Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/n-otUwk5KdPcWhmAc3-C8f5uAt4.roa
File: n-otUwk5KdPcWhmAc3-C8f5uAt4.roa (raw, json)
Hash identifier: ZknBbH80owGc5W4np/gwS2eKFlTdCQ2Go1gnfgkE0iY=
Subject key identifier: 9F:EA:2D:53:09:39:29:D3:DC:5A:19:80:73:7F:82:F1:FE:6E:02:DE
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018570029D444FADD560ABCCC1AC6CABECB5
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/n-otUwk5KdPcWhmAc3-C8f5uAt4.roa
Signing time: Mon 02 Jan 2023 01:04:57 +0000
ROA not before: Mon 02 Jan 2023 01:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211804
IP address blocks: 188.132.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Feb 2023 19:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:9d:44:4f:ad:d5:60:ab:cc:c1:ac:6c:ab:ec:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fea2d53093929d3dc5a1980737f82f1fe6e02de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:8a:02:62:81:20:6f:90:67:75:21:60:d7:
f9:8d:73:04:8d:d8:a1:c8:8f:f4:b3:12:00:95:8b:
e3:4c:e6:63:b5:63:93:31:fc:9b:9d:71:73:91:7f:
8b:e1:41:aa:a6:a4:85:a8:4a:2e:9e:01:fc:42:ec:
2f:45:c1:0f:d7:af:bc:7c:63:24:5d:0b:ef:8e:32:
de:c2:a2:22:04:22:9c:52:4e:c5:0c:d6:a0:be:fd:
28:6d:82:96:8b:20:ce:0d:a7:f4:d9:8a:ac:18:41:
23:88:e4:5f:69:8c:11:41:b4:79:d2:54:3f:22:5c:
b8:fe:72:4a:ce:0c:aa:60:9d:47:fe:66:30:9d:f5:
b6:6f:a9:b0:fa:47:7c:ae:86:d2:ca:fa:80:a8:7e:
9c:6f:92:cd:14:eb:e5:af:e2:14:79:46:c7:24:83:
ea:9a:b4:6c:62:d2:db:d1:c9:29:8b:7d:5e:9f:0c:
d3:cc:2a:76:fe:b4:a2:9e:75:3e:22:cc:31:ac:85:
19:9c:a1:54:ba:fc:98:43:3d:53:79:d8:1e:ad:47:
6e:96:5a:57:90:4b:d8:66:a7:da:5a:d9:54:73:17:
d8:40:72:f4:3c:33:a8:90:3d:fd:4a:b4:c9:10:7e:
e2:8f:89:d6:d1:99:42:93:79:21:7e:d6:c7:47:63:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EA:2D:53:09:39:29:D3:DC:5A:19:80:73:7F:82:F1:FE:6E:02:DE
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/n-otUwk5KdPcWhmAc3-C8f5uAt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.151.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:25:41:2e:39:08:d9:0f:21:10:07:46:80:87:9c:8a:2c:c5:
ea:b7:79:b5:61:8b:c0:d3:36:e9:f2:23:19:82:5a:5b:27:86:
27:8b:be:ed:93:cf:5b:f8:ae:76:05:1d:38:3a:52:20:8e:e3:
4a:04:6e:34:05:4b:bc:93:2e:94:59:6e:71:44:c1:7f:e2:db:
02:37:0f:6e:0b:f9:52:6b:7a:38:98:5c:a1:a8:11:4a:72:fb:
ea:68:a4:5e:4b:c0:14:09:e6:d1:3c:d3:3e:03:70:98:4b:ef:
dd:ed:09:af:fe:48:4f:c4:10:f1:74:15:ce:80:fb:12:bf:7c:
4b:a4:89:d0:6d:8b:45:38:26:f0:9f:cb:b6:64:17:7a:84:80:
ca:4e:08:19:a1:a3:05:ca:82:85:7a:f5:c8:17:d0:30:70:f5:
f0:9c:12:8d:6e:dc:48:e9:07:bc:36:4d:24:99:6b:e4:40:2b:
f3:41:e7:28:e4:b6:b3:0c:cc:c2:83:9b:58:02:63:9a:cc:3d:
ab:a9:bb:19:87:0e:7d:2c:74:e4:b6:2f:9b:5e:7b:d5:6b:ae:
1e:4e:3a:80:8e:e8:c6:88:d1:b8:cf:4b:4b:55:db:9d:26:22:
4e:61:7b:42:fe:64:9a:fb:f9:2e:a4:1f:1a:ab:92:1c:10:8d:
25:22:e5:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwAp1ET63VYKvMwaxsq+y1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwMTAyMDEwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmVhMmQ1MzA5MzkyOWQzZGM1YTE5ODA3MzdmODJmMWZlNmUwMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUSKAmKBIG+QZ3UhYNf5jXMEjdih
yI/0sxIAlYvjTOZjtWOTMfybnXFzkX+L4UGqpqSFqEoungH8QuwvRcEP16+8fGMk
XQvvjjLewqIiBCKcUk7FDNagvv0obYKWiyDODaf02YqsGEEjiORfaYwRQbR50lQ/
Ily4/nJKzgyqYJ1H/mYwnfW2b6mw+kd8robSyvqAqH6cb5LNFOvlr+IUeUbHJIPq
mrRsYtLb0ckpi31enwzTzCp2/rSinnU+IswxrIUZnKFUuvyYQz1TedgerUdullpX
kEvYZqfaWtlUcxfYQHL0PDOokD39SrTJEH7ij4nW0ZlCk3khftbHR2PojwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ/qLVMJOSnT3FoZgHN/gvH+bgLeMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvbi1vdFV3azVLZFBjV2htQWMzLUM4ZjV1QXQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISXMA0G
CSqGSIb3DQEBCwUAA4IBAQCKJUEuOQjZDyEQB0aAh5yKLMXqt3m1YYvA0zbp8iMZ
glpbJ4Yni77tk89b+K52BR04OlIgjuNKBG40BUu8ky6UWW5xRMF/4tsCNw9uC/lS
a3o4mFyhqBFKcvvqaKReS8AUCebRPNM+A3CYS+/d7Qmv/khPxBDxdBXOgPsSv3xL
pInQbYtFOCbwn8u2ZBd6hIDKTggZoaMFyoKFevXIF9AwcPXwnBKNbtxI6Qe8Nk0k
mWvkQCvzQeco5LazDMzCg5tYAmOazD2rqbsZhw59LHTkti+bXnvVa64eTjqAjujG
iNG4z0tLVdudJiJOYXtC/mSa+/kupB8aq5IcEI0lIuXL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org