Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0epHtKCf5kz4nrLrhJmiZH0CGts.roa
File: 0epHtKCf5kz4nrLrhJmiZH0CGts.roa (raw, json)
Hash identifier: Kad3TFJOzMEcD3n4nqAIghF3Qtoqe+v3GJISyCIlYQg=
Subject key identifier: D1:EA:47:B4:A0:9F:E6:4C:F8:9E:B2:EB:84:99:A2:64:7D:02:1A:DB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A5FC29EB06EFF804590223920DB8D7F6C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0epHtKCf5kz4nrLrhJmiZH0CGts.roa
Signing time: Mon 04 Sep 2023 10:35:04 +0000
ROA not before: Mon 04 Sep 2023 10:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 195.133.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:c2:9e:b0:6e:ff:80:45:90:22:39:20:db:8d:7f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 4 10:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1ea47b4a09fe64cf89eb2eb8499a2647d021adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:fe:4c:06:ac:10:2b:3a:54:21:b3:99:d6:
10:93:84:ae:d0:85:e9:4b:da:d2:3a:73:9c:3b:8e:
26:3f:17:14:fd:c4:ad:d5:0a:36:f8:e6:1b:37:b4:
7b:16:cb:f8:b4:f7:64:be:78:3d:05:7e:d9:ff:bc:
1b:c5:9e:50:84:db:1e:1b:c6:f5:bc:2a:f0:9b:4f:
63:7c:f4:8e:c4:90:cb:ca:a7:85:c1:55:0b:44:45:
db:f7:db:8c:76:7c:17:a2:d1:75:df:33:b1:76:05:
13:0c:7b:5c:8c:a6:4e:d7:b0:27:96:7c:47:29:32:
a9:14:55:0a:b7:32:d4:22:44:1f:a1:af:25:09:30:
58:fa:ef:b7:4a:55:bd:c6:b9:ba:6f:d7:6e:71:fa:
dd:7e:1c:0e:4f:71:49:d9:cb:f3:a7:6c:8e:de:d2:
70:48:e0:0d:b7:3f:8e:ae:39:62:fc:3c:5b:a7:3b:
ba:37:87:bd:3e:4c:33:95:ad:cf:60:07:25:51:79:
4f:8d:f2:82:91:72:6b:93:5f:41:21:fe:77:23:81:
a9:3b:f5:45:47:bd:ee:92:3e:3a:90:c6:90:7b:0a:
b1:04:97:b3:9c:f5:36:06:c0:2c:29:7d:86:94:f1:
f6:6c:da:7c:d5:95:63:f4:8a:ed:54:51:fe:0f:25:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EA:47:B4:A0:9F:E6:4C:F8:9E:B2:EB:84:99:A2:64:7D:02:1A:DB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0epHtKCf5kz4nrLrhJmiZH0CGts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.41.0/24
Signature Algorithm: sha256WithRSAEncryption
23:2d:3c:00:b3:23:8b:45:c6:b1:68:ce:46:d0:6d:5a:f4:cf:
d3:6e:c3:e9:5f:96:7e:51:3f:3d:2c:35:b5:74:5a:d9:dd:9d:
a9:cc:2e:18:ba:0a:e3:bc:d0:76:aa:f9:d4:9e:4d:b6:ad:44:
fa:75:09:ff:4b:f7:db:64:2a:42:61:1a:71:0e:85:e9:73:27:
30:a6:ba:c8:66:99:a2:b5:b7:ae:a5:02:1b:27:dc:2d:11:1d:
9d:a6:48:d1:3a:ac:47:bc:53:98:13:44:36:72:34:2b:94:6a:
73:5c:3c:d6:98:48:30:a6:e1:ed:d5:be:5f:0e:bc:3e:e8:b0:
2d:97:96:1a:2e:98:6e:64:d2:00:61:3c:16:74:da:84:4b:65:
10:73:8c:90:d4:2f:da:f6:56:71:ba:b4:1f:d3:a7:b4:f0:c6:
d6:fc:b0:ce:1c:98:6b:8e:bb:f0:ac:30:17:8a:08:bd:a6:50:
5b:29:17:94:ca:24:3b:ea:84:7c:30:c3:1d:6b:28:ba:9e:dd:
bb:6c:0d:e6:54:ce:ef:fa:f6:60:20:ff:b0:68:c4:21:6a:90:
f2:2a:00:45:dc:6c:eb:95:32:c3:3a:c6:06:b1:0f:81:2b:18:
5d:88:28:d8:22:59:59:12:b1:e5:74:c6:51:3f:3b:fc:38:aa:
a7:ca:72:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpfwp6wbv+ARZAiOSDbjX9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwOTA0MTAzNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWVhNDdiNGEwOWZlNjRjZjg5ZWIyZWI4NDk5YTI2NDdkMDIxYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAH+TAasECs6VCGzmdYQk4Su0IXp
S9rSOnOcO44mPxcU/cSt1Qo2+OYbN7R7Fsv4tPdkvng9BX7Z/7wbxZ5QhNseG8b1
vCrwm09jfPSOxJDLyqeFwVULREXb99uMdnwXotF13zOxdgUTDHtcjKZO17AnlnxH
KTKpFFUKtzLUIkQfoa8lCTBY+u+3SlW9xrm6b9ducfrdfhwOT3FJ2cvzp2yO3tJw
SOANtz+Orjli/Dxbpzu6N4e9Pkwzla3PYAclUXlPjfKCkXJrk19BIf53I4GpO/VF
R73ukj46kMaQewqxBJeznPU2BsAsKX2GlPH2bNp81ZVj9IrtVFH+DyUILwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNHqR7Sgn+ZM+J6y64SZomR9AhrbMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMGVwSHRLQ2Y1a3o0bnJMcmhKbWlaSDBDR3RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4UpMA0G
CSqGSIb3DQEBCwUAA4IBAQAjLTwAsyOLRcaxaM5G0G1a9M/TbsPpX5Z+UT89LDW1
dFrZ3Z2pzC4YugrjvNB2qvnUnk22rUT6dQn/S/fbZCpCYRpxDoXpcycwprrIZpmi
tbeupQIbJ9wtER2dpkjROqxHvFOYE0Q2cjQrlGpzXDzWmEgwpuHt1b5fDrw+6LAt
l5YaLphuZNIAYTwWdNqES2UQc4yQ1C/a9lZxurQf06e08MbW/LDOHJhrjrvwrDAX
igi9plBbKReUyiQ76oR8MMMdayi6nt27bA3mVM7v+vZgIP+waMQhapDyKgBF3Gzr
lTLDOsYGsQ+BKxhdiCjYIllZErHldMZRPzv8OKqnynJG
-----END CERTIFICATE-----
Generated at Thu Oct 5 05:00:27 2023 by rpki-client on console-ams.rpki-client.org