Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wH2OUMve59sNFqmBT1kwKQlwWCk.roa
File: wH2OUMve59sNFqmBT1kwKQlwWCk.roa (raw, json)
Hash identifier: KPXxy7ZQCD9dVrY3yhB88g7jMoqRAi2i/Cktm8+ztVg=
Subject key identifier: C0:7D:8E:50:CB:DE:E7:DB:0D:16:A9:81:4F:59:30:29:09:70:58:29
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 019009378FC137EAF8E120E651ACE565F63C
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wH2OUMve59sNFqmBT1kwKQlwWCk.roa
Signing time: Tue 11 Jun 2024 21:32:34 +0000
ROA not before: Tue 11 Jun 2024 21:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 188.209.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 05:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:09:37:8f:c1:37:ea:f8:e1:20:e6:51:ac:e5:65:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 11 21:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c07d8e50cbdee7db0d16a9814f59302909705829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:3c:c3:21:d4:52:7d:99:66:fb:78:14:84:
eb:5d:c1:b0:83:44:a0:2c:fc:f4:ec:95:51:71:1c:
a6:21:6c:03:60:ab:86:47:4d:ef:db:ba:ce:64:60:
78:5e:65:10:67:a7:35:f0:33:03:7e:22:89:8c:6d:
45:a4:c9:49:9b:50:e9:15:17:95:47:38:a0:e1:26:
01:c1:8f:26:63:4e:6a:51:76:c1:4b:0c:8c:bc:29:
09:b2:00:dc:d2:1d:cf:c9:f6:cd:73:a5:84:94:bd:
fe:e5:b4:ae:de:41:c4:1a:17:c0:e7:f7:94:99:97:
45:a2:86:c4:68:8d:68:1e:92:f5:53:86:02:5d:2a:
c2:b1:1b:fd:a9:23:51:d9:29:fd:e9:e8:b0:e4:23:
33:04:36:21:86:2f:51:a7:ac:a0:cb:9e:fe:06:a2:
e3:65:aa:8e:fc:90:4f:12:ff:80:21:13:dc:cd:08:
eb:3b:bb:40:bf:3f:84:1a:64:37:eb:cc:f5:36:43:
95:6d:66:f2:c5:2b:61:81:cf:68:b3:97:12:07:ba:
95:73:c4:f3:a6:e6:ea:47:49:00:3a:5b:c8:f4:5d:
59:1f:94:62:e8:73:92:6d:1a:e2:02:8d:4c:f7:5a:
39:f2:01:e1:fa:b6:8a:e4:04:0b:c3:85:63:1a:d8:
68:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7D:8E:50:CB:DE:E7:DB:0D:16:A9:81:4F:59:30:29:09:70:58:29
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wH2OUMve59sNFqmBT1kwKQlwWCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.137.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c2:3e:28:84:42:e5:e8:cd:3d:5a:a4:c8:a9:b1:cd:29:54:
1c:55:8a:2c:41:8b:dd:93:ec:8e:4d:1e:c6:ae:14:37:ae:cd:
ad:5f:41:a8:f6:76:a9:6d:c1:b4:12:87:d9:59:33:6a:9c:92:
6e:41:33:38:2f:17:03:95:a7:24:6b:1f:e7:27:5e:da:cc:34:
e1:88:04:7d:48:a3:0b:d7:42:8f:6e:e0:e2:45:66:6a:6b:59:
ad:96:40:12:b8:de:e2:8a:f7:fe:eb:3b:ad:1e:f7:1e:f6:fc:
22:37:b8:6f:77:d7:42:d7:9f:ca:b1:3b:30:0e:a9:eb:40:bf:
b2:98:f1:25:97:da:9c:4b:7e:83:a2:5c:35:68:67:fa:9f:72:
c4:99:cb:c2:20:5c:b1:7f:fa:a2:18:c3:46:02:51:2d:cc:23:
b1:0a:7e:9d:1d:b9:9c:79:88:ca:8d:a9:54:98:77:a9:1d:50:
65:ec:f5:77:51:de:36:ea:26:ee:07:f3:16:35:87:d3:10:5e:
44:38:9f:c8:17:f6:47:61:46:75:0c:39:c6:68:b2:91:da:1e:
e0:ea:e5:2b:7c:23:ca:77:1e:73:54:73:69:17:5b:99:f1:89:
91:15:a8:a5:4e:23:2f:83:59:72:68:b2:a8:89:24:5f:70:b9:
c8:13:ce:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAJN4/BN+r44SDmUazlZfY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjQwNjExMjEzMjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDdkOGU1MGNiZGVlN2RiMGQxNmE5ODE0ZjU5MzAyOTA5NzA1ODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DU8wyHUUn2ZZvt4FITrXcGwg0Sg
LPz07JVRcRymIWwDYKuGR03v27rOZGB4XmUQZ6c18DMDfiKJjG1FpMlJm1DpFReV
Rzig4SYBwY8mY05qUXbBSwyMvCkJsgDc0h3PyfbNc6WElL3+5bSu3kHEGhfA5/eU
mZdFoobEaI1oHpL1U4YCXSrCsRv9qSNR2Sn96eiw5CMzBDYhhi9Rp6ygy57+BqLj
ZaqO/JBPEv+AIRPczQjrO7tAvz+EGmQ368z1NkOVbWbyxSthgc9os5cSB7qVc8Tz
pubqR0kAOlvI9F1ZH5Ri6HOSbRriAo1M91o58gHh+raK5AQLw4VjGthoewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMB9jlDL3ufbDRapgU9ZMCkJcFgpMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvd0gyT1VNdmU1OXNORnFtQlQxa3dLUWx3V0NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGJMA0G
CSqGSIb3DQEBCwUAA4IBAQAWwj4ohELl6M09WqTIqbHNKVQcVYosQYvdk+yOTR7G
rhQ3rs2tX0Go9napbcG0EofZWTNqnJJuQTM4LxcDlackax/nJ17azDThiAR9SKML
10KPbuDiRWZqa1mtlkASuN7iivf+6zutHvce9vwiN7hvd9dC15/KsTswDqnrQL+y
mPEll9qcS36Dolw1aGf6n3LEmcvCIFyxf/qiGMNGAlEtzCOxCn6dHbmceYjKjalU
mHepHVBl7PV3Ud426ibuB/MWNYfTEF5EOJ/IF/ZHYUZ1DDnGaLKR2h7g6uUrfCPK
dx5zVHNpF1uZ8YmRFailTiMvg1lyaLKoiSRfcLnIE85n
-----END CERTIFICATE-----
Generated at Thu Jul 11 06:55:23 2024 by rpki-client on console-ams.rpki-client.org