Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2JaNk6Im_Q6kcJWLeLJ2ll7M-HU.roa
File: 2JaNk6Im_Q6kcJWLeLJ2ll7M-HU.roa (raw, json)
Hash identifier: gDgM/4WcSqsCgHLn7jixQ2TCNSpa9AZBi2/Rh/mYtuA=
Subject key identifier: D8:96:8D:93:A2:26:FD:0E:A4:70:95:8B:78:B2:76:96:5E:CC:F8:75
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0188A1DDDDFAD6DCE3AAE9D572CD82FBB14C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2JaNk6Im_Q6kcJWLeLJ2ll7M-HU.roa
Signing time: Fri 09 Jun 2023 20:34:12 +0000
ROA not before: Fri 09 Jun 2023 20:34:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211804
IP address blocks: 188.132.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 14:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a1:dd:dd:fa:d6:dc:e3:aa:e9:d5:72:cd:82:fb:b1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 9 20:34:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8968d93a226fd0ea470958b78b276965eccf875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:d7:15:8a:2f:3d:60:e6:06:1b:aa:18:90:
4c:44:8d:8f:f3:33:a3:83:e2:17:19:66:ea:73:88:
f5:04:d5:38:95:f5:bd:e6:62:fb:1a:8b:91:91:d1:
38:f1:df:bf:13:e5:05:f6:1e:0f:10:05:fd:cb:02:
3d:60:c2:2c:ea:62:c1:a4:a0:6b:18:4d:fb:2f:6f:
50:59:db:3d:d9:dd:43:5f:f5:19:d1:57:2c:56:8d:
8e:3f:2a:0a:75:ae:a5:b6:ef:5b:05:cc:14:84:47:
02:88:ad:be:5e:9d:b7:8f:76:2c:36:45:88:ea:ff:
2a:73:78:63:63:94:7d:09:6e:4f:f2:e4:ce:66:52:
1c:01:b4:b1:17:89:53:ca:e8:11:c2:44:14:70:3c:
12:06:00:37:0e:cf:ec:9a:88:4a:f8:c9:89:ae:04:
c4:d8:a3:20:94:38:2d:b6:d0:fe:d8:9f:32:19:8b:
98:6c:78:55:82:35:84:c2:49:cb:77:3e:5a:20:6b:
1a:14:96:81:f0:b9:14:18:89:80:0e:53:6b:7f:0c:
3b:34:63:6a:a5:4b:2c:1f:4c:75:03:1c:23:70:0a:
3f:ad:03:20:73:3f:5d:d0:f9:79:0b:f0:df:69:8e:
32:98:fc:02:a1:20:99:db:87:5b:67:2d:bd:2e:64:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:96:8D:93:A2:26:FD:0E:A4:70:95:8B:78:B2:76:96:5E:CC:F8:75
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2JaNk6Im_Q6kcJWLeLJ2ll7M-HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.129.0/24
Signature Algorithm: sha256WithRSAEncryption
77:06:4d:3f:20:45:75:66:b4:56:b5:5a:d0:fe:fc:43:be:4f:
40:a3:1f:4e:2f:1c:fc:f4:ef:f8:9c:ea:ba:f2:4b:f8:31:8c:
57:eb:5b:27:31:88:bb:07:0f:87:d2:a3:7e:a7:34:52:cd:8e:
bd:f8:ac:ae:0b:f0:6a:df:19:f9:92:23:8d:71:53:d6:22:fd:
95:88:5a:ca:ba:0e:94:33:9f:95:1d:f0:b8:9e:9e:f7:1f:c5:
94:da:02:7f:bf:80:72:27:0d:f0:f5:cf:c3:b2:1c:11:f5:8b:
5a:3a:09:a1:07:3a:25:79:0f:8f:32:98:03:0d:7f:a1:c2:f2:
e3:cb:57:2e:c1:2a:59:ef:d8:2a:3a:7b:50:c7:d0:9d:88:b6:
2a:9a:09:c6:7c:15:35:c3:78:6c:f0:b7:cd:3b:9a:22:e6:3f:
c0:a7:3c:4d:ff:23:64:9b:17:a1:74:c5:f7:be:69:f6:f2:c8:
c1:a3:dd:7b:f4:80:52:42:80:6c:0c:fb:fd:be:87:25:04:b0:
df:d9:22:ab:74:89:2d:73:cc:94:86:c7:99:96:33:53:33:ef:
c4:1a:07:f6:a6:e1:58:44:32:02:c3:ba:70:10:69:56:e3:3f:
ec:85:66:bc:7b:16:9f:d2:67:2f:d2:65:3a:17:97:e0:58:86:
93:26:da:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYih3d361tzjqunVcs2C+7FMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwNjA5MjAzNDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODk2OGQ5M2EyMjZmZDBlYTQ3MDk1OGI3OGIyNzY5NjVlY2NmODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBzXFYovPWDmBhuqGJBMRI2P8zOj
g+IXGWbqc4j1BNU4lfW95mL7GouRkdE48d+/E+UF9h4PEAX9ywI9YMIs6mLBpKBr
GE37L29QWds92d1DX/UZ0VcsVo2OPyoKda6ltu9bBcwUhEcCiK2+Xp23j3YsNkWI
6v8qc3hjY5R9CW5P8uTOZlIcAbSxF4lTyugRwkQUcDwSBgA3Ds/smohK+MmJrgTE
2KMglDgtttD+2J8yGYuYbHhVgjWEwknLdz5aIGsaFJaB8LkUGImADlNrfww7NGNq
pUssH0x1AxwjcAo/rQMgcz9d0Pl5C/DfaY4ymPwCoSCZ24dbZy29LmTEvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNiWjZOiJv0OpHCVi3iydpZezPh1MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvMkphTms2SW1fUTZrY0pXTGVMSjJsbDdNLUhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISBMA0G
CSqGSIb3DQEBCwUAA4IBAQB3Bk0/IEV1ZrRWtVrQ/vxDvk9Aox9OLxz89O/4nOq6
8kv4MYxX61snMYi7Bw+H0qN+pzRSzY69+KyuC/Bq3xn5kiONcVPWIv2ViFrKug6U
M5+VHfC4np73H8WU2gJ/v4ByJw3w9c/DshwR9YtaOgmhBzoleQ+PMpgDDX+hwvLj
y1cuwSpZ79gqOntQx9CdiLYqmgnGfBU1w3hs8LfNO5oi5j/ApzxN/yNkmxehdMX3
vmn28sjBo9179IBSQoBsDPv9voclBLDf2SKrdIktc8yUhseZljNTM+/EGgf2puFY
RDICw7pwEGlW4z/shWa8exaf0mcv0mU6F5fgWIaTJtpe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org