Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/oCUsOLjqPlQPRHIxDyqgaw_XC4c.roa
File: oCUsOLjqPlQPRHIxDyqgaw_XC4c.roa (raw, json)
Hash identifier: BJOCLx/Dx5Ks9EqHMsRWby5Pv3RZjYgflOlz3KUeIos=
Subject key identifier: A0:25:2C:38:B8:EA:3E:54:0F:44:72:31:0F:2A:A0:6B:0F:D7:0B:87
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 019268834ED6F8DD90289C719999D2DDF59C
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/oCUsOLjqPlQPRHIxDyqgaw_XC4c.roa
Signing time: Mon 07 Oct 2024 19:44:48 +0000
ROA not before: Mon 07 Oct 2024 19:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 188.209.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:68:83:4e:d6:f8:dd:90:28:9c:71:99:99:d2:dd:f5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 7 19:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0252c38b8ea3e540f4472310f2aa06b0fd70b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:f2:0a:fb:f6:48:f1:f5:11:e1:56:06:e7:
a8:6f:31:f1:1c:b5:6b:5e:5c:46:98:ed:af:f2:97:
fe:a3:38:af:c5:4c:73:35:41:0e:02:6e:d2:7b:13:
e7:d6:3c:5c:17:e2:43:ea:2f:00:03:49:f3:ee:a0:
cd:85:7a:76:86:ba:ec:56:34:c5:fb:b0:8b:9a:ab:
22:89:23:2e:14:24:81:1b:02:d9:40:55:de:ac:c4:
b3:32:6a:61:45:fd:de:0a:9c:c9:13:5d:d7:21:a1:
d8:ff:76:d6:5d:b3:07:b2:59:68:76:a5:82:cd:fb:
a8:b4:30:48:9a:f7:a9:93:0b:5d:87:97:de:5b:57:
0e:a2:8d:c9:63:7d:b1:10:7e:89:1d:a6:12:dc:05:
55:46:50:0e:46:b0:af:a8:5f:42:1b:7c:e6:13:b2:
cc:fb:c5:7b:6c:89:90:39:a1:f7:d6:69:ed:9a:c0:
60:f6:41:3c:77:8c:db:24:cf:05:8d:3c:58:1f:a3:
43:c1:b8:b4:85:f8:9b:60:4a:f1:93:34:20:c1:dc:
dd:67:a1:df:07:7b:b6:5c:89:7d:19:c6:cf:f7:48:
d3:f3:d0:f2:10:da:92:70:ba:c9:c1:ad:af:02:9c:
d4:97:68:80:58:8d:cc:00:a5:b4:32:2a:a5:b8:cd:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:25:2C:38:B8:EA:3E:54:0F:44:72:31:0F:2A:A0:6B:0F:D7:0B:87
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/oCUsOLjqPlQPRHIxDyqgaw_XC4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ca:3b:6b:cd:b7:12:7d:17:0b:0d:35:b7:6a:c8:75:2a:23:
77:f8:96:a6:24:97:8c:6c:db:b4:9c:70:d3:f4:5c:39:be:20:
6f:d9:e5:3f:8e:13:5d:f5:4c:e2:55:2a:8b:3b:9f:c9:67:f5:
6e:8b:1d:8e:0e:6f:d4:b4:20:0a:40:a4:ba:f1:50:b0:51:8e:
f4:38:fa:28:3d:92:bb:80:30:cb:0e:53:ed:23:bb:e6:60:ac:
d7:5a:41:63:90:c1:e4:06:fd:5e:cf:a3:65:e0:79:1a:4e:45:
2a:b1:28:2e:a5:2a:ce:1c:0a:47:d2:da:6a:3b:29:11:ce:74:
ea:8a:b5:77:75:e8:f5:5e:ae:a7:51:84:ad:ed:68:00:89:38:
28:34:d6:fe:a1:6c:7a:87:ef:a6:c7:df:89:dc:dc:41:06:7a:
11:e0:43:f7:4f:2d:06:da:9e:36:1f:b8:96:40:3b:01:ac:f0:
e7:40:41:09:66:fb:f6:8e:8a:e9:ae:e1:40:a8:1d:07:91:e6:
4b:e8:93:65:cb:ec:c2:b2:80:44:d4:07:ff:b4:cb:03:19:40:
12:96:a4:88:bf:61:dd:47:de:c0:06:6d:5a:4d:63:28:cd:87:
22:69:fd:e3:ae:db:20:08:83:ab:8d:1f:d8:c1:f4:cf:c6:8c:
df:d4:02:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJog07W+N2QKJxxmZnS3fWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjQxMDA3MTk0NDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDI1MmMzOGI4ZWEzZTU0MGY0NDcyMzEwZjJhYTA2YjBmZDcwYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQryCvv2SPH1EeFWBueobzHxHLVr
XlxGmO2v8pf+ozivxUxzNUEOAm7SexPn1jxcF+JD6i8AA0nz7qDNhXp2hrrsVjTF
+7CLmqsiiSMuFCSBGwLZQFXerMSzMmphRf3eCpzJE13XIaHY/3bWXbMHsllodqWC
zfuotDBImvepkwtdh5feW1cOoo3JY32xEH6JHaYS3AVVRlAORrCvqF9CG3zmE7LM
+8V7bImQOaH31mntmsBg9kE8d4zbJM8FjTxYH6NDwbi0hfibYErxkzQgwdzdZ6Hf
B3u2XIl9GcbP90jT89DyENqScLrJwa2vApzUl2iAWI3MAKW0MiqluM0nSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKAlLDi46j5UD0RyMQ8qoGsP1wuHMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvb0NVc09ManFQbFFQUkhJeER5cWdhd19YQzRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGHMA0G
CSqGSIb3DQEBCwUAA4IBAQCeyjtrzbcSfRcLDTW3ash1KiN3+JamJJeMbNu0nHDT
9Fw5viBv2eU/jhNd9UziVSqLO5/JZ/Vuix2ODm/UtCAKQKS68VCwUY70OPooPZK7
gDDLDlPtI7vmYKzXWkFjkMHkBv1ez6Nl4HkaTkUqsSgupSrOHApH0tpqOykRznTq
irV3dej1Xq6nUYSt7WgAiTgoNNb+oWx6h++mx9+J3NxBBnoR4EP3Ty0G2p42H7iW
QDsBrPDnQEEJZvv2jorpruFAqB0HkeZL6JNly+zCsoBE1Af/tMsDGUASlqSIv2Hd
R97ABm1aTWMozYciaf3jrtsgCIOrjR/YwfTPxozf1AKD
-----END CERTIFICATE-----
Generated at Sun Nov 10 10:19:12 2024 by rpki-client on console-ams.rpki-client.org