Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fFAcMs2HSxL0yHNeWBnU3dXxNfs.roa
File: fFAcMs2HSxL0yHNeWBnU3dXxNfs.roa (raw, json)
Hash identifier: nQ2HOkE1RMTHdOjdHNHKI7kzZqiOiKLtfxT1UO5hl0U=
Subject key identifier: 7C:50:1C:32:CD:87:4B:12:F4:C8:73:5E:58:19:D4:DD:D5:F1:35:FB
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746BAF3B0219B5516C0A56F2138A176
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fFAcMs2HSxL0yHNeWBnU3dXxNfs.roa
Signing time: Thu 02 Jan 2025 13:48:54 +0000
ROA not before: Thu 02 Jan 2025 13:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213274
IP address blocks: 188.132.216.0/24 maxlen: 24
188.132.217.0/24 maxlen: 24
188.132.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 19:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:ba:f3:b0:21:9b:55:16:c0:a5:6f:21:38:a1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c501c32cd874b12f4c8735e5819d4ddd5f135fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:88:fc:b8:8b:2e:87:2b:33:c7:eb:3e:c8:60:
17:df:34:b1:b4:52:25:40:82:fe:a2:eb:96:54:f8:
68:38:1f:5c:55:60:11:50:87:e5:20:00:c2:d8:63:
97:6b:15:11:c1:91:0b:a1:d9:ed:d7:e1:72:30:c9:
9f:ff:1a:71:a3:a3:02:ce:8d:79:7e:4e:91:ce:32:
91:94:a1:fb:5c:f2:97:42:af:0b:48:66:1a:0c:5b:
fb:e0:e1:a0:e9:50:da:18:ec:65:d4:b8:7d:42:8f:
2a:9f:7b:1c:b2:83:53:88:08:e9:4a:a2:d7:46:95:
41:79:e0:9c:9b:f5:ee:fc:35:0a:a9:53:22:17:b3:
77:98:f1:68:37:19:b9:90:f6:1b:4a:24:73:6e:19:
9e:39:5d:bb:8a:20:a7:e7:f3:38:f9:4c:f0:a3:5f:
3f:34:55:92:29:f0:9f:8b:c0:40:b7:ae:48:77:d5:
ec:51:1a:58:bb:6a:dc:51:02:c6:3e:9f:e2:46:52:
72:fc:aa:c4:33:47:ac:05:98:41:4f:b6:01:7c:ad:
e9:85:cd:e9:fd:d2:a2:0c:85:60:11:b9:c6:fb:92:
f2:45:4e:a2:46:85:28:9d:e8:6c:89:11:04:3e:c0:
c4:9f:12:a8:e9:15:ad:6a:c5:93:73:ac:f2:f7:f5:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:50:1C:32:CD:87:4B:12:F4:C8:73:5E:58:19:D4:DD:D5:F1:35:FB
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fFAcMs2HSxL0yHNeWBnU3dXxNfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.216.0-188.132.218.255
Signature Algorithm: sha256WithRSAEncryption
39:95:b2:38:24:79:9d:84:1b:4c:d3:eb:8b:35:f5:3b:d2:e1:
9f:25:15:ba:e5:7a:ac:9d:9c:78:25:64:45:93:01:c9:a9:45:
e3:f0:4f:51:59:a2:2f:2f:81:17:39:2c:50:ef:72:a0:d6:c3:
dc:04:bd:ac:da:bb:b2:a4:f2:4d:d8:84:41:b0:79:c6:a8:90:
8c:41:98:f8:8f:1e:dd:87:a6:d9:a6:16:8d:e4:70:f2:c0:9b:
fb:30:26:65:56:30:36:2e:36:72:84:ca:ac:16:ca:19:82:cf:
c2:87:04:ba:ba:09:ba:7d:5b:68:8c:5b:a7:5d:74:28:75:bc:
da:47:c0:3b:e4:3d:2d:27:23:80:6f:a6:31:7d:f3:ca:7b:61:
dc:37:bf:8a:18:bb:7b:e3:46:9d:d8:59:39:f4:a5:7c:1e:89:
81:39:54:62:51:d8:8f:41:7c:25:a6:1f:ba:6c:5b:5d:82:61:
39:33:69:d0:36:71:72:5a:66:56:e6:cd:7d:3f:cc:40:2b:04:
e1:3b:5b:d0:4f:22:63:63:05:3a:59:f9:25:d9:eb:87:06:14:
ed:f7:d9:8d:d5:83:69:b5:12:a8:3b:1d:bf:49:da:47:91:c8:
07:c0:9a:94:90:2b:69:1d:1d:dd:1a:3a:16:ff:2c:e4:08:f8:
1a:1e:4a:c2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQnRrrzsCGbVRbApW8hOKF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMTAyMTM0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzUwMWMzMmNkODc0YjEyZjRjODczNWU1ODE5ZDRkZGQ1ZjEzNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oj8uIsuhyszx+s+yGAX3zSxtFIl
QIL+ouuWVPhoOB9cVWARUIflIADC2GOXaxURwZELodnt1+FyMMmf/xpxo6MCzo15
fk6RzjKRlKH7XPKXQq8LSGYaDFv74OGg6VDaGOxl1Lh9Qo8qn3scsoNTiAjpSqLX
RpVBeeCcm/Xu/DUKqVMiF7N3mPFoNxm5kPYbSiRzbhmeOV27iiCn5/M4+Uzwo18/
NFWSKfCfi8BAt65Id9XsURpYu2rcUQLGPp/iRlJy/KrEM0esBZhBT7YBfK3phc3p
/dKiDIVgEbnG+5LyRU6iRoUonehsiREEPsDEnxKo6RWtasWTc6zy9/XRlQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHxQHDLNh0sS9MhzXlgZ1N3V8TX7MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvZkZBY01zMkhTeEwweUhOZVdCblUzZFh4TmZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO8hNgD
BAC8hNowDQYJKoZIhvcNAQELBQADggEBADmVsjgkeZ2EG0zT64s19TvS4Z8lFbrl
eqydnHglZEWTAcmpRePwT1FZoi8vgRc5LFDvcqDWw9wEvazau7Kk8k3YhEGwecao
kIxBmPiPHt2HptmmFo3kcPLAm/swJmVWMDYuNnKEyqwWyhmCz8KHBLq6Cbp9W2iM
W6dddCh1vNpHwDvkPS0nI4BvpjF988p7Ydw3v4oYu3vjRp3YWTn0pXweiYE5VGJR
2I9BfCWmH7psW12CYTkzadA2cXJaZlbmzX0/zEArBOE7W9BPImNjBTpZ+SXZ64cG
FO332Y3Vg2m1Eqg7Hb9J2keRyAfAmpSQK2kdHd0aOhb/LOQI+BoeSsI=
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:52:58 2025 by rpki-client