Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/Vy_RAMTt1CaOEiuY6GAAhspzVIA.roa
File: Vy_RAMTt1CaOEiuY6GAAhspzVIA.roa (raw, json)
Hash identifier: ALceKCmI5Xk/6Taav0Hirh3uZBKjoASA0Z5Qgf6vfXg=
Subject key identifier: 57:2F:D1:00:C4:ED:D4:26:8E:12:2B:98:E8:60:00:86:CA:73:54:80
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 018C43CD43F62CF74FACD6B82DBB50D1F93B
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/Vy_RAMTt1CaOEiuY6GAAhspzVIA.roa
Signing time: Thu 07 Dec 2023 10:22:54 +0000
ROA not before: Thu 07 Dec 2023 10:22:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 188.208.196.0/23 maxlen: 23
188.214.194.0/24 maxlen: 24
2a06:f940::/48 maxlen: 48
2a06:f940:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:cd:43:f6:2c:f7:4f:ac:d6:b8:2d:bb:50:d1:f9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Dec 7 10:22:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=572fd100c4edd4268e122b98e8600086ca735480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:a9:f4:1a:93:3d:be:72:94:97:3e:8b:fa:
94:07:d4:2c:a7:a9:76:b4:3c:5e:07:53:30:42:3a:
10:0d:bb:0f:f6:c5:26:41:2b:c2:0f:a3:2e:3c:49:
1d:53:dc:7e:86:80:bb:e1:bf:e2:c9:56:4d:41:4f:
8b:d5:a8:d9:23:bc:39:9d:08:ac:76:df:ca:87:4a:
f5:f2:ef:4c:da:c4:50:f4:9c:96:10:d8:b7:5f:af:
cd:10:d5:5f:f2:8c:5e:2f:fa:62:cd:a4:bf:12:cd:
5d:74:0d:3a:80:e9:53:35:8c:25:51:83:f8:aa:cc:
05:37:6d:5c:e4:00:79:1b:c7:b0:9c:91:b5:ae:c9:
83:d3:7e:e7:67:1e:0d:68:4b:91:4d:66:0f:40:09:
5f:14:c3:0e:74:9c:ec:61:ef:42:f8:07:44:ef:5c:
4e:e9:79:90:1d:35:7b:55:4c:64:8c:e5:f3:d8:c5:
12:73:32:9e:5d:09:0e:0e:f3:16:91:92:11:ac:0c:
69:46:aa:96:6d:44:a1:9e:9b:ee:b4:05:fd:73:1f:
c1:0b:9d:c0:15:0a:e1:9e:29:ec:d7:7b:d5:96:23:
e0:b0:db:09:11:58:8b:d2:5b:1a:d3:80:b9:09:35:
f6:01:64:ac:ab:8b:d4:40:95:87:a9:5f:cd:af:b6:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2F:D1:00:C4:ED:D4:26:8E:12:2B:98:E8:60:00:86:CA:73:54:80
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/Vy_RAMTt1CaOEiuY6GAAhspzVIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.196.0/23
188.214.194.0/24
IPv6:
2a06:f940::/47
Signature Algorithm: sha256WithRSAEncryption
b7:3d:04:be:7c:f0:0c:c3:81:5b:73:c3:e6:02:82:63:c8:be:
4f:1d:20:b1:d4:34:76:a6:21:05:c4:86:c6:d4:c1:55:51:92:
5d:44:b6:0b:7b:f8:a8:b0:9f:70:01:df:fa:97:6a:20:dc:0d:
79:77:a2:65:b0:17:0b:c8:87:f5:89:45:88:c9:83:f6:17:ea:
ed:1b:d6:dd:85:9d:27:ab:cb:a6:2f:c0:ab:3e:07:f6:72:e7:
a6:1c:2f:07:26:c8:63:b8:ee:bb:fd:09:29:ae:a1:54:c5:4c:
53:a4:b4:6c:b1:5d:34:48:55:0c:1d:64:e6:dd:f2:45:3e:bd:
4e:31:1b:bc:29:96:49:57:c8:01:b2:f9:cb:f1:c1:10:83:d6:
66:b6:e5:cc:2a:f7:50:b0:4c:06:0a:a1:e6:57:7f:03:5a:6d:
9d:6c:68:03:cc:11:2d:85:ff:f4:61:b7:40:99:4d:68:d1:91:
76:9a:6c:8b:20:36:c9:7f:7d:1b:07:32:6b:2e:d1:d5:e5:de:
a0:b7:3f:12:ca:49:8b:90:e7:c8:54:bf:4f:8d:d3:5d:93:14:
e5:0b:a3:ad:d9:dc:d2:55:cc:dd:1a:af:90:e6:44:1b:8f:b9:
b6:d0:6a:9c:18:bc:15:02:1d:a0:97:af:9e:02:0c:37:6f:e9:
bb:cb:e1:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxDzUP2LPdPrNa4LbtQ0fk7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1
Y2IzNmYwHhcNMjMxMjA3MTAyMjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzJmZDEwMGM0ZWRkNDI2OGUxMjJiOThlODYwMDA4NmNhNzM1NDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndWp9BqTPb5ylJc+i/qUB9Qsp6l2
tDxeB1MwQjoQDbsP9sUmQSvCD6MuPEkdU9x+hoC74b/iyVZNQU+L1ajZI7w5nQis
dt/Kh0r18u9M2sRQ9JyWENi3X6/NENVf8oxeL/pizaS/Es1ddA06gOlTNYwlUYP4
qswFN21c5AB5G8ewnJG1rsmD037nZx4NaEuRTWYPQAlfFMMOdJzsYe9C+AdE71xO
6XmQHTV7VUxkjOXz2MUSczKeXQkODvMWkZIRrAxpRqqWbUShnpvutAX9cx/BC53A
FQrhnins13vVliPgsNsJEViL0lsa04C5CTX2AWSsq4vUQJWHqV/Nr7Y4YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcv0QDE7dQmjhIrmOhgAIbKc1SAMB8GA1UdIwQY
MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2
LWVlMDU3Y2Y5YzE2MS8xL1Z5X1JBTVR0MUNhT0VpdVk2R0FBaHNwelZJQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2LWVlMDU3Y2Y5YzE2
MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwDBAG80MQD
BAC81sIwDwQCAAIwCQMHASoG+UAAADANBgkqhkiG9w0BAQsFAAOCAQEAtz0Evnzw
DMOBW3PD5gKCY8i+Tx0gsdQ0dqYhBcSGxtTBVVGSXUS2C3v4qLCfcAHf+pdqINwN
eXeiZbAXC8iH9YlFiMmD9hfq7RvW3YWdJ6vLpi/Aqz4H9nLnphwvBybIY7juu/0J
Ka6hVMVMU6S0bLFdNEhVDB1k5t3yRT69TjEbvCmWSVfIAbL5y/HBEIPWZrblzCr3
ULBMBgqh5ld/A1ptnWxoA8wRLYX/9GG3QJlNaNGRdppsiyA2yX99Gwcyay7R1eXe
oLc/EspJi5DnyFS/T43TXZMU5Qujrdnc0lXM3RqvkOZEG4+5ttBqnBi8FQIdoJev
ngIMN2/pu8vh4w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:18 2024 by rpki-client on console-fra.rpki-client.org