Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/yV_-kPdSrgzY8zOgOx6XB-o7UWc.roa
File: yV_-kPdSrgzY8zOgOx6XB-o7UWc.roa (raw, json)
Hash identifier: koAo3BGbOAdSmwPs9a0yvZD2JEiNB9WJCKAs11xlELw=
Subject key identifier: C9:5F:FE:90:F7:52:AE:0C:D8:F3:33:A0:3B:1E:97:07:EA:3B:51:67
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018785CC26EFE3DF1D47D1DF80C0A06B39E0
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/yV_-kPdSrgzY8zOgOx6XB-o7UWc.roa
Signing time: Sat 15 Apr 2023 16:42:41 +0000
ROA not before: Sat 15 Apr 2023 16:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 2.188.225.0/24 maxlen: 24
2.188.224.0/20 maxlen: 20
2.188.232.0/23 maxlen: 23
2.188.234.0/24 maxlen: 24
2.188.236.0/23 maxlen: 23
2.188.240.0/20 maxlen: 20
2.188.40.0/21 maxlen: 21
2.188.164.0/22 maxlen: 22
2.188.160.0/22 maxlen: 22
2.188.165.0/24 maxlen: 24
2.188.161.0/24 maxlen: 24
2.188.192.0/19 maxlen: 19
2.188.212.0/23 maxlen: 23
2.188.60.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:85:cc:26:ef:e3:df:1d:47:d1:df:80:c0:a0:6b:39:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Apr 15 16:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c95ffe90f752ae0cd8f333a03b1e9707ea3b5167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:19:44:e2:ad:eb:f5:13:29:93:20:b7:95:
3e:e7:6b:5e:81:c6:51:5b:26:db:a8:6b:53:ce:59:
ba:af:7b:ed:c7:70:af:21:c9:3d:ce:99:c0:08:e2:
83:ae:48:82:e6:d2:a1:ed:4e:ef:43:32:63:4b:e8:
b9:5c:8a:57:d9:5a:14:10:8d:c8:12:8d:18:16:38:
f1:02:dc:2d:23:73:b3:38:53:cc:67:15:46:68:13:
58:23:53:fd:a4:4a:55:d8:82:f6:16:6b:c2:e3:7c:
13:15:53:3c:e4:a6:70:c1:ab:d0:f1:ff:eb:00:8c:
86:86:53:3f:21:03:b8:b8:75:e2:e0:b2:2e:88:d8:
fe:1c:cb:7b:05:8d:d2:39:f5:54:b5:25:e0:43:14:
ac:93:36:21:c5:37:2f:5c:fc:28:11:3d:23:a9:46:
fa:ad:50:b9:f0:15:3a:de:bd:bf:c0:a3:75:16:20:
8d:12:0c:c9:35:3d:e5:c0:55:0d:fe:49:cb:6a:4e:
3a:df:9d:cb:62:3e:bc:11:0b:7c:7c:80:33:00:54:
15:3b:11:99:f7:9c:70:99:24:ab:1b:9b:30:24:b1:
7e:23:a6:43:44:d9:a1:21:d3:24:43:92:e9:db:a9:
47:21:ee:0b:9f:d3:0e:19:f2:cf:29:81:2a:74:a0:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5F:FE:90:F7:52:AE:0C:D8:F3:33:A0:3B:1E:97:07:EA:3B:51:67
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/yV_-kPdSrgzY8zOgOx6XB-o7UWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.40.0/21
2.188.60.0/22
2.188.160.0/21
2.188.192.0/18
Signature Algorithm: sha256WithRSAEncryption
53:9e:72:75:f5:13:fc:67:75:b5:b4:2e:af:17:33:20:6e:9a:
6f:bf:ae:31:95:75:1a:83:1d:66:c6:c4:fa:59:97:21:57:34:
0d:06:7b:27:03:71:b5:bd:f6:c2:c5:94:0a:27:bf:24:00:9f:
e7:31:cd:c7:6a:1a:4a:da:7d:4b:7a:b5:5f:d4:9b:9d:97:e3:
40:46:b6:0a:2c:c8:54:e2:f7:b6:e0:a2:82:aa:6e:79:c3:d6:
b8:a3:34:4c:9d:f3:fa:87:31:40:13:15:82:74:88:ad:74:db:
f4:78:03:1f:1b:4a:d1:e9:73:e4:c0:57:08:35:d0:16:44:69:
22:30:af:21:88:92:26:b1:63:4c:ef:30:a4:3d:3a:da:d8:58:
f3:39:20:a4:0e:0b:2b:39:34:ac:8b:2d:a2:c3:10:84:1a:22:
86:25:70:2e:df:fb:4e:22:20:de:5f:a5:24:1e:bb:6e:33:3d:
7b:a2:f3:6c:4b:c5:71:a6:9b:6a:92:41:fc:d3:c2:fd:65:6e:
3f:38:6c:d0:1f:53:39:7c:60:87:b3:e8:47:c4:47:09:02:34:
8f:ef:ca:66:00:02:77:34:32:7e:25:34:ee:1e:98:04:18:e3:
34:7e:fb:e0:5c:8a:85:69:7f:c8:33:22:f1:8f:ab:12:0d:97:
c0:c1:0e:a7
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYeFzCbv498dR9HfgMCgazngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjMwNDE1MTY0MjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTVmZmU5MGY3NTJhZTBjZDhmMzMzYTAzYjFlOTcwN2VhM2I1MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfcZROKt6/UTKZMgt5U+52tegcZR
WybbqGtTzlm6r3vtx3CvIck9zpnACOKDrkiC5tKh7U7vQzJjS+i5XIpX2VoUEI3I
Eo0YFjjxAtwtI3OzOFPMZxVGaBNYI1P9pEpV2IL2FmvC43wTFVM85KZwwavQ8f/r
AIyGhlM/IQO4uHXi4LIuiNj+HMt7BY3SOfVUtSXgQxSskzYhxTcvXPwoET0jqUb6
rVC58BU63r2/wKN1FiCNEgzJNT3lwFUN/knLak46353LYj68EQt8fIAzAFQVOxGZ
95xwmSSrG5swJLF+I6ZDRNmhIdMkQ5Lp26lHIe4Ln9MOGfLPKYEqdKCfGQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMlf/pD3Uq4M2PMzoDselwfqO1FnMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEveVZfLWtQZFNyZ3pZOHpPZ094NlhCLW83VVdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDArwoAwQC
Arw8AwQDArygAwQGArzAMA0GCSqGSIb3DQEBCwUAA4IBAQBTnnJ19RP8Z3W1tC6v
FzMgbppvv64xlXUagx1mxsT6WZchVzQNBnsnA3G1vfbCxZQKJ78kAJ/nMc3HahpK
2n1LerVf1Judl+NARrYKLMhU4ve24KKCqm55w9a4ozRMnfP6hzFAExWCdIitdNv0
eAMfG0rR6XPkwFcINdAWRGkiMK8hiJImsWNM7zCkPTra2FjzOSCkDgsrOTSsiy2i
wxCEGiKGJXAu3/tOIiDeX6UkHrtuMz17ovNsS8VxpptqkkH808L9ZW4/OGzQH1M5
fGCHs+hHxEcJAjSP78pmAAJ3NDJ+JTTuHpgEGOM0fvvgXIqFaX/IMyLxj6sSDZfA
wQ6n
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:46 2023 by rpki-client on console-ams.rpki-client.org