Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/G9CaAf945j8nAibR3ELGydV1330.roa
File: G9CaAf945j8nAibR3ELGydV1330.roa (raw, json)
Hash identifier: xBQtbTT9N2Sk+nIShhdDvo4vCxVR7EMG0zPeLVnVxlU=
Subject key identifier: 1B:D0:9A:01:FF:78:E6:3F:27:02:26:D1:DC:42:C6:C9:D5:75:DF:7D
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 01856EA6913690D0D0752C17CEBA6D8F6F05
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/G9CaAf945j8nAibR3ELGydV1330.roa
Signing time: Sun 01 Jan 2023 18:44:47 +0000
ROA not before: Sun 01 Jan 2023 18:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61408
IP address blocks: 176.222.27.0/24 maxlen: 24
176.222.30.0/24 maxlen: 24
176.222.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:91:36:90:d0:d0:75:2c:17:ce:ba:6d:8f:6f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Jan 1 18:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bd09a01ff78e63f270226d1dc42c6c9d575df7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:92:d7:65:94:de:13:95:7a:46:2d:9b:b6:
90:59:9f:4e:29:55:d3:22:2f:ce:22:1b:f7:45:7b:
4d:d0:70:6c:80:92:87:15:84:fa:0b:a9:2e:b8:dc:
1c:b3:44:4c:89:cc:82:a6:ce:f1:41:b9:ba:17:73:
f4:b0:29:e6:18:8b:68:02:2a:8e:06:e1:6e:13:59:
f3:de:51:ec:c3:df:78:6f:6f:02:d8:54:fe:52:9c:
17:64:2a:27:0f:ba:7e:c2:f8:a9:8a:95:85:e7:1b:
02:d9:5c:16:1f:4b:36:b7:cf:2b:6b:77:0d:d6:f3:
a7:b4:d6:bb:02:e0:58:02:b1:fb:37:52:f4:2b:6a:
88:a1:ab:6d:19:d8:53:27:c4:80:74:2a:2f:7d:08:
2b:e0:b1:d8:7f:71:3a:09:70:66:7c:24:b0:85:b5:
c0:cd:3c:ad:46:3f:df:49:77:67:e5:7c:58:f9:21:
5a:37:d2:f0:99:2c:cd:90:a8:62:02:fa:c8:84:7f:
a2:22:8d:11:47:44:1e:61:df:b2:c2:64:1a:62:0d:
f1:f8:e6:f8:f3:e4:3f:8e:22:d2:61:d0:87:40:d3:
3d:8f:05:03:e2:63:11:d4:5b:45:c7:33:a0:a1:8a:
8b:ec:f9:bb:3c:44:fc:28:0e:ed:fe:7f:28:6e:59:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D0:9A:01:FF:78:E6:3F:27:02:26:D1:DC:42:C6:C9:D5:75:DF:7D
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/G9CaAf945j8nAibR3ELGydV1330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.222.27.0/24
176.222.29.0-176.222.30.255
Signature Algorithm: sha256WithRSAEncryption
20:d2:21:a3:69:5a:99:55:82:fe:0e:f2:7f:19:a8:f0:49:5c:
50:37:47:23:3c:63:28:a3:2c:55:fa:03:9e:56:08:02:3b:65:
e1:0e:46:f9:12:50:8e:31:19:a7:85:14:8b:b8:27:7b:a1:5e:
3e:a4:a3:37:26:17:ff:5c:f0:c9:0a:8d:a3:3d:67:6d:b3:1e:
2f:2e:e0:4c:c7:06:2b:f7:69:16:0e:39:2c:e4:22:da:df:34:
97:05:0d:dc:74:ff:6b:e2:6a:c7:26:2d:48:6b:fd:62:72:f8:
21:e8:0a:01:79:d4:27:0f:7f:7f:a5:37:d8:3a:e7:e9:25:d9:
71:07:5a:db:93:24:4c:01:c1:a5:a4:99:ec:50:b5:8d:6d:46:
24:27:99:25:f8:57:60:67:f3:cc:4d:85:b8:8b:98:89:1f:af:
99:2f:dc:f1:fb:03:fb:86:68:50:31:a7:39:c9:f5:89:ad:73:
c8:fb:59:e3:23:70:85:7c:22:fc:23:39:30:db:a5:40:02:07:
80:16:bc:fc:ac:19:df:24:c1:69:5b:af:8c:71:49:22:da:1f:
fa:96:e2:37:99:3f:4e:d3:85:f5:d8:ea:7f:aa:e5:50:63:fc:
9c:83:12:a0:af:db:21:af:5b:f1:c5:4f:59:d6:87:83:cc:5c:
4d:49:a3:92
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVuppE2kNDQdSwXzrptj28FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTJmOGU1MzYyN2FkYzI3Njc4MDYzYjkzZDNkOWZkNmVj
ZTkwMDIwHhcNMjMwMTAxMTg0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmQwOWEwMWZmNzhlNjNmMjcwMjI2ZDFkYzQyYzZjOWQ1NzVkZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0aS12WU3hOVekYtm7aQWZ9OKVXT
Ii/OIhv3RXtN0HBsgJKHFYT6C6kuuNwcs0RMicyCps7xQbm6F3P0sCnmGItoAiqO
BuFuE1nz3lHsw994b28C2FT+UpwXZConD7p+wvipipWF5xsC2VwWH0s2t88ra3cN
1vOntNa7AuBYArH7N1L0K2qIoattGdhTJ8SAdCovfQgr4LHYf3E6CXBmfCSwhbXA
zTytRj/fSXdn5XxY+SFaN9LwmSzNkKhiAvrIhH+iIo0RR0QeYd+ywmQaYg3x+Ob4
8+Q/jiLSYdCHQNM9jwUD4mMR1FtFxzOgoYqL7Pm7PET8KA7t/n8obln41wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBvQmgH/eOY/JwIm0dxCxsnVdd99MB8GA1UdIwQY
MBaAFK7i+OU2J63CdngGO5PT2f1uzpACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVMNDVUWW5yY0oyZUFZN2s5UFpfVzdPa0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xOTNlZDItYjc3NC00MmYwLWFhM2Yt
YTQ2NTY0MWE0OGZhLzEvRzlDYUFmOTQ1ajhuQWliUjNFTEd5ZFYxMzMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xOTNlZDItYjc3NC00MmYwLWFhM2YtYTQ2NTY0MWE0OGZh
LzEvcnVMNDVUWW5yY0oyZUFZN2s5UFpfVzdPa0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAsN4bMAwD
BACw3h0DBACw3h4wDQYJKoZIhvcNAQELBQADggEBACDSIaNpWplVgv4O8n8ZqPBJ
XFA3RyM8YyijLFX6A55WCAI7ZeEORvkSUI4xGaeFFIu4J3uhXj6kozcmF/9c8MkK
jaM9Z22zHi8u4EzHBiv3aRYOOSzkItrfNJcFDdx0/2viascmLUhr/WJy+CHoCgF5
1CcPf3+lN9g65+kl2XEHWtuTJEwBwaWkmexQtY1tRiQnmSX4V2Bn88xNhbiLmIkf
r5kv3PH7A/uGaFAxpznJ9Ymtc8j7WeMjcIV8IvwjOTDbpUACB4AWvPysGd8kwWlb
r4xxSSLaH/qW4jeZP07ThfXY6n+q5VBj/JyDEqCv2yGvW/HFT1nWh4PMXE1Jo5I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:43 2024 by rpki-client on console-fra.rpki-client.org