Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/G1PPS8jNO0qdiIBkaxuMSoqJM0k.roa
File: G1PPS8jNO0qdiIBkaxuMSoqJM0k.roa (raw, json)
Hash identifier: b+n23V5YqlcyeDJy9gBHe16IPKPw4Pq4QN6iR0rBl24=
Subject key identifier: 1B:53:CF:4B:C8:CD:3B:4A:9D:88:80:64:6B:1B:8C:4A:8A:89:33:49
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018571B9F8BA8AC69F10B99710A0A730FB42
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/G1PPS8jNO0qdiIBkaxuMSoqJM0k.roa
Signing time: Mon 02 Jan 2023 09:04:51 +0000
ROA not before: Mon 02 Jan 2023 09:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204393
IP address blocks: 2.188.238.0/24 maxlen: 24
2.188.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:f8:ba:8a:c6:9f:10:b9:97:10:a0:a7:30:fb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 09:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b53cf4bc8cd3b4a9d8880646b1b8c4a8a893349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:3b:dd:d3:3e:e9:97:7e:9a:5e:f0:0b:51:
15:db:a6:f7:a7:69:33:e7:b2:7f:df:c6:90:b6:41:
da:94:77:a2:f6:ef:56:f0:96:35:ba:4b:ef:73:e6:
cd:90:eb:19:3f:09:49:88:cd:21:5e:e5:08:1a:2c:
0b:28:9d:fa:7d:0f:96:f8:dd:3a:25:d4:f5:d0:b4:
95:36:84:a5:50:29:ff:78:16:00:e6:4a:80:d8:2d:
5a:96:af:68:a7:ef:b1:b3:a4:50:e4:a5:64:7e:8c:
58:c4:d7:31:1a:f8:56:2d:6c:af:9d:dc:26:56:db:
c6:32:2c:a6:1a:df:6b:14:53:a5:95:71:f3:52:25:
dc:03:de:68:99:e8:7f:c9:f8:13:7a:67:fc:c4:16:
72:6d:ce:69:f5:59:9b:41:92:4f:23:4a:de:43:9d:
ad:0d:40:1b:e0:c3:b3:7e:84:ea:e8:4e:8e:40:50:
8e:dc:aa:83:0c:48:d6:94:9f:4d:86:77:0a:6e:07:
05:d2:58:b3:37:ce:cb:c4:2d:b6:9f:29:8d:07:d7:
4c:91:c7:c5:76:56:57:65:1f:cc:60:29:8a:5b:03:
a3:c4:c6:8a:15:27:14:f2:32:c1:93:12:e5:f7:70:
3b:0b:31:f7:3c:68:a6:0d:d6:91:10:28:01:d3:f9:
88:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:53:CF:4B:C8:CD:3B:4A:9D:88:80:64:6B:1B:8C:4A:8A:89:33:49
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/G1PPS8jNO0qdiIBkaxuMSoqJM0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.234.0/24
2.188.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f6:65:f0:e6:02:a9:8a:f5:d1:6f:7b:e3:fd:d0:56:b7:68:
29:bc:b1:3d:65:26:4f:a1:f9:96:c8:db:ef:03:ed:d9:2e:4f:
ce:18:b9:5d:92:45:83:e2:2c:58:b5:80:a8:3f:ab:18:2f:45:
33:a2:e1:65:7b:f6:a1:41:bd:b4:f5:5a:5f:fb:7d:08:d7:89:
3f:c8:15:03:b3:b2:8c:a4:c6:0f:03:a1:a6:37:67:a8:56:97:
7f:0b:87:01:ea:1c:23:1b:bf:93:bd:cd:75:3f:59:0a:65:37:
dd:b6:89:03:9b:fa:f8:c6:a4:a8:c4:50:84:ea:c1:b1:48:25:
9f:23:fd:ac:6d:4f:b4:0e:04:b1:4b:6e:0a:71:9a:d8:df:85:
05:df:14:4b:0d:4a:fa:b4:24:ae:ed:2c:2c:8c:e6:9f:00:cb:
10:7a:80:0d:0a:21:6d:f9:36:f6:df:a0:a7:40:c2:da:cf:36:
80:ec:45:09:c8:c3:a3:00:f1:4e:77:0a:1f:32:ec:78:a1:13:
05:15:e5:8b:d3:ec:27:a6:e2:77:0f:a0:05:ca:d2:7e:5e:33:
16:65:46:b3:47:9a:c0:04:03:fb:85:10:c2:3f:19:23:79:61:
b7:96:e9:1a:52:b8:89:15:48:6f:0c:e7:ba:14:b1:d3:d0:03:
29:15:24:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxufi6isafELmXEKCnMPtCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjMwMTAyMDkwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjUzY2Y0YmM4Y2QzYjRhOWQ4ODgwNjQ2YjFiOGM0YThhODkzMzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFA73dM+6Zd+ml7wC1EV26b3p2kz
57J/38aQtkHalHei9u9W8JY1ukvvc+bNkOsZPwlJiM0hXuUIGiwLKJ36fQ+W+N06
JdT10LSVNoSlUCn/eBYA5kqA2C1alq9op++xs6RQ5KVkfoxYxNcxGvhWLWyvndwm
VtvGMiymGt9rFFOllXHzUiXcA95omeh/yfgTemf8xBZybc5p9VmbQZJPI0reQ52t
DUAb4MOzfoTq6E6OQFCO3KqDDEjWlJ9NhncKbgcF0lizN87LxC22nymNB9dMkcfF
dlZXZR/MYCmKWwOjxMaKFScU8jLBkxLl93A7CzH3PGimDdaRECgB0/mI+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBtTz0vIzTtKnYiAZGsbjEqKiTNJMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvRzFQUFM4ak5PMHFkaUlCa2F4dU1Tb3FKTTBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAArzqAwQA
ArzuMA0GCSqGSIb3DQEBCwUAA4IBAQBL9mXw5gKpivXRb3vj/dBWt2gpvLE9ZSZP
ofmWyNvvA+3ZLk/OGLldkkWD4ixYtYCoP6sYL0UzouFle/ahQb209Vpf+30I14k/
yBUDs7KMpMYPA6GmN2eoVpd/C4cB6hwjG7+Tvc11P1kKZTfdtokDm/r4xqSoxFCE
6sGxSCWfI/2sbU+0DgSxS24KcZrY34UF3xRLDUr6tCSu7SwsjOafAMsQeoANCiFt
+Tb236CnQMLazzaA7EUJyMOjAPFOdwofMux4oRMFFeWL0+wnpuJ3D6AFytJ+XjMW
ZUazR5rABAP7hRDCPxkjeWG3lukaUriJFUhvDOe6FLHT0AMpFSQ6
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:27 2024 by rpki-client on console-fra.rpki-client.org