Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1a1_P9vObubyvHpG4gDl7n4p440.roa
File: 1a1_P9vObubyvHpG4gDl7n4p440.roa (raw, json)
Hash identifier: gQc6NJ7omq21S0uXT6TQ2nZHyq72Dy0Xy/xYDrSUtvY=
Subject key identifier: D5:AD:7F:3F:DB:CE:6E:E6:F2:BC:7A:46:E2:00:E5:EE:7E:29:E3:8D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0194A72AFCB16BE2C6DB6A9886E050B2B77A
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1a1_P9vObubyvHpG4gDl7n4p440.roa
Signing time: Mon 27 Jan 2025 09:49:59 +0000
ROA not before: Mon 27 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205570
IP address blocks: 188.132.190.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 10:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:2a:fc:b1:6b:e2:c6:db:6a:98:86:e0:50:b2:b7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 27 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5ad7f3fdbce6ee6f2bc7a46e200e5ee7e29e38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:ef:b8:09:00:18:4d:44:63:a0:ec:7b:b9:
d3:61:de:c7:7b:df:35:16:97:fe:48:95:a8:16:9f:
98:75:15:ee:9c:bc:b3:69:d3:60:b3:01:de:a5:e2:
a8:15:07:67:b6:50:52:9f:a8:15:db:b1:c2:3c:97:
7f:f2:b2:5b:77:d6:2c:f5:d8:9d:0e:bc:44:c3:e9:
2a:08:5a:7a:23:e2:51:54:a4:b8:f9:a9:80:53:ea:
8b:68:b8:bc:8d:86:14:0f:01:69:13:2b:5f:a2:96:
97:64:39:85:76:d9:37:4b:03:b4:3b:36:50:b1:9b:
23:c1:80:c0:cb:cd:9b:7f:87:22:c2:07:35:cd:d4:
bb:7b:a8:50:af:b6:26:88:57:a1:7f:df:5f:79:61:
33:0c:8c:1a:35:d5:f3:91:41:45:05:02:f5:2c:e4:
9d:6b:19:73:1f:93:77:80:6a:a5:dd:9d:35:63:2d:
a4:f9:39:92:f6:1b:5d:f7:7f:af:7e:bb:97:d5:da:
f7:8e:2e:6e:cf:cb:9a:a3:bb:bc:94:d4:1c:1a:9e:
d1:1e:a6:1c:e6:ca:ad:e7:9f:cc:81:e6:58:10:fa:
3c:8c:71:d2:c9:2b:83:ac:31:a4:26:4b:84:f0:fd:
ac:de:64:c6:98:35:d1:78:87:0b:0f:53:da:1d:18:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AD:7F:3F:DB:CE:6E:E6:F2:BC:7A:46:E2:00:E5:EE:7E:29:E3:8D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1a1_P9vObubyvHpG4gDl7n4p440.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.190.0/23
Signature Algorithm: sha256WithRSAEncryption
28:7b:f6:b0:f6:1e:10:92:68:ff:b2:2b:68:a7:4c:a0:f4:31:
18:cf:9a:58:da:c6:a8:ae:54:11:bf:63:46:01:4f:14:fc:8e:
9d:9f:dc:28:fc:fd:8b:a6:5b:35:b1:e6:32:10:4e:f9:8a:20:
b8:ee:40:9f:d1:66:3f:5e:b6:b3:a1:a4:e8:2a:bc:8a:01:96:
6e:0e:bb:dd:05:70:ae:8c:cf:62:24:74:e4:53:d1:60:de:7b:
38:f2:e0:0a:84:9a:68:7c:1b:6f:2b:35:95:46:18:79:54:51:
50:1d:36:f7:e2:fa:c4:3e:f9:67:5c:9b:eb:83:79:cb:60:9c:
36:0e:b4:3e:a9:88:c6:1b:dc:86:e0:a9:b4:6f:7a:ad:1a:e8:
f3:dd:ad:32:4b:6f:8f:ec:8b:fc:25:8a:5d:ac:9f:5d:44:f9:
aa:19:39:f5:ce:ff:ce:f4:53:43:37:a8:79:ed:b1:01:59:fb:
d9:65:b5:dc:3a:e5:77:80:8f:9e:1b:be:df:16:67:c8:ca:6f:
1a:43:ef:55:47:b7:6f:42:c0:ea:b2:2e:85:87:35:f2:d7:b1:
94:79:b9:b9:2b:12:c7:4c:cc:52:b2:e7:20:7c:8d:9e:e9:11:
80:02:d4:7a:c4:df:24:f7:3b:19:50:53:fd:a7:05:d4:7a:f4:
b1:71:9a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:54:35 2025 by rpki-client