Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/uI_V77_seEomhjldjMjwLk4KHnQ.roa
File: uI_V77_seEomhjldjMjwLk4KHnQ.roa (raw, json)
Hash identifier: d2mHKBZw0hL41mjKEbjHTn2Y3+kDQ7zRFtVdMBQZ8j0=
Subject key identifier: B8:8F:D5:EF:BF:EC:78:4A:26:86:39:5D:8C:C8:F0:2E:4E:0A:1E:74
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018CC94CA437595B3A9A3CC05E6E7B23364D
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/uI_V77_seEomhjldjMjwLk4KHnQ.roa
Signing time: Tue 02 Jan 2024 08:31:32 +0000
ROA not before: Tue 02 Jan 2024 08:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 188.191.99.0/24 maxlen: 24
188.191.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 19:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a4:37:59:5b:3a:9a:3c:c0:5e:6e:7b:23:36:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 08:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b88fd5efbfec784a2686395d8cc8f02e4e0a1e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:72:f3:f8:c5:5e:4c:dc:b0:7d:82:52:fe:
c7:85:a5:e1:7b:20:c9:37:d6:dc:74:e6:e6:73:96:
ac:95:ca:59:38:b2:89:c9:56:59:61:48:38:68:93:
ac:dd:18:ed:2a:da:5f:dd:2c:80:31:b9:19:29:19:
7c:b1:a9:71:ba:3c:f8:d5:2f:73:f5:3b:da:d9:47:
00:32:67:72:91:d3:ea:e9:2c:29:48:cb:45:bf:21:
d6:22:7c:82:78:67:dc:c6:2e:ff:99:af:00:b7:78:
c4:0f:b6:b4:d8:b3:05:bb:22:24:45:20:06:04:9d:
1f:a1:a9:ab:d6:f4:11:73:9e:5d:e1:44:73:a2:16:
cf:1a:5b:ee:e7:df:0e:ac:93:6e:23:54:a2:e6:7b:
07:eb:33:fd:90:ed:b4:01:9b:91:50:10:dc:84:ba:
5e:d8:0b:57:9f:31:b9:b7:01:12:b5:c8:a4:1e:07:
23:0f:b4:de:6b:1d:70:6c:7d:e9:10:ca:47:ac:64:
30:f4:cc:88:e3:50:fe:09:0f:3b:56:62:3b:2b:26:
ca:d0:bb:17:0a:d3:59:bd:12:24:1a:f4:74:d1:a9:
7e:e7:be:ad:d5:d7:74:5d:60:f3:54:61:56:61:ac:
62:37:2f:38:35:60:7d:14:61:8a:10:2b:f5:16:50:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8F:D5:EF:BF:EC:78:4A:26:86:39:5D:8C:C8:F0:2E:4E:0A:1E:74
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/uI_V77_seEomhjldjMjwLk4KHnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.99.0/24
188.191.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:74:bb:60:26:c6:b0:90:69:c5:b6:14:f5:44:b2:2f:4c:b5:
b7:9d:4c:44:4c:20:93:af:67:3d:dd:43:8a:7a:ab:03:32:de:
07:db:92:68:38:a6:f7:ac:a1:9d:ff:03:ee:87:db:cf:ca:f9:
f6:d3:f5:15:f3:e4:a3:cd:b9:89:26:27:78:a6:4b:73:fb:0f:
63:f0:4c:05:d5:f3:ef:a4:53:50:db:05:7f:6c:5b:33:b9:b1:
ed:ee:24:19:fe:74:37:06:15:f9:36:de:a5:cf:cc:49:58:f9:
c6:fe:9e:ec:1b:18:09:d3:0b:dc:b3:eb:17:2f:3e:2d:0d:1d:
7a:60:84:dc:0d:72:6b:8d:9d:e8:1a:27:15:4b:54:75:5a:cb:
73:30:57:40:10:f3:d5:c3:57:b3:0e:aa:ef:59:9f:18:d2:50:
cc:73:1d:7a:4e:d6:2c:07:27:1a:67:b7:57:b4:04:78:4b:25:
d2:a4:14:4a:64:60:1a:5b:bf:e1:ca:1f:1e:b6:cb:0a:c6:7f:
f9:8c:3f:8a:62:d6:5e:f4:7d:04:dd:f0:ed:5d:79:6e:71:1d:
5b:80:f9:f4:1c:75:0d:4f:8e:cc:5f:5c:cc:a6:87:c5:8e:2b:
1f:85:56:98:87:84:31:34:12:15:51:e8:66:b7:95:48:4c:11:
bd:35:44:64
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJTKQ3WVs6mjzAXm57IzZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjQwMTAyMDgzMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODhmZDVlZmJmZWM3ODRhMjY4NjM5NWQ4Y2M4ZjAyZTRlMGExZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAdy8/jFXkzcsH2CUv7HhaXheyDJ
N9bcdObmc5aslcpZOLKJyVZZYUg4aJOs3RjtKtpf3SyAMbkZKRl8salxujz41S9z
9Tva2UcAMmdykdPq6SwpSMtFvyHWInyCeGfcxi7/ma8At3jED7a02LMFuyIkRSAG
BJ0foamr1vQRc55d4URzohbPGlvu598OrJNuI1Si5nsH6zP9kO20AZuRUBDchLpe
2AtXnzG5twEStcikHgcjD7Teax1wbH3pEMpHrGQw9MyI41D+CQ87VmI7KybK0LsX
CtNZvRIkGvR00al+576t1dd0XWDzVGFWYaxiNy84NWB9FGGKECv1FlBk4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLiP1e+/7HhKJoY5XYzI8C5OCh50MB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvdUlfVjc3X3NlRW9taGpsZGpNandMazRLSG5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvL9jAwQA
vL9qMA0GCSqGSIb3DQEBCwUAA4IBAQBudLtgJsawkGnFthT1RLIvTLW3nUxETCCT
r2c93UOKeqsDMt4H25JoOKb3rKGd/wPuh9vPyvn20/UV8+SjzbmJJid4pktz+w9j
8EwF1fPvpFNQ2wV/bFszubHt7iQZ/nQ3BhX5Nt6lz8xJWPnG/p7sGxgJ0wvcs+sX
Lz4tDR16YITcDXJrjZ3oGicVS1R1WstzMFdAEPPVw1ezDqrvWZ8Y0lDMcx16TtYs
BycaZ7dXtAR4SyXSpBRKZGAaW7/hyh8etssKxn/5jD+KYtZe9H0E3fDtXXlucR1b
gPn0HHUNT47MX1zMpofFjisfhVaYh4QxNBIVUehmt5VITBG9NURk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org