Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/iiHmfqV1k73HhHz7MV8IUxcmpzM.roa
File: iiHmfqV1k73HhHz7MV8IUxcmpzM.roa (raw, json)
Hash identifier: Q3iZww4TjWTeJ/wpWEfN7lR+SjEznbFTJCoGi96w188=
Subject key identifier: 8A:21:E6:7E:A5:75:93:BD:C7:84:7C:FB:31:5F:08:53:17:26:A7:33
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019146679C9AA042DC2C4C59FAB32B269C51
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/iiHmfqV1k73HhHz7MV8IUxcmpzM.roa
Signing time: Mon 12 Aug 2024 11:44:40 +0000
ROA not before: Mon 12 Aug 2024 11:44:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214447
IP address blocks: 188.132.212.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 22:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:67:9c:9a:a0:42:dc:2c:4c:59:fa:b3:2b:26:9c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 12 11:44:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a21e67ea57593bdc7847cfb315f08531726a733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:84:87:dc:18:13:0a:9a:89:ed:f1:77:98:38:
fe:c5:2f:37:dc:49:28:a4:57:6c:f7:64:be:c3:6f:
26:6f:db:54:f1:84:12:9a:e4:5b:fa:13:9c:14:82:
9f:85:42:f2:c2:40:4a:3f:73:5d:d6:b2:ac:8f:bf:
c0:d8:c4:60:11:89:b3:f6:c3:48:6d:a3:13:c6:65:
46:53:1a:0f:45:eb:24:f4:40:25:c5:03:61:3a:0a:
6d:a4:f3:37:24:f1:32:a5:75:a6:7c:49:d4:a1:a0:
9b:75:a4:38:ce:14:30:1e:1a:2c:8e:47:8d:e0:f8:
e0:9f:9d:7a:65:80:9f:bc:02:15:2f:8f:80:b4:80:
6b:e9:ed:e5:a5:e6:0f:10:cc:fa:a0:a9:7d:36:0d:
9a:97:cc:ff:e9:cb:9e:4b:67:24:3f:93:5e:4d:0d:
3f:22:7f:e3:29:5e:ec:0e:ca:80:0e:5d:5a:16:0f:
47:9c:07:85:98:4b:ef:20:21:90:25:80:89:54:df:
b9:86:7f:ef:0e:cc:6f:e9:6e:91:19:98:13:64:3d:
95:3a:90:04:58:2d:a3:f7:d2:cf:5a:26:2d:2f:92:
29:21:64:97:28:cd:1a:28:67:cb:eb:49:a0:76:ca:
ab:e2:12:0a:ec:f1:47:eb:65:a7:67:8d:78:b5:4f:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:21:E6:7E:A5:75:93:BD:C7:84:7C:FB:31:5F:08:53:17:26:A7:33
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/iiHmfqV1k73HhHz7MV8IUxcmpzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.212.0/23
Signature Algorithm: sha256WithRSAEncryption
10:46:55:fb:fe:3c:41:d0:5d:5b:1d:ab:4c:ab:ad:c1:e6:c1:
18:65:a4:e2:05:5b:1e:31:ec:a7:2b:8d:f6:a6:7c:76:e2:da:
5e:f9:62:a6:42:fc:a6:69:e5:04:c7:5e:19:81:39:7a:e2:07:
63:ed:c0:46:c3:8a:0d:b1:66:08:0a:60:29:f9:a2:90:a0:0a:
c7:c5:3b:27:a8:f4:7b:e2:19:e3:f1:10:d5:3b:c7:81:52:71:
da:7d:0c:72:e0:5e:fa:92:1b:1f:66:b5:26:b6:3d:ef:3b:f3:
2f:0b:3c:5d:f3:6a:62:81:68:82:5e:3c:7c:7a:0a:64:1f:2b:
ed:a2:a8:ce:bb:e6:d2:ab:86:92:ba:93:17:8c:4a:c5:ef:26:
dd:c7:71:68:1a:29:2c:0d:5c:56:bd:c3:0f:7a:1c:be:ec:b6:
a7:96:f6:c4:40:22:4b:7e:c9:04:73:3a:68:73:65:5e:de:d0:
0f:27:a5:39:90:6f:c2:22:52:d3:b3:57:7e:60:9e:10:77:95:
9d:83:e3:e1:25:72:13:32:5d:28:11:44:17:86:40:e6:4d:bd:
b2:c6:7a:32:bc:44:f8:68:28:0f:fe:9f:e1:b8:e6:c3:fe:a9:
b7:30:4f:3e:05:e6:6b:bb:72:ef:3e:1e:fa:dc:6f:73:63:78:
4a:af:ef:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFGZ5yaoELcLExZ+rMrJpxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwODEyMTE0NDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTIxZTY3ZWE1NzU5M2JkYzc4NDdjZmIzMTVmMDg1MzE3MjZhNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44SH3BgTCpqJ7fF3mDj+xS833Eko
pFds92S+w28mb9tU8YQSmuRb+hOcFIKfhULywkBKP3Nd1rKsj7/A2MRgEYmz9sNI
baMTxmVGUxoPResk9EAlxQNhOgptpPM3JPEypXWmfEnUoaCbdaQ4zhQwHhosjkeN
4Pjgn516ZYCfvAIVL4+AtIBr6e3lpeYPEMz6oKl9Ng2al8z/6cueS2ckP5NeTQ0/
In/jKV7sDsqADl1aFg9HnAeFmEvvICGQJYCJVN+5hn/vDsxv6W6RGZgTZD2VOpAE
WC2j99LPWiYtL5IpIWSXKM0aKGfL60mgdsqr4hIK7PFH62WnZ414tU/hbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIoh5n6ldZO9x4R8+zFfCFMXJqczMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvaWlIbWZxVjFrNzNIaEh6N01WOElVeGNtcHpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvITUMA0G
CSqGSIb3DQEBCwUAA4IBAQAQRlX7/jxB0F1bHatMq63B5sEYZaTiBVseMeynK432
pnx24tpe+WKmQvymaeUEx14ZgTl64gdj7cBGw4oNsWYICmAp+aKQoArHxTsnqPR7
4hnj8RDVO8eBUnHafQxy4F76khsfZrUmtj3vO/MvCzxd82pigWiCXjx8egpkHyvt
oqjOu+bSq4aSupMXjErF7ybdx3FoGiksDVxWvcMPehy+7LanlvbEQCJLfskEczpo
c2Ve3tAPJ6U5kG/CIlLTs1d+YJ4Qd5Wdg+PhJXITMl0oEUQXhkDmTb2yxnoyvET4
aCgP/p/huObD/qm3ME8+BeZru3LvPh763G9zY3hKr+/o
-----END CERTIFICATE-----
Generated at Thu Sep 5 23:28:45 2024 by rpki-client on console-ams.rpki-client.org