Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eY3p5hbkgBmjRrWx2t9X_hpS_gs.roa
File: eY3p5hbkgBmjRrWx2t9X_hpS_gs.roa (raw, json)
Hash identifier: Hm4LHgoLyeNkDZ/4gbZPZPtOc2rgAYgOKIsXcC4Z6Lg=
Subject key identifier: 79:8D:E9:E6:16:E4:80:19:A3:46:B5:B1:DA:DF:57:FE:1A:52:FE:0B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018A47A44EF785A4684AA4F5F2F924BEAF4B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eY3p5hbkgBmjRrWx2t9X_hpS_gs.roa
Signing time: Wed 30 Aug 2023 18:11:05 +0000
ROA not before: Wed 30 Aug 2023 18:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44103
IP address blocks: 188.212.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:47:a4:4e:f7:85:a4:68:4a:a4:f5:f2:f9:24:be:af:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 30 18:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=798de9e616e48019a346b5b1dadf57fe1a52fe0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ed:44:d9:d1:13:06:89:03:ee:17:8c:4e:0d:
43:a9:28:49:04:79:13:b4:8d:7f:d5:ad:7b:fb:bb:
11:01:47:9d:07:06:ed:9b:9c:6c:fd:c3:45:df:ed:
de:41:66:0d:01:98:18:d7:73:56:72:24:e4:8e:96:
4f:bc:73:66:8b:b4:f9:d6:af:29:a7:cd:fd:27:8e:
0b:11:70:18:74:6f:25:92:b3:08:c4:2c:a3:02:02:
62:e4:6b:73:9d:d6:1e:4f:00:20:4c:30:f5:d7:f1:
7b:f2:1a:c6:59:d2:3c:c9:ed:0d:4f:59:3a:05:1a:
d6:8e:ed:ab:d9:e0:90:44:3f:1b:23:93:e3:fe:73:
d7:5e:c7:17:2d:71:3a:c4:c8:1a:0f:bc:8b:6d:ae:
dd:fc:90:75:66:47:f3:8e:a2:38:d3:c5:a9:5c:37:
d8:c7:3b:5e:31:05:ce:22:2e:a0:52:be:fd:bb:e5:
c3:81:5c:44:8f:be:70:79:de:87:da:dd:46:51:59:
31:aa:dc:4e:3e:68:3a:54:ea:cf:e7:3b:5c:ae:05:
0e:6e:ea:58:c3:4b:03:91:18:c5:7a:80:90:ad:43:
fe:da:29:b7:3e:f0:c7:6e:9d:7e:8d:56:1a:13:56:
1e:a1:7d:57:e3:53:40:2f:dd:84:c3:b9:3c:1f:d1:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8D:E9:E6:16:E4:80:19:A3:46:B5:B1:DA:DF:57:FE:1A:52:FE:0B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eY3p5hbkgBmjRrWx2t9X_hpS_gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.132.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9d:5e:5e:89:0f:02:89:07:9f:3a:b4:92:85:18:c3:80:40:
28:e2:76:2f:41:fd:6d:2c:23:f7:a2:ca:68:1c:73:6a:d0:c4:
fc:92:f9:f4:83:74:b1:ef:1d:1d:ac:17:c1:32:0b:47:1f:33:
2d:94:bd:37:36:de:42:cc:e2:b9:78:bf:af:ee:ee:87:97:1a:
9c:07:dc:69:02:b1:27:61:a2:fd:66:aa:21:11:ec:fc:02:d9:
d0:8b:33:ab:85:7a:b6:1c:d3:40:50:71:1a:e5:d4:cb:49:6c:
b1:7d:3b:51:95:fe:5d:1d:53:c7:e4:5f:5f:97:d7:91:5d:d7:
3c:b2:d1:89:f8:d1:73:23:99:19:c7:74:34:d8:b1:33:db:a6:
34:b4:d8:c7:d5:4b:35:ad:3c:b9:35:ad:0e:11:81:eb:10:9c:
63:be:e2:08:e1:6a:c5:19:29:87:63:2d:26:b5:11:2b:3b:e6:
7d:55:41:7b:6f:77:72:cf:45:3b:b7:c1:6c:81:09:d7:21:12:
8e:48:09:5d:3d:02:1f:ab:36:7e:ea:18:56:f0:56:a9:37:6a:
df:c2:39:df:c3:79:98:d9:a6:96:5b:b9:02:90:22:69:fc:c1:
8e:8d:fd:d4:eb:4b:ef:e3:5c:f0:af:f7:a2:dc:bd:5c:6c:b3:
f7:1e:00:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpHpE73haRoSqT18vkkvq9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwODMwMTgxMTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OThkZTllNjE2ZTQ4MDE5YTM0NmI1YjFkYWRmNTdmZTFhNTJmZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie1E2dETBokD7heMTg1DqShJBHkT
tI1/1a17+7sRAUedBwbtm5xs/cNF3+3eQWYNAZgY13NWciTkjpZPvHNmi7T51q8p
p839J44LEXAYdG8lkrMIxCyjAgJi5GtzndYeTwAgTDD11/F78hrGWdI8ye0NT1k6
BRrWju2r2eCQRD8bI5Pj/nPXXscXLXE6xMgaD7yLba7d/JB1ZkfzjqI408WpXDfY
xzteMQXOIi6gUr79u+XDgVxEj75wed6H2t1GUVkxqtxOPmg6VOrP5ztcrgUObupY
w0sDkRjFeoCQrUP+2im3PvDHbp1+jVYaE1YeoX1X41NAL92Ew7k8H9GFsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHmN6eYW5IAZo0a1sdrfV/4aUv4LMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvZVkzcDVoYmtnQm1qUnJXeDJ0OVhfaHBTX2dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNSEMA0G
CSqGSIb3DQEBCwUAA4IBAQCEnV5eiQ8CiQefOrSShRjDgEAo4nYvQf1tLCP3ospo
HHNq0MT8kvn0g3Sx7x0drBfBMgtHHzMtlL03Nt5CzOK5eL+v7u6HlxqcB9xpArEn
YaL9ZqohEez8AtnQizOrhXq2HNNAUHEa5dTLSWyxfTtRlf5dHVPH5F9fl9eRXdc8
stGJ+NFzI5kZx3Q02LEz26Y0tNjH1Us1rTy5Na0OEYHrEJxjvuII4WrFGSmHYy0m
tRErO+Z9VUF7b3dyz0U7t8FsgQnXIRKOSAldPQIfqzZ+6hhW8FapN2rfwjnfw3mY
2aaWW7kCkCJp/MGOjf3U60vv41zwr/ei3L1cbLP3HgDm
Generated at Mon Sep 11 18:12:12 2023 by rpki-client on console-ams.rpki-client.org