Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oJJ-QO2YLFb8TQ-9GlFqAFhiaIk.roa
File: oJJ-QO2YLFb8TQ-9GlFqAFhiaIk.roa (raw, json)
Hash identifier: ijfBhUOUs5C4BtAmmL9Xr2hzWzZJPF10fdc1xMn4VJ0=
Subject key identifier: A0:92:7E:40:ED:98:2C:56:FC:4D:0F:BD:1A:51:6A:00:58:62:68:89
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B0351071B6A4047E77FBAF2974741652E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oJJ-QO2YLFb8TQ-9GlFqAFhiaIk.roa
Signing time: Fri 06 Oct 2023 04:48:43 +0000
ROA not before: Fri 06 Oct 2023 04:48:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 188.215.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 12:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:51:07:1b:6a:40:47:e7:7f:ba:f2:97:47:41:65:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 6 04:48:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0927e40ed982c56fc4d0fbd1a516a0058626889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:d5:a6:95:82:9c:ae:a0:c8:9c:00:51:78:
17:a2:b4:0b:c4:09:97:9c:22:47:6d:f0:ff:eb:e6:
72:28:28:8e:74:26:38:5a:26:f6:25:73:f1:99:d5:
13:52:75:90:d8:25:27:99:bb:43:26:ec:ae:f2:68:
be:1a:10:3f:e1:14:0f:5f:b1:9c:84:5d:d9:5f:19:
aa:5f:1c:fd:68:fd:83:5e:0c:c0:79:17:08:80:e0:
7b:f1:87:f5:5c:9d:e8:9b:f6:27:43:60:9f:4b:46:
ce:79:1a:f6:9c:1a:b7:29:6e:e0:e5:92:3f:09:88:
a9:91:56:a6:1d:90:f9:0f:fe:c8:11:2c:f0:00:50:
bc:69:d9:95:7c:66:47:77:87:1b:8c:c1:ef:e7:1d:
d1:cb:73:3a:1e:45:b9:df:ca:d5:88:65:b7:ad:76:
ab:1c:c9:14:2d:bf:bd:9b:bc:bb:6a:8e:5c:4d:bb:
d4:ea:3e:99:c9:cb:da:b9:26:76:95:b5:d4:dd:25:
ab:75:88:e1:f5:64:02:6a:83:c7:30:05:33:51:08:
6c:bf:d3:81:ca:da:a8:58:ce:ee:0a:99:b5:cf:39:
4a:5b:d6:12:aa:4b:7e:25:8c:ae:5c:5a:d3:40:ce:
bf:8c:21:65:b0:86:14:d7:9a:8a:86:4e:a3:c8:c0:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:92:7E:40:ED:98:2C:56:FC:4D:0F:BD:1A:51:6A:00:58:62:68:89
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oJJ-QO2YLFb8TQ-9GlFqAFhiaIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:be:48:7a:a7:59:1b:ec:13:dc:49:2c:fd:ae:9b:92:10:79:
36:27:a3:5c:54:a8:5e:60:92:cc:4b:f6:6d:3a:a3:ab:79:88:
8b:43:7c:db:02:7c:c2:65:2d:f1:42:58:86:f5:71:44:ad:a5:
44:85:32:4b:2b:24:3a:7f:b8:3a:6e:12:e4:da:92:77:7a:21:
93:0d:29:f8:d4:f1:90:c7:49:08:f4:77:13:ad:76:d1:f6:ba:
7d:41:75:59:19:9f:93:77:35:0f:56:11:0b:ec:53:31:d1:81:
35:1c:ed:31:c0:39:5d:97:d3:27:81:01:b6:8c:7d:bb:05:7c:
f4:af:b8:48:46:52:a4:49:57:e4:67:e9:a3:be:84:a9:bb:c4:
f3:68:b7:85:db:e0:12:a4:94:b1:c7:ad:ac:be:0b:0a:85:80:
08:a2:d6:02:e1:61:28:9c:9f:aa:2e:19:4d:6d:28:b0:36:7d:
5e:76:f2:41:75:83:d0:8c:3e:ba:30:9d:0a:48:78:b4:2c:16:
58:9e:9a:d8:41:d0:b8:a5:13:df:4d:e7:d1:76:62:43:85:d9:
93:02:01:03:5b:e0:1d:8f:cf:c9:46:b5:f3:8b:cf:bf:7c:82:
e8:54:ce:fa:b7:3b:31:a7:4d:66:82:81:1d:8b:a4:07:27:e8:
04:b4:74:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsDUQcbakBH53+68pdHQWUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMxMDA2MDQ0ODQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDkyN2U0MGVkOTgyYzU2ZmM0ZDBmYmQxYTUxNmEwMDU4NjI2ODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMDVppWCnK6gyJwAUXgXorQLxAmX
nCJHbfD/6+ZyKCiOdCY4Wib2JXPxmdUTUnWQ2CUnmbtDJuyu8mi+GhA/4RQPX7Gc
hF3ZXxmqXxz9aP2DXgzAeRcIgOB78Yf1XJ3om/YnQ2CfS0bOeRr2nBq3KW7g5ZI/
CYipkVamHZD5D/7IESzwAFC8admVfGZHd4cbjMHv5x3Ry3M6HkW538rViGW3rXar
HMkULb+9m7y7ao5cTbvU6j6ZycvauSZ2lbXU3SWrdYjh9WQCaoPHMAUzUQhsv9OB
ytqoWM7uCpm1zzlKW9YSqkt+JYyuXFrTQM6/jCFlsIYU15qKhk6jyMDP8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKCSfkDtmCxW/E0PvRpRagBYYmiJMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvb0pKLVFPMllMRmI4VFEtOUdsRnFBRmhpYUlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNcfMA0G
CSqGSIb3DQEBCwUAA4IBAQBLvkh6p1kb7BPcSSz9rpuSEHk2J6NcVKheYJLMS/Zt
OqOreYiLQ3zbAnzCZS3xQliG9XFEraVEhTJLKyQ6f7g6bhLk2pJ3eiGTDSn41PGQ
x0kI9HcTrXbR9rp9QXVZGZ+TdzUPVhEL7FMx0YE1HO0xwDldl9MngQG2jH27BXz0
r7hIRlKkSVfkZ+mjvoSpu8TzaLeF2+ASpJSxx62svgsKhYAIotYC4WEonJ+qLhlN
bSiwNn1edvJBdYPQjD66MJ0KSHi0LBZYnprYQdC4pRPfTefRdmJDhdmTAgEDW+Ad
j8/JRrXzi8+/fILoVM76tzsxp01mgoEdi6QHJ+gEtHTM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org