Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/EE9ndMLKuUEsXzjQakyUOAwJUh8.roa
File: EE9ndMLKuUEsXzjQakyUOAwJUh8.roa (raw, json)
Hash identifier: ke2yFPw08K9EfrJQtKd8Dgwm234O3qxMEbEMCkH5AE4=
Subject key identifier: 10:4F:67:74:C2:CA:B9:41:2C:5F:38:D0:6A:4C:94:38:0C:09:52:1F
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CC2DB344B7D35C39DD0EBBD8AC0390342
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/EE9ndMLKuUEsXzjQakyUOAwJUh8.roa
Signing time: Mon 01 Jan 2024 02:29:54 +0000
ROA not before: Mon 01 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46450
IP address blocks: 188.209.136.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:34:4b:7d:35:c3:9d:d0:eb:bd:8a:c0:39:03:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=104f6774c2cab9412c5f38d06a4c94380c09521f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:68:e4:bc:97:72:80:33:d2:68:78:f4:53:
79:88:58:17:cf:03:4d:7c:c5:49:f6:a8:fb:f4:a8:
69:78:41:44:b1:25:6c:d6:4f:5a:71:8a:1c:ae:27:
a0:f2:e9:f5:7c:88:80:02:a9:1e:0d:1a:62:12:06:
48:5f:35:63:4a:96:85:a2:eb:13:0d:52:67:09:9e:
f1:aa:a3:a7:bd:b9:72:2d:9a:13:b6:ae:31:32:9e:
94:d8:25:05:62:42:5e:6a:09:64:3e:e6:ea:a3:64:
99:bd:0f:45:5e:cc:9e:2f:df:ce:e8:9f:7f:af:0c:
38:b8:44:e4:8b:2d:9d:6b:ec:3f:83:13:43:ba:3b:
95:93:32:62:e4:5a:4a:df:13:be:9d:b0:22:a3:b8:
f7:1d:07:09:30:fb:f2:37:c1:e6:2c:25:d4:ee:ec:
d1:eb:fa:bc:2f:f8:2d:d3:c8:7f:33:a4:3c:ec:73:
d1:3d:0a:49:1a:f7:85:e7:3c:2b:e4:5f:d5:79:b7:
60:90:3a:b6:46:cc:3b:92:bf:cb:aa:c4:7b:fb:86:
b3:1f:55:0e:55:52:66:fe:f6:0e:86:77:ba:1d:f3:
76:48:4b:75:d8:51:d4:15:40:e2:f2:ea:3d:a8:cb:
a8:9e:22:ec:60:d0:6f:f1:4f:64:26:c4:f9:0b:3a:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4F:67:74:C2:CA:B9:41:2C:5F:38:D0:6A:4C:94:38:0C:09:52:1F
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/EE9ndMLKuUEsXzjQakyUOAwJUh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.136.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:d6:7f:3f:d3:67:1d:13:aa:1c:a5:8b:49:d1:c2:8a:d1:41:
ae:a9:43:a4:6a:8c:d1:bd:e0:91:3d:2d:6d:07:7a:de:fb:5d:
cb:ed:d9:cf:55:04:79:62:a3:52:ab:e5:c2:70:90:54:bb:73:
8f:83:65:0c:39:7d:44:5c:fd:aa:e8:5f:39:44:4c:af:fd:3d:
d6:7a:d9:0e:a3:f7:b1:1e:01:7f:55:06:2a:15:97:22:de:ff:
c6:e9:61:b7:d0:ed:70:0b:93:a1:f1:0e:c9:fb:82:5a:ac:92:
1d:08:2f:9f:a9:37:1e:7f:60:42:df:f6:8d:fc:45:ad:08:d5:
fc:74:ab:09:98:97:27:af:e6:5c:d5:e2:ce:f7:62:73:95:aa:
1d:f1:e6:1b:6a:08:b5:01:ab:9c:1e:21:6e:4c:ae:8b:ed:a2:
eb:31:b5:2d:d6:78:a4:ad:50:15:da:3c:24:ac:75:1b:5c:6d:
32:d8:56:8d:9b:a7:91:75:3b:43:8e:4c:de:cd:03:48:d7:a9:
1c:ca:c6:41:a3:d1:a0:e3:df:68:39:9d:bf:48:67:82:b8:af:
cb:5d:c4:d5:aa:a5:5a:fa:93:35:e7:fe:bb:2a:5e:39:ce:2d:
84:f7:fd:49:32:81:90:00:4a:c7:31:a7:b8:47:13:46:90:35:
25:52:a3:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2zRLfTXDndDrvYrAOQNCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjQwMTAxMDIyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDRmNjc3NGMyY2FiOTQxMmM1ZjM4ZDA2YTRjOTQzODBjMDk1MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp69o5LyXcoAz0mh49FN5iFgXzwNN
fMVJ9qj79KhpeEFEsSVs1k9acYocrieg8un1fIiAAqkeDRpiEgZIXzVjSpaFousT
DVJnCZ7xqqOnvblyLZoTtq4xMp6U2CUFYkJeaglkPubqo2SZvQ9FXsyeL9/O6J9/
rww4uETkiy2da+w/gxNDujuVkzJi5FpK3xO+nbAio7j3HQcJMPvyN8HmLCXU7uzR
6/q8L/gt08h/M6Q87HPRPQpJGveF5zwr5F/VebdgkDq2Rsw7kr/LqsR7+4azH1UO
VVJm/vYOhne6HfN2SEt12FHUFUDi8uo9qMuoniLsYNBv8U9kJsT5CzpxNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBBPZ3TCyrlBLF840GpMlDgMCVIfMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvRUU5bmRNTEt1VUVzWHpqUWFreVVPQXdKVWg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvNGIMA0G
CSqGSIb3DQEBCwUAA4IBAQBO1n8/02cdE6ocpYtJ0cKK0UGuqUOkaozRveCRPS1t
B3re+13L7dnPVQR5YqNSq+XCcJBUu3OPg2UMOX1EXP2q6F85REyv/T3WetkOo/ex
HgF/VQYqFZci3v/G6WG30O1wC5Oh8Q7J+4JarJIdCC+fqTcef2BC3/aN/EWtCNX8
dKsJmJcnr+Zc1eLO92Jzlaod8eYbagi1AaucHiFuTK6L7aLrMbUt1nikrVAV2jwk
rHUbXG0y2FaNm6eRdTtDjkzezQNI16kcysZBo9Gg499oOZ2/SGeCuK/LXcTVqqVa
+pM15/67Kl45zi2E9/1JMoGQAErHMae4RxNGkDUlUqN6
-----END CERTIFICATE-----
Generated at Tue Jan 2 23:53:05 2024 by rpki-client on console-ams.rpki-client.org