Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/q3v4L-kFjNhk9KwCb_cmiHL4S-Y.roa
File: q3v4L-kFjNhk9KwCb_cmiHL4S-Y.roa (raw, json)
Hash identifier: Orva6ZELPL0/yZ8amuY10oTB3JrhBwz0+0o0xO/s6fo=
Subject key identifier: AB:7B:F8:2F:E9:05:8C:D8:64:F4:AC:02:6F:F7:26:88:72:F8:4B:E6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018767D321B002395630F2A6D906244013E6
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/q3v4L-kFjNhk9KwCb_cmiHL4S-Y.roa
Signing time: Sun 09 Apr 2023 21:01:42 +0000
ROA not before: Sun 09 Apr 2023 21:01:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211804
IP address blocks: 188.132.151.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Apr 2023 12:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:67:d3:21:b0:02:39:56:30:f2:a6:d9:06:24:40:13:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 9 21:01:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab7bf82fe9058cd864f4ac026ff7268872f84be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:30:7d:e9:e0:28:d1:e0:07:42:9c:6c:20:
01:69:0f:b7:05:74:3e:32:6b:8e:44:e2:7e:e0:7b:
35:c6:78:86:bd:dc:aa:5e:64:28:9d:39:a0:6e:b6:
fe:61:49:d4:ce:dc:fa:89:03:61:6b:df:ad:84:42:
69:61:54:4b:2e:48:5c:e0:bf:9f:47:9a:76:fe:80:
df:19:8d:36:0d:6d:db:c0:db:88:1a:1c:58:c7:b0:
01:a6:ac:ac:b6:86:51:87:92:e1:c9:12:70:0f:10:
33:6f:e9:62:b9:bc:12:b6:a7:bb:15:92:c1:b1:4b:
1a:e1:87:2b:a3:7e:0c:f9:81:ed:3a:67:18:ef:60:
4c:9b:ff:e3:6d:e9:1c:72:e8:a1:4e:04:a9:2d:4f:
5d:06:f9:f4:1e:7c:5d:48:d0:e8:59:73:03:6c:05:
9b:e7:81:1e:6b:71:53:a3:a9:66:8e:6a:86:0e:4b:
4f:7d:92:dd:b7:63:c3:f0:10:e9:ba:69:ec:ca:82:
fc:43:41:96:d8:b7:9a:e5:b3:6a:f3:79:43:30:b7:
11:c9:c0:e8:23:85:68:99:e6:d0:bc:1e:23:3c:f9:
e3:3d:77:4b:35:4b:9b:8f:af:3a:ab:28:7a:08:ce:
56:2f:5b:ee:ae:78:0c:b0:7d:c2:81:cb:24:bf:bf:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7B:F8:2F:E9:05:8C:D8:64:F4:AC:02:6F:F7:26:88:72:F8:4B:E6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/q3v4L-kFjNhk9KwCb_cmiHL4S-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.151.0/24
188.132.168.0/24
188.132.186.0/24
Signature Algorithm: sha256WithRSAEncryption
12:da:a6:1f:c8:ba:03:a8:c0:45:28:4a:61:ed:41:14:48:6e:
c2:f8:72:d1:72:83:39:93:d0:cf:e1:1f:8f:a8:e8:86:9e:3f:
fe:ce:fb:90:6a:82:b4:b5:08:bf:bf:8e:c5:5f:8f:ab:ed:70:
e5:21:a9:d0:14:8f:f9:a9:24:17:6d:a1:7b:17:f0:38:6f:b2:
ca:65:8b:ba:29:b6:c9:72:43:4e:9c:e6:0f:95:a7:7f:31:54:
9c:27:23:de:da:66:50:4c:90:0c:1e:7a:b7:9a:75:b5:c7:55:
40:80:fb:c8:ec:e7:df:cc:89:d2:0c:73:7d:3b:65:e4:22:8a:
2f:50:f6:47:c0:ed:70:7f:6a:1c:8e:3d:a7:7f:91:ca:4e:bd:
d3:c8:eb:2e:7c:b0:8e:6d:44:53:39:5e:a6:8e:d7:bd:9d:01:
58:88:b8:e5:f2:d3:8d:db:be:82:84:1e:8e:a6:1d:e8:78:8c:
3e:4e:b9:8d:29:b1:06:d5:26:50:88:c6:a1:bc:12:41:5e:0d:
96:08:f1:c2:6d:df:f6:b7:2f:0e:1d:df:2f:96:76:ef:b1:2a:
94:64:92:1f:76:54:c9:59:dd:0b:7e:d0:d6:bb:d6:11:66:64:
81:8c:e7:38:fc:af:4b:eb:76:00:00:69:e4:48:51:4b:4c:7e:
c6:e3:dd:5f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYdn0yGwAjlWMPKm2QYkQBPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwNDA5MjEwMTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjdiZjgyZmU5MDU4Y2Q4NjRmNGFjMDI2ZmY3MjY4ODcyZjg0YmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsgwfengKNHgB0KcbCABaQ+3BXQ+
MmuOROJ+4Hs1xniGvdyqXmQonTmgbrb+YUnUztz6iQNha9+thEJpYVRLLkhc4L+f
R5p2/oDfGY02DW3bwNuIGhxYx7ABpqystoZRh5LhyRJwDxAzb+liubwStqe7FZLB
sUsa4Ycro34M+YHtOmcY72BMm//jbekccuihTgSpLU9dBvn0HnxdSNDoWXMDbAWb
54Eea3FTo6lmjmqGDktPfZLdt2PD8BDpumnsyoL8Q0GW2Lea5bNq83lDMLcRycDo
I4VomebQvB4jPPnjPXdLNUubj686qyh6CM5WL1vurngMsH3Cgcskv7/HywIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKt7+C/pBYzYZPSsAm/3Johy+EvmMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvcTN2NEwta0ZqTmhrOUt3Q2JfY21pSEw0Uy1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvISXAwQA
vISoAwQAvIS6MA0GCSqGSIb3DQEBCwUAA4IBAQAS2qYfyLoDqMBFKEph7UEUSG7C
+HLRcoM5k9DP4R+PqOiGnj/+zvuQaoK0tQi/v47FX4+r7XDlIanQFI/5qSQXbaF7
F/A4b7LKZYu6KbbJckNOnOYPlad/MVScJyPe2mZQTJAMHnq3mnW1x1VAgPvI7Off
zInSDHN9O2XkIoovUPZHwO1wf2ocjj2nf5HKTr3TyOsufLCObURTOV6mjte9nQFY
iLjl8tON276ChB6Oph3oeIw+TrmNKbEG1SZQiMahvBJBXg2WCPHCbd/2ty8OHd8v
lnbvsSqUZJIfdlTJWd0LftDWu9YRZmSBjOc4/K9L63YAAGnkSFFLTH7G491f
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org