Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/4NAjCtKuTILOBkrhXHNdIsIIENw.roa
File: 4NAjCtKuTILOBkrhXHNdIsIIENw.roa (raw, json)
Hash identifier: Bw9g0W3rQhJpYoim2VF05Qg334rEmPzwJrWn5F2G98Q=
Subject key identifier: E0:D0:23:0A:D2:AE:4C:82:CE:06:4A:E1:5C:73:5D:22:C2:08:10:DC
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 018AB78627D684B1EDC1E20E232D384F3DCD
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/4NAjCtKuTILOBkrhXHNdIsIIENw.roa
Signing time: Thu 21 Sep 2023 11:35:37 +0000
ROA not before: Thu 21 Sep 2023 11:35:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 188.208.196.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 04 Oct 2023 11:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:86:27:d6:84:b1:ed:c1:e2:0e:23:2d:38:4f:3d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Sep 21 11:35:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0d0230ad2ae4c82ce064ae15c735d22c20810dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ff:e8:9b:36:84:b6:cd:2a:93:27:c8:70:a5:
71:8b:63:8f:72:fb:75:32:a7:b5:b5:48:1f:1a:d1:
72:fa:43:39:f8:73:d3:2b:f0:ef:33:e7:e6:01:2b:
d9:10:82:6d:3b:99:e1:97:25:14:0a:27:26:1f:aa:
c4:44:ab:3b:c2:5b:b0:26:40:47:fd:1a:e0:c9:91:
6a:2e:b2:2e:f4:6e:ed:5e:3a:11:7c:7d:af:db:55:
6d:2a:d5:6b:dc:91:f0:30:8e:8d:9b:78:79:0a:40:
12:03:f1:06:81:dc:75:19:7e:f9:5e:51:94:e9:41:
43:c5:ab:33:13:30:30:59:4e:64:33:b9:0c:ae:11:
af:40:e3:01:ac:b5:73:97:00:c6:5b:db:e2:ed:03:
37:86:76:f4:1b:aa:34:aa:d3:cd:42:18:04:1c:45:
c7:73:62:c9:81:64:50:72:11:18:70:dd:0c:d8:55:
df:e1:0a:bb:2a:93:ec:f7:d9:3c:02:fb:38:c0:9f:
86:36:7e:b6:8b:9a:4c:35:ae:df:09:42:94:2c:6c:
6a:a9:1d:b7:64:40:ef:50:49:99:e1:e5:18:e9:0c:
3e:a3:61:78:b6:4c:40:f5:ce:c0:3a:7e:98:fb:ba:
41:3d:c2:2a:20:a9:d6:cf:a1:d2:15:21:ec:9e:5a:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D0:23:0A:D2:AE:4C:82:CE:06:4A:E1:5C:73:5D:22:C2:08:10:DC
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/4NAjCtKuTILOBkrhXHNdIsIIENw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.196.0/23
Signature Algorithm: sha256WithRSAEncryption
98:89:d9:1d:64:26:bd:ab:50:02:e6:ad:b3:e2:6a:84:da:63:
6e:ab:ce:ca:ea:e6:8c:27:43:3f:08:90:95:99:6f:54:f8:c3:
04:65:d7:9b:b8:ff:5c:93:81:2c:fa:d6:17:2a:2c:99:2a:e8:
ac:3b:e2:80:b8:10:85:93:37:56:1d:80:93:00:28:3a:05:16:
7a:a7:2c:11:67:74:b9:51:14:2e:39:de:96:d4:74:9a:38:76:
0d:57:cf:7d:dc:b1:52:a3:dc:4d:07:c3:03:ae:fe:4b:fd:0b:
fc:4d:81:22:97:07:bf:4c:2d:a0:a7:ac:d9:56:10:89:32:05:
5c:49:08:c1:f9:69:9b:3f:d0:2f:f2:42:0c:a4:49:89:6c:d3:
c2:8b:42:a6:33:56:99:2d:8c:ab:0e:b8:a5:c2:e8:8b:38:08:
99:cf:12:84:ed:83:96:3b:80:b4:03:0a:a8:54:b4:ee:35:be:
23:8b:fe:e9:5c:87:10:e7:ce:26:79:1b:a2:92:57:6f:4a:6b:
61:d3:3a:cb:8f:12:46:e5:c7:94:2c:f2:93:13:39:d3:0f:c3:
2f:52:35:f5:44:fa:d9:13:82:2d:56:32:af:71:75:38:a2:d3:
19:95:0c:ac:6e:08:17:4e:03:88:96:f3:1a:ff:5a:a7:c7:1c:
9a:ed:5f:4c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYq3hifWhLHtweIOIy04Tz3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1
Y2IzNmYwHhcNMjMwOTIxMTEzNTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGQwMjMwYWQyYWU0YzgyY2UwNjRhZTE1YzczNWQyMmMyMDgxMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f/omzaEts0qkyfIcKVxi2OPcvt1
Mqe1tUgfGtFy+kM5+HPTK/DvM+fmASvZEIJtO5nhlyUUCicmH6rERKs7wluwJkBH
/RrgyZFqLrIu9G7tXjoRfH2v21VtKtVr3JHwMI6Nm3h5CkASA/EGgdx1GX75XlGU
6UFDxaszEzAwWU5kM7kMrhGvQOMBrLVzlwDGW9vi7QM3hnb0G6o0qtPNQhgEHEXH
c2LJgWRQchEYcN0M2FXf4Qq7KpPs99k8Avs4wJ+GNn62i5pMNa7fCUKULGxqqR23
ZEDvUEmZ4eUY6Qw+o2F4tkxA9c7AOn6Y+7pBPcIqIKnWz6HSFSHsnlpAdQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFODQIwrSrkyCzgZK4VxzXSLCCBDcMB8GA1UdIwQY
MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2
LWVlMDU3Y2Y5YzE2MS8xLzROQWpDdEt1VElMT0JrcmhYSE5kSXNJSUVOdy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2LWVlMDU3Y2Y5YzE2
MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG80MQw
DQYJKoZIhvcNAQELBQADggEBAJiJ2R1kJr2rUALmrbPiaoTaY26rzsrq5ownQz8I
kJWZb1T4wwRl15u4/1yTgSz61hcqLJkq6Kw74oC4EIWTN1YdgJMAKDoFFnqnLBFn
dLlRFC453pbUdJo4dg1Xz33csVKj3E0HwwOu/kv9C/xNgSKXB79MLaCnrNlWEIky
BVxJCMH5aZs/0C/yQgykSYls08KLQqYzVpktjKsOuKXC6Is4CJnPEoTtg5Y7gLQD
CqhUtO41viOL/ulchxDnziZ5G6KSV29Ka2HTOsuPEkblx5Qs8pMTOdMPwy9SNfVE
+tkTgi1WMq9xdTii0xmVDKxuCBdOA4iW8xr/WqfHHJrtX0w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:18 2024 by rpki-client on console-fra.rpki-client.org