Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cpHBkPIm5XLDtxK40xGtr7CNpYs.roa
File: cpHBkPIm5XLDtxK40xGtr7CNpYs.roa (raw, json)
Hash identifier: DSlT6PK45dRi9VRFThhPvH5MBo+v6vS3E2db8Jhn5Yo=
Subject key identifier: 72:91:C1:90:F2:26:E5:72:C3:B7:12:B8:D3:11:AD:AF:B0:8D:A5:8B
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A2F9B94945F47153D2541F36AD2F2
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cpHBkPIm5XLDtxK40xGtr7CNpYs.roa
Signing time: Mon 02 Jan 2023 12:34:48 +0000
ROA not before: Mon 02 Jan 2023 12:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 188.253.16.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:2f:9b:94:94:5f:47:15:3d:25:41:f3:6a:d2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7291c190f226e572c3b712b8d311adafb08da58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:83:35:7f:c9:33:3d:97:b0:f6:b2:43:0b:
39:e5:d8:f5:0c:e9:1e:e2:e4:6d:89:59:ba:f8:3c:
19:f4:2b:b9:fe:82:65:80:65:c4:3e:02:39:4a:bc:
50:ca:96:62:f4:b7:d4:1d:18:3b:44:e9:14:66:8f:
4c:aa:56:e1:fd:f3:80:12:8e:58:ee:76:b8:48:ad:
b4:e6:88:37:22:c6:97:87:63:67:4d:8a:d2:03:55:
91:91:76:c1:91:3a:9b:eb:cb:09:07:70:f5:48:6d:
86:20:ae:74:24:d4:81:2c:78:96:46:cb:d3:01:1c:
24:fb:e1:f6:62:17:53:66:9b:5e:03:c7:35:6b:f3:
94:45:b7:81:b1:c9:83:91:96:f7:3c:39:63:0e:58:
f4:0b:1d:0f:a8:8f:33:27:cd:78:8a:6c:7f:81:de:
8f:6f:23:58:52:69:e4:3b:7a:bf:ac:a7:3a:0a:d7:
a1:39:9c:5b:5c:8a:75:79:db:08:7a:79:78:ba:45:
9e:2f:71:07:25:a5:b3:b6:70:96:a6:d4:0e:37:0b:
15:39:8b:b1:f2:fb:54:ca:ea:5b:7b:5a:f0:6a:35:
c9:54:69:36:d5:41:d7:61:67:aa:0c:f6:ce:3e:71:
b3:cf:7c:68:95:c4:20:ee:f1:19:2f:2c:d1:fa:e1:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:91:C1:90:F2:26:E5:72:C3:B7:12:B8:D3:11:AD:AF:B0:8D:A5:8B
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cpHBkPIm5XLDtxK40xGtr7CNpYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.16.0/20
Signature Algorithm: sha256WithRSAEncryption
bd:b7:62:3b:a7:a2:a7:65:81:47:0a:dc:ef:4f:7e:62:a8:b1:
b6:c0:70:f7:10:20:71:f5:db:e5:d3:37:38:db:1a:32:0c:67:
3d:1f:c1:23:8a:54:29:2f:df:57:fa:0d:63:0a:04:a8:37:48:
18:c4:9b:9f:82:78:56:f8:10:96:dc:6c:09:cd:42:07:a5:7c:
9f:ef:96:ce:58:b4:fe:d6:3c:5c:ff:44:54:b1:33:7f:43:70:
42:a6:0c:80:ed:5b:d9:ae:03:ee:47:08:2c:f7:d4:a0:d6:71:
78:5a:cb:33:76:04:08:7f:d1:67:09:a9:e9:19:af:3e:ca:6b:
a7:d1:ef:7f:5a:86:a9:f0:af:09:38:3d:78:0c:5d:4a:bc:77:
a5:9c:ef:98:f9:f6:b0:b5:1b:7d:81:0c:40:a1:fc:9b:50:30:
3f:2f:53:75:1c:cb:c3:62:79:c0:ad:24:ac:13:94:b9:66:4a:
8d:cc:9c:6c:8f:e4:bb:9e:c9:6a:6a:86:dc:41:bd:55:61:15:
e3:b0:17:5a:07:31:fa:a6:32:3d:26:4b:05:ea:0c:ee:4b:d9:
0c:95:11:0c:68:45:71:d5:a7:a3:da:be:d8:28:74:83:8b:9e:
24:e7:e0:0d:4f:17:9e:2b:6a:24:f9:c3:4d:1a:84:a2:c4:d8:
a3:58:6c:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyei+blJRfRxU9JUHzatLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMwMTAyMTIzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjkxYzE5MGYyMjZlNTcyYzNiNzEyYjhkMzExYWRhZmIwOGRhNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMODNX/JMz2XsPayQws55dj1DOke
4uRtiVm6+DwZ9Cu5/oJlgGXEPgI5SrxQypZi9LfUHRg7ROkUZo9Mqlbh/fOAEo5Y
7na4SK205og3IsaXh2NnTYrSA1WRkXbBkTqb68sJB3D1SG2GIK50JNSBLHiWRsvT
ARwk++H2YhdTZpteA8c1a/OURbeBscmDkZb3PDljDlj0Cx0PqI8zJ814imx/gd6P
byNYUmnkO3q/rKc6CtehOZxbXIp1edsIenl4ukWeL3EHJaWztnCWptQONwsVOYux
8vtUyupbe1rwajXJVGk21UHXYWeqDPbOPnGzz3xolcQg7vEZLyzR+uHjDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHKRwZDyJuVyw7cSuNMRra+wjaWLMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvY3BIQmtQSW01WExEdHhLNDB4R3RyN0NOcFlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvP0QMA0G
CSqGSIb3DQEBCwUAA4IBAQC9t2I7p6KnZYFHCtzvT35iqLG2wHD3ECBx9dvl0zc4
2xoyDGc9H8EjilQpL99X+g1jCgSoN0gYxJufgnhW+BCW3GwJzUIHpXyf75bOWLT+
1jxc/0RUsTN/Q3BCpgyA7VvZrgPuRwgs99Sg1nF4WsszdgQIf9FnCanpGa8+ymun
0e9/Woap8K8JOD14DF1KvHelnO+Y+fawtRt9gQxAofybUDA/L1N1HMvDYnnArSSs
E5S5ZkqNzJxsj+S7nslqaobcQb1VYRXjsBdaBzH6pjI9JksF6gzuS9kMlREMaEVx
1aej2r7YKHSDi54k5+ANTxeeK2ok+cNNGoSixNijWGyv
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:24 2024 by rpki-client on console-ams.rpki-client.org