Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vXmMiPosEdZqxqNTDhDnJ3Afmoc.roa
File: vXmMiPosEdZqxqNTDhDnJ3Afmoc.roa (raw, json)
Hash identifier: Jn0YbueRJfg3BelQ4Vs2SulZQarEJJ2KivZd//o7Woc=
Subject key identifier: BD:79:8C:88:FA:2C:11:D6:6A:C6:A3:53:0E:10:E7:27:70:1F:9A:87
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01876B2B26346B2BF8E6EE579136EC7DAAA8
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vXmMiPosEdZqxqNTDhDnJ3Afmoc.roa
Signing time: Mon 10 Apr 2023 12:36:42 +0000
ROA not before: Mon 10 Apr 2023 12:36:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211804
IP address blocks: 188.132.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Apr 2023 01:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6b:2b:26:34:6b:2b:f8:e6:ee:57:91:36:ec:7d:aa:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 10 12:36:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd798c88fa2c11d66ac6a3530e10e727701f9a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:d2:5a:3a:a8:bf:18:9e:66:6f:27:81:1d:
a7:32:09:df:9f:ee:56:7d:53:c2:9e:31:9a:02:cd:
9f:82:1d:6e:1f:a4:f2:36:32:7e:f7:6b:bf:f8:61:
5d:7e:72:16:64:8b:92:81:44:b5:70:41:c9:6b:7b:
4d:8c:79:04:8f:54:97:92:2f:d7:1f:60:ce:32:9a:
23:1c:a1:f0:3c:31:b0:be:d0:19:ba:0f:a3:a6:cc:
a1:24:0a:05:1d:e8:a7:64:50:f9:25:c5:8e:68:a7:
a7:20:2f:78:08:94:4d:fd:6f:0b:1c:a5:a6:6a:8f:
b0:88:2b:29:2c:4b:fd:f8:1a:c9:16:9d:30:77:52:
5a:d1:e8:06:3e:bf:e2:c8:44:ad:3e:7c:2b:31:a7:
b9:51:3d:bb:d1:f3:ba:26:b8:56:d0:1f:7b:71:f1:
be:55:f7:c6:ef:d8:c6:dd:1b:73:66:e0:63:38:e2:
27:42:62:63:e7:a0:70:ac:39:0b:f8:69:14:2a:7d:
56:7a:0f:09:6d:d0:ba:fa:c0:30:4c:6b:f5:d1:ac:
dc:d1:3c:38:a6:aa:0a:2a:c7:54:57:67:6c:37:25:
35:c5:b8:fd:c2:d1:71:56:60:e0:b9:6d:e7:15:55:
8a:8b:0c:d4:31:ad:6e:ca:6d:a3:1d:cf:61:32:83:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:79:8C:88:FA:2C:11:D6:6A:C6:A3:53:0E:10:E7:27:70:1F:9A:87
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vXmMiPosEdZqxqNTDhDnJ3Afmoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:67:dd:4e:a4:d2:4e:cb:bc:b9:36:cf:06:e1:f0:83:36:49:
34:1f:87:36:02:f0:3c:c7:a2:b4:b9:0f:b2:c8:6d:83:a3:97:
f2:ac:ef:03:1b:46:c3:de:28:c9:42:e1:4a:33:7c:2e:f7:f2:
d6:bb:4d:8a:8d:41:c0:86:76:c6:e1:60:7f:53:36:c6:fd:36:
97:b1:29:6b:70:eb:96:30:11:86:c4:22:7a:f5:8e:f8:6e:4c:
37:2f:27:ba:bb:a6:09:41:2b:21:96:de:54:26:1a:ee:95:fd:
28:6b:60:7c:b2:32:4b:33:28:c1:dc:46:17:7b:e3:64:86:9f:
3c:ae:31:e7:20:53:1d:e3:a6:30:b8:56:b6:f9:2f:db:10:81:
47:93:45:02:92:3e:e7:99:96:80:ba:e1:f7:63:6e:53:23:80:
c2:f0:e1:5c:37:16:96:20:3a:8a:22:61:eb:0b:cd:28:b7:cc:
b1:e0:16:28:90:f1:3f:8a:83:0b:5c:82:31:9b:5b:cf:34:24:
27:80:a0:dd:cf:21:5c:2d:a5:a4:be:9f:cd:06:bd:cd:51:c9:
59:09:fa:38:7d:75:5d:ac:d4:ae:33:96:8a:75:80:eb:c9:96:
ce:6d:86:02:7d:71:60:f0:12:10:bb:8b:9b:39:6c:51:23:5f:
01:64:3f:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdrKyY0ayv45u5XkTbsfaqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwNDEwMTIzNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDc5OGM4OGZhMmMxMWQ2NmFjNmEzNTMwZTEwZTcyNzcwMWY5YTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKPSWjqovxieZm8ngR2nMgnfn+5W
fVPCnjGaAs2fgh1uH6TyNjJ+92u/+GFdfnIWZIuSgUS1cEHJa3tNjHkEj1SXki/X
H2DOMpojHKHwPDGwvtAZug+jpsyhJAoFHeinZFD5JcWOaKenIC94CJRN/W8LHKWm
ao+wiCspLEv9+BrJFp0wd1Ja0egGPr/iyEStPnwrMae5UT270fO6JrhW0B97cfG+
VffG79jG3RtzZuBjOOInQmJj56BwrDkL+GkUKn1Weg8JbdC6+sAwTGv10azc0Tw4
pqoKKsdUV2dsNyU1xbj9wtFxVmDguW3nFVWKiwzUMa1uym2jHc9hMoP+VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL15jIj6LBHWasajUw4Q5ydwH5qHMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvdlhtTWlQb3NFZFpxeHFOVERoRG5KM0FmbW9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISXMA0G
CSqGSIb3DQEBCwUAA4IBAQBNZ91OpNJOy7y5Ns8G4fCDNkk0H4c2AvA8x6K0uQ+y
yG2Do5fyrO8DG0bD3ijJQuFKM3wu9/LWu02KjUHAhnbG4WB/UzbG/TaXsSlrcOuW
MBGGxCJ69Y74bkw3Lye6u6YJQSshlt5UJhrulf0oa2B8sjJLMyjB3EYXe+Nkhp88
rjHnIFMd46YwuFa2+S/bEIFHk0UCkj7nmZaAuuH3Y25TI4DC8OFcNxaWIDqKImHr
C80ot8yx4BYokPE/ioMLXIIxm1vPNCQngKDdzyFcLaWkvp/NBr3NUclZCfo4fXVd
rNSuM5aKdYDryZbObYYCfXFg8BIQu4ubOWxRI18BZD+O
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org