Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pSMmIvrwdqH7RYji4c4qmyqcJhw.roa
File: pSMmIvrwdqH7RYji4c4qmyqcJhw.roa (raw, json)
Hash identifier: 1Ao1BLTYL+mIMR+1siAn0NaNRNVSqsC4KVzT9sg2PAk=
Subject key identifier: A5:23:26:22:FA:F0:76:A1:FB:45:88:E2:E1:CE:2A:9B:2A:9C:26:1C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AD6F2F8A094A4CDC5B563E0EBCAD86069
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pSMmIvrwdqH7RYji4c4qmyqcJhw.roa
Signing time: Wed 27 Sep 2023 14:02:42 +0000
ROA not before: Wed 27 Sep 2023 14:02:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216394
IP address blocks: 188.212.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 09:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:f2:f8:a0:94:a4:cd:c5:b5:63:e0:eb:ca:d8:60:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 27 14:02:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5232622faf076a1fb4588e2e1ce2a9b2a9c261c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:30:04:70:cf:67:53:8b:83:c7:8b:ec:2a:
32:c9:ab:a1:a8:00:3c:c0:58:5f:82:da:6a:83:47:
d3:c3:2e:47:5e:af:32:69:ac:66:d4:3a:91:4f:53:
c2:cb:fc:2c:a2:7e:65:98:7f:2c:4b:e2:b8:39:97:
53:4c:8d:f7:0b:0d:76:6b:ec:76:f6:c2:f2:f5:51:
72:07:38:0e:12:1e:6d:70:23:ab:72:39:a1:48:ce:
4d:85:27:31:6b:84:4b:51:eb:a7:8f:5a:20:05:1c:
66:a3:dc:36:28:90:a9:80:8f:ca:f1:8c:2d:1d:7e:
e1:84:bd:61:91:71:14:f7:7e:95:d0:50:db:72:0b:
7c:bc:ac:82:de:c2:37:6c:63:7f:cb:e1:3d:c4:e2:
35:21:9d:3e:14:b3:c8:94:3f:26:ad:e6:0e:29:f7:
17:55:e5:ea:65:19:89:75:04:71:86:3e:80:65:1a:
9d:a4:d6:c9:44:86:e5:82:e5:1f:78:8a:b4:75:9b:
46:60:3f:99:ca:14:d4:ea:f0:56:f3:34:0c:b9:ea:
af:7e:99:41:82:d8:44:f5:89:34:31:41:3e:80:d6:
62:d4:16:50:d0:69:5d:e4:1e:cc:af:3f:d2:62:44:
e9:89:dd:8c:94:78:7e:4b:02:68:22:87:7d:45:77:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:23:26:22:FA:F0:76:A1:FB:45:88:E2:E1:CE:2A:9B:2A:9C:26:1C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pSMmIvrwdqH7RYji4c4qmyqcJhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.121.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2f:f8:b4:02:d6:21:63:70:ab:72:97:11:0d:be:36:d0:84:
a2:bf:aa:3d:cf:f3:e5:80:76:f7:e4:2e:04:21:5d:2f:7e:59:
53:a3:41:ff:6b:9a:eb:cc:c1:ae:85:84:f5:6c:2d:d8:0f:d3:
16:eb:5b:19:12:e9:f1:85:ff:78:a0:5c:4b:9f:f1:2b:46:08:
d0:d7:d8:b7:27:b9:89:e0:7b:83:db:3f:44:71:c4:66:92:e7:
39:68:4c:05:b1:e9:d6:d9:cf:e6:cb:f8:1c:ac:40:ee:d9:60:
cd:b1:4e:80:20:34:f5:dc:16:fd:be:69:b6:2b:20:ad:8a:6a:
ea:ef:13:08:72:3c:d4:0a:a7:5f:8c:3d:63:dd:c0:d1:0b:70:
3a:65:67:83:86:e5:f1:a6:fd:2f:29:e8:8a:b8:75:13:c5:14:
18:27:28:dc:75:eb:d1:f1:df:48:d0:a7:6d:72:79:60:86:bc:
28:b6:13:61:69:f5:4c:58:6d:80:cd:da:2e:77:ff:d7:fd:71:
73:ae:bd:72:da:0c:95:b6:cf:98:e3:15:4e:77:45:32:b2:fe:
de:de:a6:6a:00:49:d7:7b:d0:01:49:1d:ce:15:d7:b7:90:fb:
48:b2:e0:e9:dd:5a:70:81:6a:6b:47:68:b2:18:fc:cc:de:91:
f1:e2:16:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrW8viglKTNxbVj4OvK2GBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwOTI3MTQwMjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTIzMjYyMmZhZjA3NmExZmI0NTg4ZTJlMWNlMmE5YjJhOWMyNjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAIwBHDPZ1OLg8eL7CoyyauhqAA8
wFhfgtpqg0fTwy5HXq8yaaxm1DqRT1PCy/wson5lmH8sS+K4OZdTTI33Cw12a+x2
9sLy9VFyBzgOEh5tcCOrcjmhSM5NhScxa4RLUeunj1ogBRxmo9w2KJCpgI/K8Ywt
HX7hhL1hkXEU936V0FDbcgt8vKyC3sI3bGN/y+E9xOI1IZ0+FLPIlD8mreYOKfcX
VeXqZRmJdQRxhj6AZRqdpNbJRIblguUfeIq0dZtGYD+ZyhTU6vBW8zQMueqvfplB
gthE9Yk0MUE+gNZi1BZQ0Gld5B7Mrz/SYkTpid2MlHh+SwJoIod9RXfSfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKUjJiL68Hah+0WI4uHOKpsqnCYcMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvcFNNbUl2cndkcUg3UllqaTRjNHFteXFjSmh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNR5MA0G
CSqGSIb3DQEBCwUAA4IBAQA0L/i0AtYhY3CrcpcRDb420ISiv6o9z/PlgHb35C4E
IV0vfllTo0H/a5rrzMGuhYT1bC3YD9MW61sZEunxhf94oFxLn/ErRgjQ19i3J7mJ
4HuD2z9EccRmkuc5aEwFsenW2c/my/gcrEDu2WDNsU6AIDT13Bb9vmm2KyCtimrq
7xMIcjzUCqdfjD1j3cDRC3A6ZWeDhuXxpv0vKeiKuHUTxRQYJyjcdevR8d9I0Kdt
cnlghrwothNhafVMWG2Azdoud//X/XFzrr1y2gyVts+Y4xVOd0Uysv7e3qZqAEnX
e9ABSR3OFde3kPtIsuDp3VpwgWprR2iyGPzM3pHx4hZV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org