Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3xvYqw7UaACUAh3JbyqD96Pc8_g.roa
File: 3xvYqw7UaACUAh3JbyqD96Pc8_g.roa (raw, json)
Hash identifier: mhe2vjQoCnUcO4vmfjeULkJ08a4NRkZtxFG5jORH2Bk=
Subject key identifier: DF:1B:D8:AB:0E:D4:68:00:94:02:1D:C9:6F:2A:83:F7:A3:DC:F3:F8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01888174711BCDC79CB83FC15175BEB7C84A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3xvYqw7UaACUAh3JbyqD96Pc8_g.roa
Signing time: Sat 03 Jun 2023 13:31:11 +0000
ROA not before: Sat 03 Jun 2023 13:31:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 188.241.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Jun 2023 14:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:81:74:71:1b:cd:c7:9c:b8:3f:c1:51:75:be:b7:c8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 3 13:31:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df1bd8ab0ed4680094021dc96f2a83f7a3dcf3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:82:02:c9:f9:86:06:90:14:b9:ff:5a:76:6a:
19:c8:8b:e6:49:11:04:5c:00:29:27:64:99:8c:17:
33:11:e3:6c:71:ce:a9:71:36:74:f0:65:54:6f:ca:
d4:7b:f0:4e:dc:63:42:bd:80:74:e6:09:df:c2:8b:
3c:80:58:2c:be:59:82:e6:03:c2:50:9c:3a:ac:b2:
f2:98:b4:4b:bc:2c:bc:93:63:91:c4:43:48:8f:9f:
5f:11:cc:95:b1:9a:30:1e:34:ca:83:32:52:5d:41:
cf:18:0f:b7:66:3a:54:c3:d8:be:3f:c1:ea:07:2c:
7d:ea:0b:d6:f5:4f:8b:6f:4a:73:bc:ea:66:11:b6:
b1:7e:4e:bd:12:5d:e2:e3:36:d5:be:8b:6b:6e:39:
72:13:43:ac:89:8f:9d:4e:29:dc:e0:3a:c4:88:ee:
78:f6:e7:84:1c:70:d0:b5:a2:23:35:55:bc:34:d2:
ea:d2:ad:bb:20:29:48:04:95:e6:11:ae:02:ef:7a:
b7:7c:5f:ec:10:32:ea:a7:ef:44:7b:0d:2a:21:c2:
b9:60:47:54:b0:4b:1a:32:9c:70:4e:af:18:a9:5a:
81:c6:e4:10:3c:9a:fc:9a:5a:10:4d:66:6b:68:bd:
91:0b:91:7b:93:2b:d3:a3:49:85:0d:5a:b5:07:65:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1B:D8:AB:0E:D4:68:00:94:02:1D:C9:6F:2A:83:F7:A3:DC:F3:F8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3xvYqw7UaACUAh3JbyqD96Pc8_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.136.0/24
Signature Algorithm: sha256WithRSAEncryption
29:39:78:97:43:82:e2:66:9c:6d:60:e6:b3:c9:11:11:ca:02:
48:14:71:95:14:88:d9:ef:73:49:9f:71:59:71:96:8b:96:26:
87:dc:d5:f7:34:c8:d2:54:a1:51:56:01:0b:0c:84:1a:cd:20:
84:ec:9a:33:0a:4f:f0:27:f1:c8:59:4b:29:c1:7f:57:c4:bf:
5b:b9:86:38:63:be:60:e2:48:3f:9b:ff:26:15:7d:e5:a1:be:
5c:e9:df:0a:04:8c:fb:b1:35:7f:a3:ee:9d:81:5d:04:0c:68:
80:98:cc:2a:ae:99:5b:4c:e4:e8:b6:a9:2a:3a:f0:ae:50:d8:
59:cb:63:93:c1:bb:bb:b1:a6:53:83:e8:60:30:aa:c3:99:00:
90:7f:44:67:7a:d8:41:05:2f:f2:83:38:b3:12:7a:ad:47:72:
fd:c3:8c:01:99:95:d5:5f:cf:26:2e:05:93:a3:3c:52:c1:43:
be:17:4c:ba:de:5c:d9:32:46:9b:b0:0b:24:6a:06:48:ae:ac:
d0:0f:ba:73:c1:7e:b2:27:f5:9a:f6:d0:7c:30:45:be:a1:0a:
79:36:1f:7f:8f:40:71:70:af:a7:ae:13:b0:8c:e3:2a:d1:57:
28:7b:8e:c5:61:f6:04:43:e5:67:7e:50:95:cb:2e:bb:e5:81:
ff:98:c6:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiBdHEbzcecuD/BUXW+t8hKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNjAzMTMzMTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjFiZDhhYjBlZDQ2ODAwOTQwMjFkYzk2ZjJhODNmN2EzZGNmM2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4ICyfmGBpAUuf9admoZyIvmSREE
XAApJ2SZjBczEeNscc6pcTZ08GVUb8rUe/BO3GNCvYB05gnfwos8gFgsvlmC5gPC
UJw6rLLymLRLvCy8k2ORxENIj59fEcyVsZowHjTKgzJSXUHPGA+3ZjpUw9i+P8Hq
Byx96gvW9U+Lb0pzvOpmEbaxfk69El3i4zbVvotrbjlyE0OsiY+dTinc4DrEiO54
9ueEHHDQtaIjNVW8NNLq0q27IClIBJXmEa4C73q3fF/sEDLqp+9Eew0qIcK5YEdU
sEsaMpxwTq8YqVqBxuQQPJr8mloQTWZraL2RC5F7kyvTo0mFDVq1B2WgxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN8b2KsO1GgAlAIdyW8qg/ej3PP4MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvM3h2WXF3N1VhQUNVQWgzSmJ5cUQ5NlBjOF9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPGIMA0G
CSqGSIb3DQEBCwUAA4IBAQApOXiXQ4LiZpxtYOazyRERygJIFHGVFIjZ73NJn3FZ
cZaLliaH3NX3NMjSVKFRVgELDIQazSCE7JozCk/wJ/HIWUspwX9XxL9buYY4Y75g
4kg/m/8mFX3lob5c6d8KBIz7sTV/o+6dgV0EDGiAmMwqrplbTOTotqkqOvCuUNhZ
y2OTwbu7saZTg+hgMKrDmQCQf0RnethBBS/ygzizEnqtR3L9w4wBmZXVX88mLgWT
ozxSwUO+F0y63lzZMkabsAskagZIrqzQD7pzwX6yJ/Wa9tB8MEW+oQp5Nh9/j0Bx
cK+nrhOwjOMq0Vcoe47FYfYEQ+VnflCVyy675YH/mMbQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org