Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/vFENl_bxzw8A6qsKk9OQZd0Admw.roa
File: vFENl_bxzw8A6qsKk9OQZd0Admw.roa (raw, json)
Hash identifier: w5Y5pFzWqtOEVvQHSsm0/KG50SHHxg913e1VaKfmN88=
Subject key identifier: BC:51:0D:97:F6:F1:CF:0F:00:EA:AB:0A:93:D3:90:65:DD:00:76:6C
Certificate issuer: /CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Certificate serial: 01864F8B3DCD2CC41E57ED21ADC32E79B520
Authority key identifier: C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/vFENl_bxzw8A6qsKk9OQZd0Admw.roa
Signing time: Tue 14 Feb 2023 10:49:30 +0000
ROA not before: Tue 14 Feb 2023 10:49:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29013
IP address blocks: 188.239.120.0/21 maxlen: 21
188.239.127.0/24 maxlen: 24
188.239.64.0/18 maxlen: 18
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:8b:3d:cd:2c:c4:1e:57:ed:21:ad:c3:2e:79:b5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Validity
Not Before: Feb 14 10:49:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc510d97f6f1cf0f00eaab0a93d39065dd00766c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:fc:48:7b:1f:04:20:c5:fc:f9:f9:75:ed:
32:be:29:cb:ed:e4:7f:a4:95:dd:91:99:c6:f3:6c:
9e:39:c4:7c:e9:1d:5f:c4:6b:7f:24:56:d2:be:3d:
92:8c:54:d3:68:0c:47:9f:d1:b5:3f:6e:29:c3:52:
4e:eb:33:80:b3:bd:fd:f9:9d:51:f4:87:51:64:04:
80:6f:ab:d4:7b:d5:70:25:95:fa:d0:f1:9a:71:9a:
80:d1:db:ea:2d:79:13:ff:b2:0c:3b:d2:48:52:4f:
e3:59:b5:f8:53:bb:d9:8d:54:fa:4b:72:00:46:53:
22:4e:a7:5c:d7:35:e7:90:ad:2b:81:8c:e4:aa:26:
68:44:b7:d6:c2:e9:54:8d:c1:60:2b:c6:05:08:75:
a3:94:4f:54:ac:62:88:cc:2a:f2:76:ba:ac:ea:48:
e1:7a:4e:2f:06:b4:69:99:ad:d9:9c:05:22:3c:3b:
99:b0:cd:3e:fd:77:7c:3c:3c:64:bd:11:e4:05:0a:
4b:bb:17:c3:e3:ca:77:18:71:02:0d:6b:83:be:5a:
3b:56:6b:69:bb:d8:62:4d:60:3e:84:46:d2:c0:0a:
9d:46:28:47:d4:0d:6e:f6:f9:a9:02:ab:de:f1:31:
9a:57:00:2e:c1:d9:44:3e:9a:f6:ef:d9:ec:16:a4:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:51:0D:97:F6:F1:CF:0F:00:EA:AB:0A:93:D3:90:65:DD:00:76:6C
X509v3 Authority Key Identifier:
keyid:C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/vFENl_bxzw8A6qsKk9OQZd0Admw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.239.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1b:4b:20:96:d3:a2:42:34:8c:2d:75:71:a6:4b:e6:7e:91:18:
c2:3c:f1:22:bf:af:69:8f:4a:24:f4:c8:e5:ba:2d:84:1e:3d:
5b:e4:50:67:b0:82:a8:76:66:d0:35:f2:b2:82:fd:26:3a:6f:
6d:a7:ee:79:e1:f4:e1:e0:f6:10:1a:ea:f9:78:6f:e7:8f:e5:
81:b5:fd:07:75:49:6b:20:a8:11:d1:13:45:9b:13:67:ac:e0:
e0:fe:59:9e:ac:b3:5a:29:4a:bb:a9:66:8b:d0:b4:db:fe:4f:
b1:90:4d:6f:19:dc:38:0c:95:ea:33:e9:72:75:34:da:f9:ba:
0d:3f:54:4c:9a:5f:17:ef:80:24:69:84:46:4a:cb:14:33:ad:
a0:d8:2e:d7:a9:d3:62:8c:26:cc:2f:98:67:70:d4:4d:fc:d5:
a9:04:aa:23:3c:a9:04:1d:83:65:1c:cf:bb:bf:c7:70:84:df:
3b:a2:52:8a:ba:54:5b:5e:79:a5:2a:64:ff:a1:5d:a0:39:35:
a8:09:ac:eb:fa:df:d7:4e:34:03:e5:1d:05:0a:f6:cd:c3:de:
aa:db:1e:ce:e9:37:6e:7e:bb:d5:9b:60:3c:41:cb:d6:97:54:
43:7a:09:6d:c7:1d:d4:0a:de:88:d2:60:a4:0e:45:71:8b:bd:
bc:2f:f8:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZPiz3NLMQeV+0hrcMuebUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTAyZjc2OWJmNjgxYjEwMzlmMmNlZTYxZTllMGY5NzVl
NGU1NmIwHhcNMjMwMjE0MTA0OTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzUxMGQ5N2Y2ZjFjZjBmMDBlYWFiMGE5M2QzOTA2NWRkMDA3NjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg38SHsfBCDF/Pn5de0yvinL7eR/
pJXdkZnG82yeOcR86R1fxGt/JFbSvj2SjFTTaAxHn9G1P24pw1JO6zOAs739+Z1R
9IdRZASAb6vUe9VwJZX60PGacZqA0dvqLXkT/7IMO9JIUk/jWbX4U7vZjVT6S3IA
RlMiTqdc1zXnkK0rgYzkqiZoRLfWwulUjcFgK8YFCHWjlE9UrGKIzCrydrqs6kjh
ek4vBrRpma3ZnAUiPDuZsM0+/Xd8PDxkvRHkBQpLuxfD48p3GHECDWuDvlo7Vmtp
u9hiTWA+hEbSwAqdRihH1A1u9vmpAqve8TGaVwAuwdlEPpr279nsFqSd8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxRDZf28c8PAOqrCpPTkGXdAHZsMB8GA1UdIwQY
MBaAFMKQL3ab9oGxA58s7mHp4Pl15OVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BBdmRwdjJnYkVEbnl6dVllbmctWFhrNVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NGQ0MTMtNDBmNS00YWUyLWFjYTkt
ZmYzOTM2ZmU5OTQ2LzEvdkZFTmxfYnh6dzhBNnFzS2s5T1FaZDBBZG13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My81NGQ0MTMtNDBmNS00YWUyLWFjYTktZmYzOTM2ZmU5OTQ2
LzEvd3BBdmRwdjJnYkVEbnl6dVllbmctWFhrNVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGvO9AMA0G
CSqGSIb3DQEBCwUAA4IBAQAbSyCW06JCNIwtdXGmS+Z+kRjCPPEiv69pj0ok9Mjl
ui2EHj1b5FBnsIKodmbQNfKygv0mOm9tp+554fTh4PYQGur5eG/nj+WBtf0HdUlr
IKgR0RNFmxNnrODg/lmerLNaKUq7qWaL0LTb/k+xkE1vGdw4DJXqM+lydTTa+boN
P1RMml8X74AkaYRGSssUM62g2C7XqdNijCbML5hncNRN/NWpBKojPKkEHYNlHM+7
v8dwhN87olKKulRbXnmlKmT/oV2gOTWoCazr+t/XTjQD5R0FCvbNw96q2x7O6Tdu
frvVm2A8QcvWl1RDegltxx3UCt6I0mCkDkVxi728L/iW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:40 2024 by rpki-client on console-fra.rpki-client.org