Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vhiUO4ij_SZkumocOxO-PSUCccg.roa
File: vhiUO4ij_SZkumocOxO-PSUCccg.roa (raw, json)
Hash identifier: nci1xZR2sH2O9wsYGHmGZld0I1hpflLM1ddJ1a9rwd4=
Subject key identifier: BE:18:94:3B:88:A3:FD:26:64:BA:6A:1C:3B:13:BE:3D:25:02:71:C8
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01856ECB734944D053C70CC1A6D51D74274D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vhiUO4ij_SZkumocOxO-PSUCccg.roa
Signing time: Sun 01 Jan 2023 19:25:05 +0000
ROA not before: Sun 01 Jan 2023 19:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39383
IP address blocks: 188.241.240.0/24 maxlen: 24
188.241.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 05:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:73:49:44:d0:53:c7:0c:c1:a6:d5:1d:74:27:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 19:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be18943b88a3fd2664ba6a1c3b13be3d250271c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ac:84:1c:30:3c:f3:e5:f8:0f:44:f6:89:21:
ed:0d:f1:db:6f:b8:64:08:01:b9:5b:83:58:d8:0c:
7f:61:10:6c:64:74:56:6c:55:30:ac:e5:73:3a:7e:
57:98:57:db:d8:c6:3d:b0:43:06:14:20:4f:74:7a:
2a:f1:0b:e3:7b:03:cd:3f:a0:c0:5c:db:39:c6:cb:
0e:21:de:45:c9:a0:94:1c:26:73:56:2b:63:cb:74:
3b:86:de:14:1d:ad:a2:87:01:ff:de:89:be:07:6c:
63:95:d0:b6:f9:30:78:b7:e6:b1:cc:9f:50:ac:1e:
f0:d1:f1:98:8c:d0:22:a6:0c:05:26:72:d6:7e:d2:
32:86:26:8e:b9:c2:f4:bf:b6:5e:ed:bc:09:ca:1b:
db:7a:27:c9:79:91:4c:86:69:62:57:59:db:91:63:
ed:3e:a8:b1:41:16:0d:bb:b0:c4:67:33:1d:33:9d:
ae:5d:4a:33:b3:ba:04:8c:5c:e7:87:c6:08:c2:80:
a1:0c:3e:f2:f9:e1:59:9f:1a:99:5b:df:48:69:b8:
19:be:4e:9f:57:0c:ca:6b:bc:b9:66:65:a5:b5:c2:
27:c3:3a:22:e7:27:a4:28:84:7a:4c:18:52:6d:ff:
52:77:95:39:a3:48:72:83:e6:43:a0:a9:39:27:35:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:18:94:3B:88:A3:FD:26:64:BA:6A:1C:3B:13:BE:3D:25:02:71:C8
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vhiUO4ij_SZkumocOxO-PSUCccg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.240.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:eb:db:5d:38:3c:d5:85:71:74:c3:07:ad:f4:bc:92:d6:3c:
72:6b:68:ba:2d:c7:69:67:fc:d4:99:29:95:93:f9:d7:38:b8:
70:aa:37:1b:4f:e0:80:d3:d9:f8:00:f2:f6:53:fc:1c:44:bf:
3c:1b:bf:5d:a9:fd:f2:6f:6c:0b:ec:ad:7d:12:93:48:ee:65:
29:fe:a9:86:19:14:f5:f0:c1:6d:b4:e3:32:4b:2b:7c:3a:91:
2f:12:39:6d:cd:15:7c:3a:bc:32:6a:9d:95:6a:b0:bd:ce:8c:
c8:6b:00:99:24:7c:93:9e:65:0e:29:f1:3f:a2:6a:50:e2:42:
3f:b4:c7:5e:8f:f8:ed:f3:63:26:b9:4f:01:ac:6d:28:ea:47:
31:1f:f4:ba:83:bf:c4:54:cf:65:01:66:10:17:4d:da:d1:45:
f9:e0:0f:3e:00:9a:0b:f8:08:8e:26:ac:7f:25:69:f1:c6:40:
60:49:4f:39:3c:24:e9:9f:c8:74:1f:db:fe:6c:61:74:1c:e8:
70:3c:b0:0b:48:32:2f:59:50:c5:7a:66:be:7b:db:27:2d:98:
80:f0:df:fa:70:e9:5d:93:ce:e4:9f:02:2a:d4:84:34:d8:3b:
59:55:2e:95:ad:a1:e1:39:87:98:6b:ec:17:e4:2e:47:b6:0e:
f4:25:2a:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuy3NJRNBTxwzBptUddCdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwMTAxMTkyNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTE4OTQzYjg4YTNmZDI2NjRiYTZhMWMzYjEzYmUzZDI1MDI3MWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6yEHDA88+X4D0T2iSHtDfHbb7hk
CAG5W4NY2Ax/YRBsZHRWbFUwrOVzOn5XmFfb2MY9sEMGFCBPdHoq8QvjewPNP6DA
XNs5xssOId5FyaCUHCZzVitjy3Q7ht4UHa2ihwH/3om+B2xjldC2+TB4t+axzJ9Q
rB7w0fGYjNAipgwFJnLWftIyhiaOucL0v7Ze7bwJyhvbeifJeZFMhmliV1nbkWPt
PqixQRYNu7DEZzMdM52uXUozs7oEjFznh8YIwoChDD7y+eFZnxqZW99IabgZvk6f
VwzKa7y5ZmWltcInwzoi5yekKIR6TBhSbf9Sd5U5o0hyg+ZDoKk5JzWT4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL4YlDuIo/0mZLpqHDsTvj0lAnHIMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvdmhpVU80aWpfU1prdW1vY094Ty1QU1VDY2NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvPHwMA0G
CSqGSIb3DQEBCwUAA4IBAQAM69tdODzVhXF0wwet9LyS1jxya2i6LcdpZ/zUmSmV
k/nXOLhwqjcbT+CA09n4APL2U/wcRL88G79dqf3yb2wL7K19EpNI7mUp/qmGGRT1
8MFttOMySyt8OpEvEjltzRV8Orwyap2VarC9zozIawCZJHyTnmUOKfE/ompQ4kI/
tMdej/jt82MmuU8BrG0o6kcxH/S6g7/EVM9lAWYQF03a0UX54A8+AJoL+AiOJqx/
JWnxxkBgSU85PCTpn8h0H9v+bGF0HOhwPLALSDIvWVDFema+e9snLZiA8N/6cOld
k87knwIq1IQ02DtZVS6VraHhOYeYa+wX5C5Htg70JSrv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org