Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/3VgfJg2A6dinPpzSNnuESrIwTMg.roa
File: 3VgfJg2A6dinPpzSNnuESrIwTMg.roa (raw, json)
Hash identifier: /WuqAoTdzuQUKw+e2xVuYBBfdlYaC8ujpb8HOkjXTx4=
Subject key identifier: DD:58:1F:26:0D:80:E9:D8:A7:3E:9C:D2:36:7B:84:4A:B2:30:4C:C8
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018FF6BFACA023E6718264273939E50941A3
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/3VgfJg2A6dinPpzSNnuESrIwTMg.roa
Signing time: Sat 08 Jun 2024 07:28:27 +0000
ROA not before: Sat 08 Jun 2024 07:28:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.132.0/22 maxlen: 24
188.209.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 17:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f6:bf:ac:a0:23:e6:71:82:64:27:39:39:e5:09:41:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 8 07:28:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd581f260d80e9d8a73e9cd2367b844ab2304cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:1b:a0:11:71:f1:e5:ea:f5:a7:fe:f6:a9:
44:29:1a:1a:ae:a7:d9:b5:4b:a6:58:d7:22:65:61:
32:e6:b1:73:8f:3a:e7:08:6f:1d:f9:a9:71:39:ac:
88:11:6f:82:29:ff:5e:46:9c:a3:3a:b1:4e:ec:49:
b5:16:84:66:88:c0:cf:49:c3:d8:65:8c:54:14:a8:
fc:e8:fc:a7:84:e3:f0:ba:63:22:03:7a:3d:02:fc:
8e:07:de:5f:a9:b4:2a:61:53:62:b9:4e:16:b5:0a:
41:bb:16:2d:4b:b9:a1:51:21:01:8b:da:78:ea:fc:
4d:5f:aa:59:19:6b:83:64:ab:52:05:e4:84:78:43:
a2:f6:6a:4a:1b:7f:97:db:53:f2:13:e4:a7:f9:3f:
d5:1b:57:99:26:ad:9e:08:6c:90:e0:84:41:c5:89:
7f:34:62:09:4c:e7:29:06:8e:4b:2d:b3:e2:7e:78:
dd:1e:41:04:80:6e:84:4f:2a:af:0b:23:62:db:4b:
40:4a:f7:7e:24:e8:df:d2:a9:bb:55:f0:ca:1f:28:
c1:ab:9c:3c:4c:6c:a4:50:1a:0f:66:91:d7:96:35:
cf:85:23:53:45:0e:b6:b5:1f:36:de:fd:c9:c8:e6:
14:6f:b3:05:2b:a6:be:21:c5:f4:2e:21:13:34:07:
68:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:58:1F:26:0D:80:E9:D8:A7:3E:9C:D2:36:7B:84:4A:B2:30:4C:C8
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/3VgfJg2A6dinPpzSNnuESrIwTMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0-188.209.136.255
Signature Algorithm: sha256WithRSAEncryption
4b:f8:5c:b8:5a:90:aa:94:5a:f2:54:35:c2:72:4d:2a:eb:eb:
84:f6:f6:95:20:7e:af:01:6e:e7:2a:9f:44:96:99:b1:28:e7:
b2:f9:d6:7a:c8:44:bf:08:a6:47:3f:58:61:1f:79:4b:07:b5:
e8:a8:71:bf:08:de:cb:5b:1e:63:a0:97:aa:c5:78:37:a6:96:
a5:9a:d2:6a:92:77:eb:41:b8:a6:e6:6a:e0:7d:55:49:b0:2f:
17:d9:28:b4:0d:3a:13:bb:c3:35:2f:f1:26:2a:1f:2a:dc:a5:
f3:e3:44:59:e7:5e:09:5e:11:ad:2e:3b:5d:9b:0b:42:35:b9:
eb:06:ee:35:cb:90:3b:59:b4:cc:ee:ee:e4:d7:67:ce:ac:84:
f6:da:ca:fb:da:28:8a:6e:c1:d2:f3:48:19:ff:6f:16:78:12:
23:e9:d5:e2:06:1e:5e:26:e2:98:17:74:9d:15:fb:bd:50:2d:
c1:be:b7:a7:4d:75:a7:af:69:43:63:b7:84:c4:65:97:1c:ba:
66:cf:b9:36:37:ac:19:aa:e6:9a:12:65:13:54:34:50:2f:66:
ea:17:2c:f5:94:1d:84:10:be:b1:db:9c:31:7f:4d:54:b5:94:
8c:df:04:fb:c0:33:0d:0d:e5:2b:b3:05:1c:c3:f0:58:a2:0c:
3d:c7:98:9f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY/2v6ygI+ZxgmQnOTnlCUGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjQwNjA4MDcyODI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDU4MWYyNjBkODBlOWQ4YTczZTljZDIzNjdiODQ0YWIyMzA0Y2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFMboBFx8eXq9af+9qlEKRoarqfZ
tUumWNciZWEy5rFzjzrnCG8d+alxOayIEW+CKf9eRpyjOrFO7Em1FoRmiMDPScPY
ZYxUFKj86PynhOPwumMiA3o9AvyOB95fqbQqYVNiuU4WtQpBuxYtS7mhUSEBi9p4
6vxNX6pZGWuDZKtSBeSEeEOi9mpKG3+X21PyE+Sn+T/VG1eZJq2eCGyQ4IRBxYl/
NGIJTOcpBo5LLbPifnjdHkEEgG6ETyqvCyNi20tASvd+JOjf0qm7VfDKHyjBq5w8
TGykUBoPZpHXljXPhSNTRQ62tR823v3JyOYUb7MFK6a+IcX0LiETNAdoMQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFN1YHyYNgOnYpz6c0jZ7hEqyMEzIMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvM1ZnZkpnMkE2ZGluUHB6U05udUVTckl3VE1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK80YQD
BAC80YgwDQYJKoZIhvcNAQELBQADggEBAEv4XLhakKqUWvJUNcJyTSrr64T29pUg
fq8Bbucqn0SWmbEo57L51nrIRL8Ipkc/WGEfeUsHteiocb8I3stbHmOgl6rFeDem
lqWa0mqSd+tBuKbmauB9VUmwLxfZKLQNOhO7wzUv8SYqHyrcpfPjRFnnXgleEa0u
O12bC0I1uesG7jXLkDtZtMzu7uTXZ86shPbayvvaKIpuwdLzSBn/bxZ4EiPp1eIG
Hl4m4pgXdJ0V+71QLcG+t6dNdaevaUNjt4TEZZccumbPuTY3rBmq5poSZRNUNFAv
ZuoXLPWUHYQQvrHbnDF/TVS1lIzfBPvAMw0N5SuzBRzD8FiiDD3HmJ8=
-----END CERTIFICATE-----
Generated at Mon Jun 10 21:13:36 2024 by rpki-client on console-ams.rpki-client.org