Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/yN_p00TYmRHeKJ-4fj6qQB8VFAs.roa
File: yN_p00TYmRHeKJ-4fj6qQB8VFAs.roa (raw, json)
Hash identifier: ZeEuaKkOCrV2Y5Ur4+7VF/fBEeyduLvJjB6bPgxXFoo=
Subject key identifier: C8:DF:E9:D3:44:D8:99:11:DE:28:9F:B8:7E:3E:AA:40:1F:15:14:0B
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01905DBB0F43F1DDA057C99BDD0979083D80
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/yN_p00TYmRHeKJ-4fj6qQB8VFAs.roa
Signing time: Fri 28 Jun 2024 07:24:18 +0000
ROA not before: Fri 28 Jun 2024 07:24:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60223
IP address blocks: 188.209.130.0/24 maxlen: 24
188.209.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jul 2024 03:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:bb:0f:43:f1:dd:a0:57:c9:9b:dd:09:79:08:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 28 07:24:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8dfe9d344d89911de289fb87e3eaa401f15140b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:92:26:92:8c:27:fe:2c:0c:e2:20:b8:95:
4c:a7:2c:68:23:6a:92:a4:ad:cf:2a:20:e9:17:84:
f3:63:19:11:95:8f:9b:3c:61:ed:09:d2:f6:86:b8:
fa:26:46:b0:22:a3:fa:8f:5e:e8:10:f8:05:ea:a3:
90:5e:f1:8d:9e:c9:fa:d8:44:72:40:5f:d7:6e:1c:
b5:45:07:95:2e:16:cb:2c:af:35:47:72:12:fe:a4:
8f:6c:93:01:76:ff:f6:d0:eb:09:5d:ab:45:3d:e4:
4a:a8:01:22:8f:67:16:4b:f7:24:6c:7d:c0:a1:77:
93:9b:3f:11:84:79:66:b9:27:6b:4b:db:d3:01:c0:
28:67:e1:26:53:e7:4d:5b:62:fc:59:8b:a8:b3:5d:
a0:fe:33:8b:f8:94:70:3e:b1:3d:fc:dc:5a:e3:0a:
64:50:be:b3:50:9e:70:25:6f:a9:1a:80:eb:44:74:
d0:cc:67:e3:fc:00:54:3f:45:89:c7:6c:18:af:d3:
11:32:ee:44:0d:b3:a0:ee:d7:97:61:61:a8:05:56:
e6:65:6e:d6:ac:1d:63:84:36:f9:6c:71:e1:1a:02:
1a:d6:1a:47:ef:c0:39:21:1a:fc:ea:e9:e5:bf:42:
0b:5b:cf:9e:9c:9e:29:df:77:4a:ae:17:8d:f1:48:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DF:E9:D3:44:D8:99:11:DE:28:9F:B8:7E:3E:AA:40:1F:15:14:0B
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/yN_p00TYmRHeKJ-4fj6qQB8VFAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.130.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:c4:67:ea:a7:e4:6f:63:0c:18:9a:b1:a5:11:6e:2f:cd:94:
e6:e3:4b:88:29:94:bd:4e:ac:3d:be:9c:f0:b1:3f:2a:a1:02:
fd:d9:73:80:46:17:ad:c2:ad:6d:b1:6b:8e:36:a7:d0:69:c6:
2e:25:82:7b:93:e0:34:8e:8e:57:97:63:8e:ff:02:da:18:db:
b3:48:12:da:69:b9:e6:da:e4:0d:64:6e:ea:88:5c:4e:44:86:
4c:c8:ad:87:bd:d3:07:a3:95:e8:d9:b7:9b:cf:97:ee:86:6b:
a0:a9:73:66:48:64:99:85:d8:01:af:12:78:d5:d9:8b:d1:bc:
3f:c6:5f:97:80:5d:06:a4:7c:66:33:e4:a4:9b:a0:5f:2d:f4:
5e:32:ae:85:c9:9a:1d:00:79:5f:99:85:0e:9d:a7:42:27:04:
98:c3:78:e0:fb:bd:09:45:08:0a:bc:7b:5b:e0:4e:30:e5:6a:
0d:fb:30:32:fa:02:e9:26:b1:1d:6e:32:78:1e:48:61:fc:77:
ff:39:ef:5f:8c:1e:ba:34:56:de:98:d2:ca:3a:ca:1e:8f:58:
93:3c:4c:0e:14:44:b3:a6:89:c0:cb:7e:eb:b8:c0:06:dc:bc:
68:f1:0f:12:4e:9e:2a:85:b9:89:b6:bf:80:be:6b:fa:46:40:
02:58:6b:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBduw9D8d2gV8mb3Ql5CD2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjQwNjI4MDcyNDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGRmZTlkMzQ0ZDg5OTExZGUyODlmYjg3ZTNlYWE0MDFmMTUxNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxaSJpKMJ/4sDOIguJVMpyxoI2qS
pK3PKiDpF4TzYxkRlY+bPGHtCdL2hrj6JkawIqP6j17oEPgF6qOQXvGNnsn62ERy
QF/Xbhy1RQeVLhbLLK81R3IS/qSPbJMBdv/20OsJXatFPeRKqAEij2cWS/ckbH3A
oXeTmz8RhHlmuSdrS9vTAcAoZ+EmU+dNW2L8WYuos12g/jOL+JRwPrE9/Nxa4wpk
UL6zUJ5wJW+pGoDrRHTQzGfj/ABUP0WJx2wYr9MRMu5EDbOg7teXYWGoBVbmZW7W
rB1jhDb5bHHhGgIa1hpH78A5IRr86unlv0ILW8+enJ4p33dKrheN8Ujo6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMjf6dNE2JkR3iifuH4+qkAfFRQLMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEveU5fcDAwVFltUkhlS0otNGZqNnFRQjhWRkFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvNGCMA0G
CSqGSIb3DQEBCwUAA4IBAQA+xGfqp+RvYwwYmrGlEW4vzZTm40uIKZS9Tqw9vpzw
sT8qoQL92XOARhetwq1tsWuONqfQacYuJYJ7k+A0jo5Xl2OO/wLaGNuzSBLaabnm
2uQNZG7qiFxORIZMyK2HvdMHo5Xo2bebz5fuhmugqXNmSGSZhdgBrxJ41dmL0bw/
xl+XgF0GpHxmM+Skm6BfLfReMq6FyZodAHlfmYUOnadCJwSYw3jg+70JRQgKvHtb
4E4w5WoN+zAy+gLpJrEdbjJ4Hkhh/Hf/Oe9fjB66NFbemNLKOsoej1iTPEwOFESz
ponAy37ruMAG3Lxo8Q8STp4qhbmJtr+Avmv6RkACWGuY
-----END CERTIFICATE-----
Generated at Sat Jul 27 05:29:13 2024 by rpki-client on console-fra.rpki-client.org