Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-3XVx0t9DEYt9s-UJXw17EjlSmw.roa
File: 1-3XVx0t9DEYt9s-UJXw17EjlSmw.roa (raw, json)
Hash identifier: Fq+TLAQH6IEuO+i8B0PdM9vBrcapBlE/n7P7/B2CZaM=
Subject key identifier: FB:75:D5:C7:4B:7D:0C:46:2D:F6:CF:94:25:7C:35:EC:48:E5:4A:6C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191B22A012D2E77B796E924D4DB4B664182
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-3XVx0t9DEYt9s-UJXw17EjlSmw.roa
Signing time: Mon 02 Sep 2024 09:56:22 +0000
ROA not before: Mon 02 Sep 2024 09:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 193.124.44.0/24 maxlen: 24
195.133.17.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 16:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:2a:01:2d:2e:77:b7:96:e9:24:d4:db:4b:66:41:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 2 09:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb75d5c74b7d0c462df6cf94257c35ec48e54a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:c4:b8:42:8c:8b:b0:d7:fd:02:9d:fe:31:
0b:f0:e5:e0:b3:dc:29:54:cc:0b:1c:27:f4:eb:15:
06:bb:a0:8d:26:2c:cd:c2:5a:3f:0c:32:6b:10:84:
55:b8:6c:3c:02:83:2c:94:67:5c:c5:74:c9:df:77:
73:dc:c6:47:56:3e:67:f6:42:eb:5c:8c:12:09:8c:
88:12:85:4b:82:7b:0b:27:1e:cc:18:24:d1:3d:03:
e2:7d:d6:e0:66:4f:cf:e8:98:8d:84:ae:36:50:91:
bc:cc:0b:b6:01:16:e1:b7:45:4b:4a:70:b0:e6:d4:
0f:af:de:2c:ff:cb:aa:81:30:52:c7:2b:2e:63:a2:
5f:06:0b:65:0e:32:a3:c3:a0:77:e6:c0:6d:5c:23:
94:2d:da:9f:6d:65:e9:6d:44:cc:d2:c4:d7:97:ad:
b3:5d:c3:5b:72:d4:09:5d:f5:a0:1a:f7:72:ba:3e:
bd:bc:ca:35:31:71:f6:91:28:23:ef:72:be:71:89:
ae:df:c0:9b:f0:e4:76:e5:7a:59:1a:f0:25:fe:30:
24:3c:67:fd:de:8a:de:56:b0:86:91:da:f8:73:85:
45:e2:75:d9:35:0b:ad:21:dd:43:39:fe:40:57:22:
c1:9b:aa:ef:56:1c:89:6c:97:dc:49:50:52:1f:40:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:75:D5:C7:4B:7D:0C:46:2D:F6:CF:94:25:7C:35:EC:48:E5:4A:6C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-3XVx0t9DEYt9s-UJXw17EjlSmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.44.0/24
195.133.17.0/24
195.133.39.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6e:c0:64:69:8c:a9:b2:b7:61:8a:76:d0:f5:36:1f:03:12:
f1:8f:ac:fa:bb:d9:2e:14:f9:eb:dd:ad:79:4f:6c:79:1f:98:
42:1c:e1:16:da:5e:62:27:d7:c3:f9:e5:b4:52:21:c8:4a:bb:
0e:69:eb:9d:40:b6:f8:01:0b:7f:d3:d1:63:92:ec:aa:b3:ac:
c2:ec:87:4b:3a:57:cf:1d:f5:7b:77:3c:3a:80:6d:86:17:72:
c6:8e:df:2d:c2:5b:2b:dd:f5:d9:17:93:65:a6:94:2a:d1:1b:
da:de:13:9c:40:c4:1f:3e:bb:f5:13:f1:25:90:e7:a2:5c:2b:
d8:ae:c4:ec:86:1a:33:40:e9:5e:ff:4d:62:70:32:3d:9e:b9:
07:f0:0e:86:e1:64:fc:2a:e6:42:c3:36:29:b5:8f:b8:d0:84:
46:f8:81:58:61:fc:54:c1:55:ee:54:77:02:3b:c1:8d:be:f7:
06:b7:c1:22:57:e8:54:b5:b5:ad:47:b7:02:b4:ac:ca:7c:f7:
f9:ff:53:ce:f9:34:52:d1:04:6b:cb:8f:71:cd:36:3b:e6:e3:
a3:02:8b:3a:66:36:6c:08:57:50:bf:2c:f7:c4:67:d9:7a:4e:
fe:40:9c:d9:e8:c6:b1:97:38:b7:fd:fb:41:9e:b9:98:35:0d:
0d:f6:90:e5
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZGyKgEtLne3lukk1NtLZkGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwOTAyMDk1NjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjc1ZDVjNzRiN2QwYzQ2MmRmNmNmOTQyNTdjMzVlYzQ4ZTU0YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNTEuEKMi7DX/QKd/jEL8OXgs9wp
VMwLHCf06xUGu6CNJizNwlo/DDJrEIRVuGw8AoMslGdcxXTJ33dz3MZHVj5n9kLr
XIwSCYyIEoVLgnsLJx7MGCTRPQPifdbgZk/P6JiNhK42UJG8zAu2ARbht0VLSnCw
5tQPr94s/8uqgTBSxysuY6JfBgtlDjKjw6B35sBtXCOULdqfbWXpbUTM0sTXl62z
XcNbctQJXfWgGvdyuj69vMo1MXH2kSgj73K+cYmu38Cb8OR25XpZGvAl/jAkPGf9
3oreVrCGkdr4c4VF4nXZNQutId1DOf5AVyLBm6rvVhyJbJfcSVBSH0DqvwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPt11cdLfQxGLfbPlCV8NexI5UpsMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMS0zWFZ4MHQ5REVZdDlzLVVKWHcxN0VqbFNtdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0
My8xL05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAMF8LAME
AMOFEQMEAMOFJzANBgkqhkiG9w0BAQsFAAOCAQEAdG7AZGmMqbK3YYp20PU2HwMS
8Y+s+rvZLhT5692teU9seR+YQhzhFtpeYifXw/nltFIhyEq7DmnrnUC2+AELf9PR
Y5LsqrOswuyHSzpXzx31e3c8OoBthhdyxo7fLcJbK9312ReTZaaUKtEb2t4TnEDE
Hz679RPxJZDnolwr2K7E7IYaM0DpXv9NYnAyPZ65B/AOhuFk/CrmQsM2KbWPuNCE
RviBWGH8VMFV7lR3AjvBjb73BrfBIlfoVLW1rUe3ArSsynz3+f9Tzvk0UtEEa8uP
cc02O+bjowKLOmY2bAhXUL8s98Rn2XpO/kCc2ejGsZc4t/37QZ65mDUNDfaQ5Q==
-----END CERTIFICATE-----
Generated at Mon Sep 2 21:05:44 2024 by rpki-client on console-ams.rpki-client.org