Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gr2RZND7esLYpkkRmatD9bwpmvU.roa
File: gr2RZND7esLYpkkRmatD9bwpmvU.roa (raw, json)
Hash identifier: uc1zlNT3sNt/1E7l7/KII5d+mP2NNGRgN+WfCOp3TLU=
Subject key identifier: 82:BD:91:64:D0:FB:7A:C2:D8:A6:49:11:99:AB:43:F5:BC:29:9A:F5
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018713F52AFA449A4498727A91A8A0FAD910
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gr2RZND7esLYpkkRmatD9bwpmvU.roa
Signing time: Fri 24 Mar 2023 14:10:47 +0000
ROA not before: Fri 24 Mar 2023 14:10:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62077
IP address blocks: 188.132.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:f5:2a:fa:44:9a:44:98:72:7a:91:a8:a0:fa:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 24 14:10:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82bd9164d0fb7ac2d8a6491199ab43f5bc299af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:08:14:24:99:16:17:3e:ed:b7:28:c9:ae:
9d:eb:5d:88:bb:c9:f0:50:91:b3:5c:0f:a7:56:32:
37:83:08:6a:d5:d4:c8:ee:81:d4:f6:d7:f1:33:85:
a7:75:da:6b:44:54:d3:c5:e3:e5:98:95:5a:c8:63:
59:e9:bf:3e:07:bf:c5:6e:e3:44:53:6d:63:7e:21:
85:29:90:bd:69:dd:64:a4:7a:28:50:7a:e2:26:4a:
31:4f:67:a3:15:ef:7d:61:39:76:38:02:2e:4d:c4:
94:4e:be:db:f4:af:b6:d1:f2:4d:55:07:4c:3d:76:
a6:95:94:67:87:6f:2c:d8:23:e8:cd:a6:d8:63:4a:
e1:13:e0:1e:ed:5c:24:97:f6:95:74:39:f9:d1:e2:
c5:73:31:bb:a9:b4:70:8f:d7:bd:90:41:06:06:63:
b2:8f:28:b2:24:6b:4e:97:ac:a6:f6:8e:c0:da:65:
a3:aa:a4:ef:42:c8:8f:82:c5:07:37:81:d7:99:7f:
51:47:44:5c:41:99:69:7d:4a:93:8b:db:32:6f:11:
2c:5f:f2:e9:ed:2f:03:da:01:49:0d:28:44:9a:c5:
92:d5:fa:d8:9b:7a:df:b5:49:be:bc:86:d3:6f:ed:
41:75:e8:12:9a:31:0b:4b:4f:e8:53:a5:97:d8:eb:
1b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BD:91:64:D0:FB:7A:C2:D8:A6:49:11:99:AB:43:F5:BC:29:9A:F5
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gr2RZND7esLYpkkRmatD9bwpmvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.178.0/24
Signature Algorithm: sha256WithRSAEncryption
64:1c:64:c0:04:16:a2:ba:1c:7e:1a:db:4b:6f:62:70:c5:4e:
b7:69:09:c7:c8:09:94:50:dc:26:7a:75:18:d2:28:30:5c:f3:
19:4b:ea:6b:f9:24:22:aa:d0:4e:8c:b3:64:06:ce:d4:fe:dc:
26:ba:fe:1f:2b:0a:c1:f1:eb:7c:42:4f:f4:6f:c7:71:20:3a:
3d:1a:be:87:41:56:7b:70:76:d5:86:bf:6a:df:4e:f3:c4:3d:
d8:74:71:2b:e4:01:40:fb:0f:3f:6b:b8:95:9c:0a:6b:31:91:
a1:1d:fe:41:75:3b:b5:62:b6:7c:b1:0a:31:ea:d5:bf:95:15:
2a:fa:84:fe:7c:31:d7:f6:e7:1a:83:1d:37:1e:4b:46:66:b0:
1f:1a:99:6e:ec:8d:c7:6c:da:ae:0b:97:ae:ab:62:f0:08:6c:
72:82:41:a5:d1:9c:54:3c:f1:bc:29:65:66:9d:4a:eb:2a:ba:
29:ef:3e:8f:71:f6:3b:c8:25:6c:2a:4b:c4:67:04:ba:3c:97:
6d:0c:39:c1:cf:9e:c3:38:c3:f6:52:bc:88:0b:e0:3e:7e:e9:
9c:b7:ca:e6:dd:45:7a:db:20:e1:2c:24:b5:d8:6b:8d:97:d1:
83:47:5a:8f:2a:53:2f:9f:a9:61:dc:8d:38:43:d1:be:ea:f5:
d9:ed:d1:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcT9Sr6RJpEmHJ6kaig+tkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwMzI0MTQxMDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmJkOTE2NGQwZmI3YWMyZDhhNjQ5MTE5OWFiNDNmNWJjMjk5YWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhwIFCSZFhc+7bcoya6d612Iu8nw
UJGzXA+nVjI3gwhq1dTI7oHU9tfxM4WnddprRFTTxePlmJVayGNZ6b8+B7/FbuNE
U21jfiGFKZC9ad1kpHooUHriJkoxT2ejFe99YTl2OAIuTcSUTr7b9K+20fJNVQdM
PXamlZRnh28s2CPozabYY0rhE+Ae7Vwkl/aVdDn50eLFczG7qbRwj9e9kEEGBmOy
jyiyJGtOl6ym9o7A2mWjqqTvQsiPgsUHN4HXmX9RR0RcQZlpfUqTi9sybxEsX/Lp
7S8D2gFJDShEmsWS1frYm3rftUm+vIbTb+1BdegSmjELS0/oU6WX2OsbwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIK9kWTQ+3rC2KZJEZmrQ/W8KZr1MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvZ3IyUlpORDdlc0xZcGtrUm1hdEQ5YndwbXZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISyMA0G
CSqGSIb3DQEBCwUAA4IBAQBkHGTABBaiuhx+GttLb2JwxU63aQnHyAmUUNwmenUY
0igwXPMZS+pr+SQiqtBOjLNkBs7U/twmuv4fKwrB8et8Qk/0b8dxIDo9Gr6HQVZ7
cHbVhr9q307zxD3YdHEr5AFA+w8/a7iVnAprMZGhHf5BdTu1YrZ8sQox6tW/lRUq
+oT+fDHX9ucagx03HktGZrAfGplu7I3HbNquC5euq2LwCGxygkGl0ZxUPPG8KWVm
nUrrKrop7z6PcfY7yCVsKkvEZwS6PJdtDDnBz57DOMP2UryIC+A+fumct8rm3UV6
2yDhLCS12GuNl9GDR1qPKlMvn6lh3I04Q9G+6vXZ7dHN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org