Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/2OIvI09nb2JcneXz7P7-MSOygzg.roa
File: 2OIvI09nb2JcneXz7P7-MSOygzg.roa (raw, json)
Hash identifier: r2by/vZRXw71ON9BX307NdsBwBW5Z0LvUF6NQDNfW7E=
Subject key identifier: D8:E2:2F:23:4F:67:6F:62:5C:9D:E5:F3:EC:FE:FE:31:23:B2:83:38
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018823416A39AA881F612090BF36ED67FE84
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/2OIvI09nb2JcneXz7P7-MSOygzg.roa
Signing time: Tue 16 May 2023 06:31:09 +0000
ROA not before: Tue 16 May 2023 06:31:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.191.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 May 2023 03:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:41:6a:39:aa:88:1f:61:20:90:bf:36:ed:67:fe:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: May 16 06:31:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8e22f234f676f625c9de5f3ecfefe3123b28338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:62:b6:22:49:d9:aa:05:e0:92:a6:ee:cf:
ab:75:77:e6:e4:ef:d1:17:b5:03:6a:15:30:bf:7e:
2c:4c:b9:56:ec:b3:99:54:1b:a3:26:5b:fc:29:ed:
86:3d:25:3d:e5:0d:be:69:99:e9:6b:36:f6:e3:eb:
11:c9:12:6b:89:93:9b:16:94:b2:1f:10:22:c3:8e:
7f:52:92:63:7e:c4:3a:fd:00:80:92:0a:a4:30:1b:
2d:53:79:d8:f2:6f:ce:95:b3:e7:47:9d:cf:ee:79:
fa:64:01:15:a7:bd:88:81:b1:ba:7f:5a:73:a0:ba:
e6:64:fc:97:25:3c:17:c8:35:5b:c0:d0:fb:b8:ad:
2f:6c:fe:b3:7d:a8:9f:ce:3e:1d:f5:88:a0:68:55:
8f:04:83:ee:8f:de:8b:d2:39:fe:1a:b6:fa:76:69:
20:14:cd:9b:15:87:d7:06:09:7b:ad:e2:2a:89:e5:
fd:cd:65:34:41:19:ee:71:d4:db:18:49:f9:81:10:
96:d3:f7:df:7c:9c:95:a7:9b:93:8a:6b:b8:6c:5b:
61:c5:7e:ea:37:4a:c2:d7:f7:bf:7f:97:58:39:76:
70:af:96:0e:b0:72:5b:01:cf:7d:17:6f:88:a5:84:
db:e6:2f:5b:f6:55:28:a9:6c:e3:3d:3d:35:52:c0:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:2F:23:4F:67:6F:62:5C:9D:E5:F3:EC:FE:FE:31:23:B2:83:38
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/2OIvI09nb2JcneXz7P7-MSOygzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:fd:17:91:87:5a:cb:6a:ae:8f:02:33:55:da:ea:b9:81:16:
98:0e:3c:01:08:df:92:a7:8c:ec:47:50:d9:77:5d:b7:d2:a5:
0c:24:3c:30:ec:4e:4e:e1:ed:d4:38:e7:64:cd:89:90:22:6b:
8f:e4:cb:d0:c4:09:ed:94:6b:25:93:38:3c:b5:cd:5d:07:22:
7f:f3:97:cd:41:5b:4b:ab:8e:97:a2:ad:ce:51:99:85:50:31:
f9:52:ba:44:24:ef:4f:cd:61:c1:d9:b9:78:5b:42:64:0e:50:
b1:f1:12:27:b7:e3:9a:1e:97:b8:2a:42:fc:1e:89:3d:51:27:
8a:89:39:0b:71:eb:32:57:c4:0f:84:17:f3:1d:5e:e1:57:ce:
2b:d1:64:45:43:08:79:1e:62:9a:61:82:40:d6:dc:e7:e0:71:
1b:b6:bc:7b:e1:36:0c:e0:42:7e:0f:9b:97:ed:c8:d8:df:a1:
a3:b5:bd:4f:09:3e:78:b6:4b:fd:3e:d4:9c:3a:1d:8b:d5:3f:
9c:88:f4:d1:78:64:1a:50:3f:c1:fc:05:0d:37:32:36:e8:71:
3a:d0:29:7c:23:b0:ba:5a:1b:cd:d9:73:e7:74:5c:bb:f6:9e:
f1:9b:f3:47:cb:9e:64:52:97:4c:f4:69:9d:d0:55:77:33:10:
08:8d:16:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgjQWo5qogfYSCQvzbtZ/6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjMwNTE2MDYzMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGUyMmYyMzRmNjc2ZjYyNWM5ZGU1ZjNlY2ZlZmUzMTIzYjI4MzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjVitiJJ2aoF4JKm7s+rdXfm5O/R
F7UDahUwv34sTLlW7LOZVBujJlv8Ke2GPSU95Q2+aZnpazb24+sRyRJriZObFpSy
HxAiw45/UpJjfsQ6/QCAkgqkMBstU3nY8m/OlbPnR53P7nn6ZAEVp72IgbG6f1pz
oLrmZPyXJTwXyDVbwND7uK0vbP6zfaifzj4d9YigaFWPBIPuj96L0jn+Grb6dmkg
FM2bFYfXBgl7reIqieX9zWU0QRnucdTbGEn5gRCW0/fffJyVp5uTimu4bFthxX7q
N0rC1/e/f5dYOXZwr5YOsHJbAc99F2+IpYTb5i9b9lUoqWzjPT01UsBNMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNjiLyNPZ29iXJ3l8+z+/jEjsoM4MB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvMk9JdkkwOW5iMkpjbmVYejdQNy1NU095Z3pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9rMA0G
CSqGSIb3DQEBCwUAA4IBAQBt/ReRh1rLaq6PAjNV2uq5gRaYDjwBCN+Sp4zsR1DZ
d1230qUMJDww7E5O4e3UOOdkzYmQImuP5MvQxAntlGslkzg8tc1dByJ/85fNQVtL
q46Xoq3OUZmFUDH5UrpEJO9PzWHB2bl4W0JkDlCx8RInt+OaHpe4KkL8Hok9USeK
iTkLcesyV8QPhBfzHV7hV84r0WRFQwh5HmKaYYJA1tzn4HEbtrx74TYM4EJ+D5uX
7cjY36Gjtb1PCT54tkv9PtScOh2L1T+ciPTReGQaUD/B/AUNNzI26HE60Cl8I7C6
WhvN2XPndFy79p7xm/NHy55kUpdM9Gmd0FV3MxAIjRZ1
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:48 2024 by rpki-client on console-ams.rpki-client.org