Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/gru8qwCtvALS_xbEhmGrVQzFt6g.roa
File: gru8qwCtvALS_xbEhmGrVQzFt6g.roa (raw, json)
Hash identifier: ozuHVtrYKBhkU5G0cqVNXzHJc3xfcaYFVAWNTSMNjD4=
Subject key identifier: 82:BB:BC:AB:00:AD:BC:02:D2:FF:16:C4:86:61:AB:55:0C:C5:B7:A8
Certificate issuer: /CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Certificate serial: 01856DE63D8B140CA228D361F7EAE2D8BFF4
Authority key identifier: C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/gru8qwCtvALS_xbEhmGrVQzFt6g.roa
Signing time: Sun 01 Jan 2023 15:14:43 +0000
ROA not before: Sun 01 Jan 2023 15:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29013
IP address blocks: 188.239.127.0/24 maxlen: 24
188.239.64.0/18 maxlen: 18
Validation: Failed, certificate revoked on Tue 14 Feb 2023 10:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:3d:8b:14:0c:a2:28:d3:61:f7:ea:e2:d8:bf:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Validity
Not Before: Jan 1 15:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82bbbcab00adbc02d2ff16c48661ab550cc5b7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:df:cc:72:77:d6:4d:0d:82:27:2f:d7:d0:
c7:f6:51:e9:02:33:4f:cf:0a:55:dc:fd:8a:fb:71:
28:e4:15:46:df:29:1c:72:cf:09:60:bd:16:3c:9a:
98:c6:b8:fa:76:28:11:3b:71:62:c2:64:b4:3f:c4:
76:d3:fe:f9:70:ba:02:ee:42:c6:f3:29:d1:e8:c9:
04:85:41:e3:67:21:98:63:ed:b4:cc:46:eb:27:cf:
ab:76:9d:5c:a9:f0:13:27:ff:e1:7e:3f:3a:b9:a4:
a2:17:6e:8c:8c:65:1f:e2:77:02:44:da:8a:0f:71:
5f:42:f6:96:9c:fb:73:f6:ce:0b:94:06:54:ad:8e:
e0:d7:76:2e:21:2f:8b:d4:ec:68:e0:64:22:73:38:
71:2d:81:8f:61:54:d3:48:d1:5f:5a:1f:4f:74:3e:
40:55:d8:69:c3:2d:13:09:b6:c5:4a:ff:e7:09:1a:
75:42:0b:c5:45:e5:4d:08:a5:aa:ab:44:47:7e:b2:
8d:e0:5f:9d:33:6a:b5:fe:36:36:b3:7d:5b:91:a4:
41:2a:b5:6e:c9:ac:4e:e9:99:10:7a:cb:68:db:57:
47:74:f4:80:75:f7:d7:ce:5d:4b:aa:85:d4:a1:61:
ff:fd:e8:bd:f8:00:ba:1a:fc:41:56:22:0e:79:da:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BB:BC:AB:00:AD:BC:02:D2:FF:16:C4:86:61:AB:55:0C:C5:B7:A8
X509v3 Authority Key Identifier:
keyid:C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/gru8qwCtvALS_xbEhmGrVQzFt6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.239.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3f:da:17:78:ed:96:60:b9:e6:8d:5c:f7:6f:18:0e:e8:87:6c:
c3:2f:71:c3:46:f9:20:9e:2d:a3:bd:1e:db:2a:8f:a3:59:20:
91:e9:1d:d9:a9:74:eb:3b:35:88:af:a5:08:5f:e6:d4:85:cf:
30:50:76:4c:07:34:a7:c2:26:6c:7e:28:fe:f6:1a:24:2c:c9:
49:51:1f:bf:52:44:f5:ec:0f:a6:b3:f5:33:e7:68:3a:74:b0:
4b:76:18:f1:92:dd:0d:ab:52:b4:06:01:6d:0e:76:aa:76:af:
f1:61:79:76:c7:85:45:af:ed:15:fc:46:d5:af:34:5c:7d:22:
62:73:3c:18:4a:f3:2a:41:0e:23:b2:c9:8e:83:88:ed:16:64:
ce:a0:4d:dc:30:1e:20:e1:44:10:45:33:fb:ba:d0:bc:f4:c2:
3c:98:2c:fb:d0:0b:2e:cd:32:3a:75:03:f8:00:94:dd:45:d0:
e7:80:ca:67:89:17:49:9a:97:36:85:0d:cb:7b:d0:3c:12:b7:
27:98:a4:f4:f2:d4:6a:04:b1:13:b3:96:9e:46:4c:c5:b8:f1:
a6:81:1b:5a:a3:ff:67:6c:2f:05:9c:b5:0c:da:09:ce:27:1b:
4e:96:97:45:a0:2b:74:67:46:9c:af:75:5d:4b:c4:58:50:cc:
f4:52:de:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVt5j2LFAyiKNNh9+ri2L/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTAyZjc2OWJmNjgxYjEwMzlmMmNlZTYxZTllMGY5NzVl
NGU1NmIwHhcNMjMwMTAxMTUxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmJiYmNhYjAwYWRiYzAyZDJmZjE2YzQ4NjYxYWI1NTBjYzViN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyzfzHJ31k0Ngicv19DH9lHpAjNP
zwpV3P2K+3Eo5BVG3ykccs8JYL0WPJqYxrj6digRO3FiwmS0P8R20/75cLoC7kLG
8ynR6MkEhUHjZyGYY+20zEbrJ8+rdp1cqfATJ//hfj86uaSiF26MjGUf4ncCRNqK
D3FfQvaWnPtz9s4LlAZUrY7g13YuIS+L1Oxo4GQiczhxLYGPYVTTSNFfWh9PdD5A
Vdhpwy0TCbbFSv/nCRp1QgvFReVNCKWqq0RHfrKN4F+dM2q1/jY2s31bkaRBKrVu
yaxO6ZkQesto21dHdPSAdffXzl1LqoXUoWH//ei9+AC6GvxBViIOedrIpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIK7vKsArbwC0v8WxIZhq1UMxbeoMB8GA1UdIwQY
MBaAFMKQL3ab9oGxA58s7mHp4Pl15OVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BBdmRwdjJnYkVEbnl6dVllbmctWFhrNVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NGQ0MTMtNDBmNS00YWUyLWFjYTkt
ZmYzOTM2ZmU5OTQ2LzEvZ3J1OHF3Q3R2QUxTX3hiRWhtR3JWUXpGdDZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My81NGQ0MTMtNDBmNS00YWUyLWFjYTktZmYzOTM2ZmU5OTQ2
LzEvd3BBdmRwdjJnYkVEbnl6dVllbmctWFhrNVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGvO9AMA0G
CSqGSIb3DQEBCwUAA4IBAQA/2hd47ZZgueaNXPdvGA7oh2zDL3HDRvkgni2jvR7b
Ko+jWSCR6R3ZqXTrOzWIr6UIX+bUhc8wUHZMBzSnwiZsfij+9hokLMlJUR+/UkT1
7A+ms/Uz52g6dLBLdhjxkt0Nq1K0BgFtDnaqdq/xYXl2x4VFr+0V/EbVrzRcfSJi
czwYSvMqQQ4jssmOg4jtFmTOoE3cMB4g4UQQRTP7utC89MI8mCz70AsuzTI6dQP4
AJTdRdDngMpniRdJmpc2hQ3Le9A8ErcnmKT08tRqBLETs5aeRkzFuPGmgRtao/9n
bC8FnLUM2gnOJxtOlpdFoCt0Z0acr3VdS8RYUMz0Ut4H
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:40 2024 by rpki-client on console-fra.rpki-client.org