Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/IfUKhHZsFpXapQieviqCB6JglJU.roa
File: IfUKhHZsFpXapQieviqCB6JglJU.roa (raw, json)
Hash identifier: r4takLKyb3tcrpLGyXBsNmo/T7mYMEvzLNybGzklf+w=
Subject key identifier: 21:F5:0A:84:76:6C:16:95:DA:A5:08:9E:BE:2A:82:07:A2:60:94:95
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018BE73FD292D28534BF40C916FCBC1EDABA
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/IfUKhHZsFpXapQieviqCB6JglJU.roa
Signing time: Sun 19 Nov 2023 11:03:21 +0000
ROA not before: Sun 19 Nov 2023 11:03:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 188.64.108.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:3f:d2:92:d2:85:34:bf:40:c9:16:fc:bc:1e:da:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Nov 19 11:03:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21f50a84766c1695daa5089ebe2a8207a2609495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:01:61:fa:08:7c:0b:c6:f4:11:3f:a6:ef:
2d:f6:a0:5f:2d:6e:75:f8:de:dd:b6:17:6d:a5:bc:
f9:f8:aa:ce:c7:a0:c2:eb:b5:e2:b9:87:af:cc:9e:
3d:69:ce:51:6e:d3:3f:f9:5a:ac:d4:b1:80:d5:37:
0e:86:2d:44:b1:66:5a:1c:4e:2f:ed:d8:fc:aa:ab:
37:d4:a6:b1:b4:27:7b:4a:c6:d8:14:e7:47:2f:7c:
cd:55:94:30:ce:9c:37:bb:b3:7f:4c:30:eb:b8:d1:
c3:2a:74:31:48:04:47:18:6d:6c:f2:c7:0a:7b:b8:
04:83:5a:af:3e:e6:69:9b:a5:f2:ee:31:f1:48:8a:
e9:43:e4:ae:98:31:13:fc:d0:a1:3c:7c:50:4b:41:
c6:67:aa:d6:3c:45:80:c8:42:74:10:10:d9:90:a0:
f9:61:47:04:38:42:5b:18:15:39:34:ed:ba:f8:3f:
74:40:a3:44:9a:d3:17:df:a4:51:12:16:a9:b7:17:
13:ae:f1:93:22:28:3a:2d:b8:1b:4b:ae:89:b2:70:
7b:53:07:0a:ee:4d:8b:4f:46:3a:50:8c:00:a0:44:
2d:27:fc:5d:a4:7c:b1:33:90:cc:9b:a4:96:54:1d:
df:c6:14:18:ab:b3:37:f0:b8:e0:90:ea:3c:d2:98:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F5:0A:84:76:6C:16:95:DA:A5:08:9E:BE:2A:82:07:A2:60:94:95
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/IfUKhHZsFpXapQieviqCB6JglJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.108.0/22
Signature Algorithm: sha256WithRSAEncryption
30:94:5e:03:19:1f:65:ef:90:9b:de:b4:69:d0:d1:5d:dc:e6:
4e:cd:da:e9:80:94:27:be:8a:3c:47:23:88:e0:e2:05:46:d2:
64:22:9a:28:51:d8:62:80:1e:0e:13:ea:dc:53:7e:2d:d4:3e:
69:75:9c:29:7a:5a:01:d8:a5:6b:ac:1b:c0:54:9b:bc:0d:cc:
b4:d6:85:03:d4:c4:c0:f5:97:2a:3b:98:ee:c7:ed:c7:6d:06:
83:39:b2:13:60:1b:6e:79:3d:00:46:51:fc:1c:0f:c9:3c:00:
9b:df:4e:a8:b7:75:8b:14:81:41:bc:6c:b5:7c:a7:4c:c5:15:
c6:7d:60:ef:87:0d:ca:d4:97:8c:04:27:f3:c9:b0:59:59:77:
9f:0d:c2:6d:f5:88:f8:2e:d0:c7:95:0a:d4:20:f2:45:1b:f5:
61:b6:74:e4:2d:e0:6f:52:0a:f9:06:a9:77:53:4a:9f:7e:33:
41:de:db:ad:72:a1:25:9b:b7:26:03:aa:e6:65:0a:5d:55:86:
6d:4c:43:3f:f9:8e:bf:a9:9a:52:25:55:1b:55:e8:7d:db:2d:
30:05:1a:c9:98:bd:c0:96:83:ac:8d:f7:95:ae:34:59:7b:67:
63:41:b1:54:ce:05:00:bf:8b:75:50:ca:69:2c:4a:1f:63:4b:
96:47:e5:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvnP9KS0oU0v0DJFvy8Htq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjMxMTE5MTEwMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWY1MGE4NDc2NmMxNjk1ZGFhNTA4OWViZTJhODIwN2EyNjA5NDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsusBYfoIfAvG9BE/pu8t9qBfLW51
+N7dthdtpbz5+KrOx6DC67XiuYevzJ49ac5RbtM/+Vqs1LGA1TcOhi1EsWZaHE4v
7dj8qqs31KaxtCd7SsbYFOdHL3zNVZQwzpw3u7N/TDDruNHDKnQxSARHGG1s8scK
e7gEg1qvPuZpm6Xy7jHxSIrpQ+SumDET/NChPHxQS0HGZ6rWPEWAyEJ0EBDZkKD5
YUcEOEJbGBU5NO26+D90QKNEmtMX36RREhaptxcTrvGTIig6LbgbS66JsnB7UwcK
7k2LT0Y6UIwAoEQtJ/xdpHyxM5DMm6SWVB3fxhQYq7M38LjgkOo80pj/3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCH1CoR2bBaV2qUInr4qggeiYJSVMB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvSWZVS2hIWnNGcFhhcFFpZXZpcUNCNkpnbEpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvEBsMA0G
CSqGSIb3DQEBCwUAA4IBAQAwlF4DGR9l75Cb3rRp0NFd3OZOzdrpgJQnvoo8RyOI
4OIFRtJkIpooUdhigB4OE+rcU34t1D5pdZwpeloB2KVrrBvAVJu8Dcy01oUD1MTA
9ZcqO5jux+3HbQaDObITYBtueT0ARlH8HA/JPACb306ot3WLFIFBvGy1fKdMxRXG
fWDvhw3K1JeMBCfzybBZWXefDcJt9Yj4LtDHlQrUIPJFG/VhtnTkLeBvUgr5Bql3
U0qffjNB3tutcqElm7cmA6rmZQpdVYZtTEM/+Y6/qZpSJVUbVeh92y0wBRrJmL3A
loOsjfeVrjRZe2djQbFUzgUAv4t1UMppLEofY0uWR+Xi
-----END CERTIFICATE-----
Generated at Tue Dec 19 07:28:31 2023 by rpki-client on console-fra.rpki-client.org