2:bd:cf:a2:a2:f6:8d:26:
c8:84:71:90:9a:b0:da:3c:90:43:42:df:f2:26:00:44:ab:c6:
95:95:07:21:58:31:e3:ce:1f:84:c5:cc:f4:94:5d:b0:07:47:
68:3a:e8:a0:d1:4c:41:f8:f1:e8:fd:b9:d7:d1:1d:80:6f:33:
c8:31:84:d8:a9:3a:8b:ed:54:27:c5:c0:57:03:a3:66:23:f4:
75:ba:96:ac:11:3f:e7:d0:59:df:d5:5a:c8:e6:9a:3a:0f:e0:
9d:33:84:ef:36:57:19:f8:58:9a:de:e7:f3:19:c1:65:01:5a:
43:df:fb:4e:5b:35:3f:4a:c4:43:08:0f:69:c8:6c:b5:df:a3:
e9:ed:2c:de:3f:f4:a1:f2:5b:df:ee:05:00:72:ee:f0:7a:2f:
47:7b:18:96:49:dd:28:ae:60:a2:e5:64:6d:8e:f7:b8:95:c7:
f4:dd:8e:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYrzIXlHP8lETMLgaJQ+mdFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjMxMDAzMDEyMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGI3M2ViNWM3MTk5NjRiZGUzNmQyMzc4M2U1Yjc1MTM5NzQ1OTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46tmQigsqoQyG6v1SflX1X01DX6b
ghWa3dD9hWP4P41Q+zgI89FE+I3DeYDWYfRi/6/MLozqwzP3sQdS/HatLYDtccW/
jyM4DEPprs+da2IZpBX0aVane9lkBCSFSqfBP4zdHuNRIRoe057Lr3/NHrLeAxFv
nnOYYoj/GUS6V5FR6pUI8LmE1meliYi/A7O9EBgOPeVuAvVYNqg5UAKRsjgdgOpL
SOUzcrout0l4zCxUa1V/9/5PKHzvnu/mobCgE4xN9AvLMNTTMME9qFca6XYBNljR
3u/5/54HjMOSEXejL4tm97paWBLKgAvbuvDUA2aMYax3kop+vP/5AfnyXwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNS3PrXHGZZL3jbSN4Plt1E5dFl4MB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvMUxjLXRjY1psa3ZlTnRJM2ctVzNVVGwwV1hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCvNGAAwQC
vNGMMA0GCSqGSIb3DQEBCwUAA4IBAQC09U7dED9hX7bsZW+OCeESVq3vKRY8Wgkm
DB+0Sv4d0EXJ7+TIOhJIcSc7wWGryku0LtULexaEwhpYgEMzTC6IXyriB1dHlMgi
GZCASMreEUE04r3PoqL2jSbIhHGQmrDaPJBDQt/yJgBEq8aVlQchWDHjzh+Excz0
lF2wB0doOuig0UxB+PHo/bnX0R2AbzPIMYTYqTqL7VQnxcBXA6NmI/R1upasET/n
0Fnf1VrI5po6D+CdM4TvNlcZ+Fia3ufzGcFlAVpD3/tOWzU/SsRDCA9pyGy136Pp
7SzeP/Sh8lvf7gUAcu7wei9HexiWSd0ormCi5WRtjve4lcf03Y4b
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:54 2024 by rpki-client on console-ams.rpki-client.org