Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/p5MHACx2lgqQ2JDHxzN87NtOWCA.roa
File: p5MHACx2lgqQ2JDHxzN87NtOWCA.roa (raw, json)
Hash identifier: KGC3lBNxs7zdN2j9STJE3iNwjc/5X/A8URcy0nCCmA0=
Subject key identifier: A7:93:07:00:2C:76:96:0A:90:D8:90:C7:C7:33:7C:EC:DB:4E:58:20
Certificate issuer: /CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
Certificate serial: 018D1D1C9F312C3D697DD4C8CCFA58872FA3
Authority key identifier: 37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/p5MHACx2lgqQ2JDHxzN87NtOWCA.roa
Signing time: Thu 18 Jan 2024 15:07:11 +0000
ROA not before: Thu 18 Jan 2024 15:07:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207744
IP address blocks: 188.190.192.0/19 maxlen: 19
188.190.217.0/24 maxlen: 24
188.190.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 09:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1d:1c:9f:31:2c:3d:69:7d:d4:c8:cc:fa:58:87:2f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
Validity
Not Before: Jan 18 15:07:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a79307002c76960a90d890c7c7337cecdb4e5820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:53:7b:e6:83:27:7d:ea:20:1d:30:68:3d:
27:10:aa:5a:2b:53:8a:cf:1f:e0:66:c1:ce:e3:2d:
a3:77:30:f6:4b:dc:e1:3d:85:e3:6d:e3:42:13:24:
80:45:2b:5f:21:da:41:84:d9:ce:2f:a3:86:42:ba:
91:e3:97:61:80:e1:2c:95:45:54:43:59:27:7e:2e:
f1:5e:5e:64:b4:45:b4:a6:7f:c2:ee:ea:ab:a5:6a:
9b:35:f9:9a:d2:71:74:a1:4d:60:6b:db:2d:eb:db:
fe:a0:1d:ca:40:d0:db:dd:3e:f1:15:d0:d2:e2:3f:
c4:1a:a7:07:0c:59:fe:c9:cd:a0:d7:6b:bb:73:3a:
8e:68:ff:12:9b:7d:8a:c9:3a:68:d2:9a:5b:44:56:
2e:0d:2c:c8:05:96:6d:ca:1f:6c:be:f2:25:11:11:
e6:bb:c4:00:0f:bf:ef:ba:8b:4d:b9:cb:cc:9a:72:
11:d1:cc:7c:55:74:61:2b:94:19:c6:09:4c:8e:14:
ae:fc:88:e4:f9:7f:97:2f:c5:bb:50:71:5e:ea:26:
a5:2a:82:d8:fd:11:72:27:79:44:bf:a5:de:af:f2:
21:25:6c:d5:f2:8b:ad:a5:97:28:7d:90:a7:24:20:
5b:74:1c:df:5d:eb:37:81:8b:1c:f8:d9:ba:61:dc:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:93:07:00:2C:76:96:0A:90:D8:90:C7:C7:33:7C:EC:DB:4E:58:20
X509v3 Authority Key Identifier:
keyid:37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/p5MHACx2lgqQ2JDHxzN87NtOWCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.192.0/19
Signature Algorithm: sha256WithRSAEncryption
31:17:01:24:57:7c:dc:b2:53:dc:48:1f:71:f9:ce:ad:7d:98:
20:9b:9e:a4:89:81:f8:96:4e:d5:33:3d:a1:66:be:9b:ce:3b:
78:1c:f1:d0:df:32:d7:73:4e:e6:23:e1:77:4a:11:e9:68:78:
e7:87:1b:de:53:93:7e:9b:2b:49:b6:86:1c:f4:29:19:80:db:
90:a5:0b:8e:c3:c5:8e:2b:a9:c8:2f:6e:6a:2b:9b:45:78:6a:
b2:a7:e3:ee:ca:41:1e:ae:2a:af:b0:f5:16:25:5c:ca:61:97:
be:a3:35:49:57:21:d9:71:45:bd:ec:5c:32:00:71:4a:c1:ca:
ba:b5:81:cb:6f:ee:a1:21:05:ed:0c:90:94:da:3f:f1:a4:c7:
27:0a:b3:99:75:0d:48:e9:10:70:14:e2:b2:86:b5:a5:72:86:
d3:fa:f5:47:30:e4:99:3d:0b:85:d8:37:8a:7f:c2:04:56:dc:
07:0e:7e:a1:89:e9:72:b9:87:99:c9:09:d0:68:f7:a7:14:71:
5d:fe:84:fd:9f:41:58:9e:d4:26:d3:a9:88:91:c9:5c:6b:0d:
ea:a1:62:d4:7e:97:75:e6:ba:e2:e5:ee:0c:24:7b:03:1d:28:
1c:5b:fe:7b:e6:f6:36:46:8f:ca:0b:53:5d:ad:b1:3d:00:71:
8a:a3:b0:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0dHJ8xLD1pfdTIzPpYhy+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODBlNzg2OGZiYjI2MTcxNzUwNjJhNWU3YjllMWMwNDlj
YmRmNzQwHhcNMjQwMTE4MTUwNzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzkzMDcwMDJjNzY5NjBhOTBkODkwYzdjNzMzN2NlY2RiNGU1ODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCBTe+aDJ33qIB0waD0nEKpaK1OK
zx/gZsHO4y2jdzD2S9zhPYXjbeNCEySARStfIdpBhNnOL6OGQrqR45dhgOEslUVU
Q1knfi7xXl5ktEW0pn/C7uqrpWqbNfma0nF0oU1ga9st69v+oB3KQNDb3T7xFdDS
4j/EGqcHDFn+yc2g12u7czqOaP8Sm32KyTpo0ppbRFYuDSzIBZZtyh9svvIlERHm
u8QAD7/vuotNucvMmnIR0cx8VXRhK5QZxglMjhSu/Ijk+X+XL8W7UHFe6ialKoLY
/RFyJ3lEv6Xer/IhJWzV8outpZcofZCnJCBbdBzfXes3gYsc+Nm6YdyugQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKeTBwAsdpYKkNiQx8czfOzbTlggMB8GA1UdIwQY
MBaAFDeA54aPuyYXF1Bipee54cBJy990MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjREbmhvLTdKaGNYVUdLbDU3bmh3RW5MMzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kY2M0OGYtY2ZjYy00YTU4LWE2ZDAt
MjliNjhlMDQ4YTllLzEvcDVNSEFDeDJsZ3FRMkpESHh6Tjg3TnRPV0NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kY2M0OGYtY2ZjYy00YTU4LWE2ZDAtMjliNjhlMDQ4YTll
LzEvTjREbmhvLTdKaGNYVUdLbDU3bmh3RW5MMzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvL7AMA0G
CSqGSIb3DQEBCwUAA4IBAQAxFwEkV3zcslPcSB9x+c6tfZggm56kiYH4lk7VMz2h
Zr6bzjt4HPHQ3zLXc07mI+F3ShHpaHjnhxveU5N+mytJtoYc9CkZgNuQpQuOw8WO
K6nIL25qK5tFeGqyp+PuykEeriqvsPUWJVzKYZe+ozVJVyHZcUW97FwyAHFKwcq6
tYHLb+6hIQXtDJCU2j/xpMcnCrOZdQ1I6RBwFOKyhrWlcobT+vVHMOSZPQuF2DeK
f8IEVtwHDn6hielyuYeZyQnQaPenFHFd/oT9n0FYntQm06mIkclcaw3qoWLUfpd1
5rri5e4MJHsDHSgcW/575vY2Ro/KC1NdrbE9AHGKo7CG
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:40 2025 by rpki-client