Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/0E52CX7mceut0cFd19LMCSaaAVw.roa
File: 0E52CX7mceut0cFd19LMCSaaAVw.roa (raw, json)
Hash identifier: LgV7s2A92DeDdydraPkXXdXiOZSXo3335GT5T/wRuow=
Subject key identifier: D0:4E:76:09:7E:E6:71:EB:AD:D1:C1:5D:D7:D2:CC:09:26:9A:01:5C
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 01856C9CE6B1457D9AFC140C52AA1C7B7085
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/0E52CX7mceut0cFd19LMCSaaAVw.roa
Signing time: Sun 01 Jan 2023 09:15:00 +0000
ROA not before: Sun 01 Jan 2023 09:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61134
IP address blocks: 188.137.118.0/24 maxlen: 24
2a02:c47:c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:e6:b1:45:7d:9a:fc:14:0c:52:aa:1c:7b:70:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 09:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d04e76097ee671ebadd1c15dd7d2cc09269a015c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:97:2d:80:f4:ac:36:be:7f:9b:6c:22:76:
b5:d2:23:8b:e6:85:69:6c:59:77:ee:59:05:f3:69:
64:92:07:bd:7b:35:ad:34:36:61:59:c7:31:ec:b5:
0c:1e:73:ff:ed:01:79:9f:d5:f2:e2:b0:75:22:6f:
3d:d7:15:a1:06:1c:28:59:2a:41:51:6f:d1:04:df:
94:49:84:b3:4e:d7:fe:1b:a4:b3:1a:e7:6b:fb:53:
f3:1f:ee:c4:1f:75:b1:8b:b5:f1:a2:64:e8:eb:de:
bf:8d:37:16:69:2e:39:f1:a6:62:34:d2:1d:72:8f:
5d:6c:21:da:2b:ab:b8:89:82:6f:3d:b4:a1:fe:3e:
57:85:8f:bf:3f:68:fb:21:c8:f3:8f:81:b2:ce:f5:
f3:8a:1f:93:93:87:d3:40:ab:f8:41:89:c8:04:71:
72:f6:25:73:14:af:f3:a7:67:2f:24:5e:71:5b:c7:
f1:38:8c:31:5f:84:44:d0:ea:40:86:5f:36:55:60:
44:51:33:9d:70:3e:85:fd:00:50:11:ae:d2:e0:69:
3b:76:bf:29:c6:84:95:43:46:58:34:8e:24:32:2f:
1d:7d:96:9c:3e:c5:67:9b:92:86:d7:2e:81:97:57:
4b:e2:04:d5:fe:d1:48:d5:c6:32:c6:5f:9d:e8:f4:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4E:76:09:7E:E6:71:EB:AD:D1:C1:5D:D7:D2:CC:09:26:9A:01:5C
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/0E52CX7mceut0cFd19LMCSaaAVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.137.118.0/24
IPv6:
2a02:c47:c::/48
Signature Algorithm: sha256WithRSAEncryption
95:06:d8:21:53:cb:e6:d0:c9:3b:08:c2:82:84:c0:e1:f3:e4:
1a:47:71:f5:5b:2b:bc:05:a0:73:91:1a:51:df:c8:3a:7c:ea:
94:96:83:fd:29:b5:b5:14:59:d8:0d:e0:39:82:c5:2d:3f:b6:
b4:9c:e4:d5:d7:ca:d8:33:f9:c8:e6:cb:ad:f5:82:f7:55:6f:
42:2d:1f:40:2a:bd:98:65:bf:c8:89:68:57:8f:04:a2:96:51:
6b:1f:59:be:e8:71:1a:c2:11:a1:38:ed:a5:53:43:ba:e1:4c:
32:d5:ee:2c:6a:17:21:17:93:c8:3c:63:81:25:3c:48:d8:2c:
a9:a4:30:5c:38:87:31:6b:78:ff:51:0d:06:68:8f:aa:06:60:
cf:24:9a:03:54:95:16:da:83:f0:80:28:33:94:b8:37:c9:0b:
4d:45:14:75:f4:61:bf:71:ed:21:f9:af:20:ca:ce:dc:2b:b9:
28:0c:9a:4e:62:08:a1:5e:2a:c7:4b:29:a1:ac:3f:82:e1:fd:
6f:12:73:2c:0d:ab:46:05:f8:0a:dd:ea:40:0b:11:e7:d9:47:
25:2a:73:5d:c0:c5:2d:2b:e2:84:db:49:c5:b0:c3:b0:57:16:
77:5e:9d:6f:c8:8e:79:ec:1b:db:32:99:57:65:c2:60:4b:7a:
77:0e:9b:5a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVsnOaxRX2a/BQMUqoce3CFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3
MzlkMjEwHhcNMjMwMTAxMDkxNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDRlNzYwOTdlZTY3MWViYWRkMWMxNWRkN2QyY2MwOTI2OWEwMTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiweXLYD0rDa+f5tsIna10iOL5oVp
bFl37lkF82lkkge9ezWtNDZhWccx7LUMHnP/7QF5n9Xy4rB1Im891xWhBhwoWSpB
UW/RBN+USYSzTtf+G6SzGudr+1PzH+7EH3Wxi7XxomTo696/jTcWaS458aZiNNId
co9dbCHaK6u4iYJvPbSh/j5XhY+/P2j7Icjzj4GyzvXzih+Tk4fTQKv4QYnIBHFy
9iVzFK/zp2cvJF5xW8fxOIwxX4RE0OpAhl82VWBEUTOdcD6F/QBQEa7S4Gk7dr8p
xoSVQ0ZYNI4kMi8dfZacPsVnm5KG1y6Bl1dL4gTV/tFI1cYyxl+d6PSMHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNBOdgl+5nHrrdHBXdfSzAkmmgFcMB8GA1UdIwQY
MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt
MWY5MjQ0OTVmY2RkLzEvMEU1MkNYN21jZXV0MGNGZDE5TE1DU2FhQVZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk
LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAvIl2MA8E
AgACMAkDBwAqAgxHAAwwDQYJKoZIhvcNAQELBQADggEBAJUG2CFTy+bQyTsIwoKE
wOHz5BpHcfVbK7wFoHORGlHfyDp86pSWg/0ptbUUWdgN4DmCxS0/trSc5NXXytgz
+cjmy631gvdVb0ItH0AqvZhlv8iJaFePBKKWUWsfWb7ocRrCEaE47aVTQ7rhTDLV
7ixqFyEXk8g8Y4ElPEjYLKmkMFw4hzFreP9RDQZoj6oGYM8kmgNUlRbag/CAKDOU
uDfJC01FFHX0Yb9x7SH5ryDKztwruSgMmk5iCKFeKsdLKaGsP4Lh/W8ScywNq0YF
+Ard6kALEefZRyUqc13AxS0r4oTbScWww7BXFndenW/IjnnsG9symVdlwmBLencO
m1o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:22 2024 by rpki-client on console-fra.rpki-client.org