Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/IrTiDZkjfSmX6J7Ry-XcFFnQUDQ.roa
File: IrTiDZkjfSmX6J7Ry-XcFFnQUDQ.roa (raw, json)
Hash identifier: KuLWo+FNZh2XS9wKV4Oo3zPcxpH8oxlj5mkExBVjUmo=
Subject key identifier: 22:B4:E2:0D:99:23:7D:29:97:E8:9E:D1:CB:E5:DC:14:59:D0:50:34
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01929A57C82DA464BEE052E0BFE21E3B01F9
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/IrTiDZkjfSmX6J7Ry-XcFFnQUDQ.roa
Signing time: Thu 17 Oct 2024 11:58:16 +0000
ROA not before: Thu 17 Oct 2024 11:58:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 188.209.134.0/24 maxlen: 24
188.209.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 12:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:57:c8:2d:a4:64:be:e0:52:e0:bf:e2:1e:3b:01:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 17 11:58:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22b4e20d99237d2997e89ed1cbe5dc1459d05034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:1f:ad:90:2d:d8:f4:73:84:38:58:9c:57:
93:9a:75:2b:36:d3:11:93:f4:d9:7e:b9:66:4b:d7:
3a:1e:00:23:ad:03:97:25:52:33:e5:f0:5c:b2:69:
31:0d:0b:53:5d:72:46:c4:a1:04:be:7c:a5:65:be:
4a:46:ca:5a:21:ba:d6:f4:9e:a5:5f:3e:a5:ee:cb:
f0:dc:4f:bd:a4:d6:90:15:94:a3:b4:f4:b4:09:2c:
b0:6a:7f:63:34:e5:e1:66:fc:ca:94:ee:3f:f4:d9:
4a:6d:f6:a6:77:45:8e:a7:52:c3:ba:ff:9a:7e:f1:
4d:f8:a9:c8:08:44:83:d3:26:c2:78:cc:dd:64:9c:
a9:db:a2:04:bf:f4:cb:22:87:0c:8d:80:81:19:1d:
0b:76:bf:f9:09:1e:c3:7e:bd:47:8e:a0:5a:1c:15:
88:96:9b:2c:21:79:90:9a:5e:98:84:6d:47:c4:6e:
46:88:6b:29:e4:33:29:24:b8:bb:e3:da:04:c7:ab:
11:c0:05:bf:94:63:f5:96:3e:f3:4c:5f:96:46:f5:
c9:08:76:72:8a:a6:6a:1b:e6:a2:c4:15:7b:0a:25:
8c:14:d4:b3:4b:23:8e:28:e8:65:b9:41:a1:1b:ef:
32:64:6e:32:13:ac:cb:e0:4b:a1:a0:93:ef:d0:44:
12:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B4:E2:0D:99:23:7D:29:97:E8:9E:D1:CB:E5:DC:14:59:D0:50:34
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/IrTiDZkjfSmX6J7Ry-XcFFnQUDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.134.0/24
188.209.139.0/24
Signature Algorithm: sha256WithRSAEncryption
54:77:82:d0:31:7a:c9:92:a9:f8:19:a5:97:52:a0:0a:16:19:
d0:80:5a:80:22:8a:b5:c8:c8:03:ed:54:b0:7a:67:bf:5d:10:
14:00:55:4f:7c:78:02:e9:50:ee:b0:66:91:f7:a3:0f:15:cc:
63:cd:4e:35:f7:99:55:dd:be:e0:ea:f6:15:7e:f1:5a:8b:f6:
e8:25:1c:4a:73:e9:82:9d:d3:33:6b:d8:33:56:d7:43:57:b3:
0f:58:74:68:c0:00:90:c6:ae:ff:57:9c:13:2b:e6:fa:4d:4d:
c3:89:c3:12:91:32:b5:62:ac:5a:00:10:0e:18:c5:25:d9:7f:
99:85:60:f0:60:1e:ce:fc:9c:b9:4b:4b:14:c1:54:c1:3b:5e:
51:67:28:ea:03:63:e2:bf:bf:81:41:0c:dc:5f:c9:92:32:4d:
65:52:93:43:3c:55:e9:a7:8e:ed:ae:60:f6:0a:cd:23:c9:f5:
03:9b:1d:75:c8:c8:a0:ce:38:22:15:b5:c0:de:6f:30:ef:18:
ab:9d:59:91:00:1d:69:b1:63:70:c3:be:9d:83:9a:e2:0b:70:
f4:35:7c:fd:8c:d6:e8:91:ee:97:6a:f0:1b:f0:51:44:36:52:
3b:5e:85:b6:e2:3b:a1:c1:4c:44:ff:47:36:42:88:55:50:6f:
fc:36:ae:29
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZKaV8gtpGS+4FLgv+IeOwH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjQxMDE3MTE1ODE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmI0ZTIwZDk5MjM3ZDI5OTdlODllZDFjYmU1ZGMxNDU5ZDA1MDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmkfrZAt2PRzhDhYnFeTmnUrNtMR
k/TZfrlmS9c6HgAjrQOXJVIz5fBcsmkxDQtTXXJGxKEEvnylZb5KRspaIbrW9J6l
Xz6l7svw3E+9pNaQFZSjtPS0CSywan9jNOXhZvzKlO4/9NlKbfamd0WOp1LDuv+a
fvFN+KnICESD0ybCeMzdZJyp26IEv/TLIocMjYCBGR0Ldr/5CR7Dfr1HjqBaHBWI
lpssIXmQml6YhG1HxG5GiGsp5DMpJLi749oEx6sRwAW/lGP1lj7zTF+WRvXJCHZy
iqZqG+aixBV7CiWMFNSzSyOOKOhluUGhG+8yZG4yE6zL4EuhoJPv0EQSeQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCK04g2ZI30pl+ie0cvl3BRZ0FA0MB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvSXJUaURaa2pmU21YNko3UnktWGNGRm5RVURRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvNGGAwQA
vNGLMA0GCSqGSIb3DQEBCwUAA4IBAQBUd4LQMXrJkqn4GaWXUqAKFhnQgFqAIoq1
yMgD7VSweme/XRAUAFVPfHgC6VDusGaR96MPFcxjzU4195lV3b7g6vYVfvFai/bo
JRxKc+mCndMza9gzVtdDV7MPWHRowACQxq7/V5wTK+b6TU3DicMSkTK1YqxaABAO
GMUl2X+ZhWDwYB7O/Jy5S0sUwVTBO15RZyjqA2Piv7+BQQzcX8mSMk1lUpNDPFXp
p47trmD2Cs0jyfUDmx11yMigzjgiFbXA3m8w7xirnVmRAB1psWNww76dg5riC3D0
NXz9jNboke6XavAb8FFENlI7XoW24juhwUxE/0c2QohVUG/8Nq4p
-----END CERTIFICATE-----
Generated at Sun Nov 17 15:03:09 2024 by rpki-client on console-ams.rpki-client.org