Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-HkQJP3U68SwQMw3u9JvOC2NZnc.roa
File: 1-HkQJP3U68SwQMw3u9JvOC2NZnc.roa (raw, json)
Hash identifier: NeF5Pphskm8SDnZDXFjvUbEYIIG3VmjVzHjqqWLBlmk=
Subject key identifier: F8:79:10:24:FD:D4:EB:C4:B0:40:CC:37:BB:D2:6F:38:2D:8D:66:77
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187C1F8D15CCB4AA43E49A82472AF7503C3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-HkQJP3U68SwQMw3u9JvOC2NZnc.roa
Signing time: Thu 27 Apr 2023 09:08:41 +0000
ROA not before: Thu 27 Apr 2023 09:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57152
IP address blocks: 194.87.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:f8:d1:5c:cb:4a:a4:3e:49:a8:24:72:af:75:03:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 27 09:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8791024fdd4ebc4b040cc37bbd26f382d8d6677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:bb:f7:02:59:3d:80:93:bd:9c:7c:08:7e:
42:aa:11:b5:16:58:d4:89:7c:62:28:a5:58:f8:88:
f4:7a:9d:93:a3:6f:b7:78:90:3e:c2:38:26:8f:64:
31:d1:db:cb:57:ed:cf:fa:52:ca:0f:b2:0d:2d:0d:
c6:ad:86:05:11:ef:df:8e:e3:c0:05:71:de:e4:bf:
b7:68:df:3f:a5:83:fb:45:d3:fa:f0:7f:a6:0f:2d:
ba:47:b4:e6:3e:9a:f1:84:50:f6:04:0c:38:05:76:
fc:59:2b:08:83:fd:67:9d:56:5b:52:e8:e6:f2:c4:
25:62:86:d8:fe:72:84:41:df:51:b1:56:0e:90:b9:
18:68:6d:30:a3:af:2a:d3:94:41:96:fa:28:2b:d7:
c2:5c:33:70:a0:c4:c8:29:79:6e:d3:d6:22:81:dd:
fe:68:ab:a3:9d:63:52:44:72:4f:0e:b2:d6:e8:af:
00:75:ad:41:e9:e0:ba:07:11:38:0f:f9:54:da:a5:
ca:97:d1:4e:66:de:e7:5b:cc:1e:c8:37:1f:8b:48:
23:bb:1d:8c:a5:e1:25:10:85:c8:cf:7f:4c:b9:d5:
fe:dd:e2:72:75:fa:a3:a4:9a:56:28:80:f4:d2:a1:
7f:ac:e6:51:3d:c0:00:46:88:01:53:f9:72:f6:b5:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:79:10:24:FD:D4:EB:C4:B0:40:CC:37:BB:D2:6F:38:2D:8D:66:77
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-HkQJP3U68SwQMw3u9JvOC2NZnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.246.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:dd:54:95:c7:4b:e2:b4:86:d9:2e:2c:e9:56:40:c9:72:7b:
9a:85:7c:f3:00:b3:34:fa:33:aa:fe:e6:48:e7:84:7d:eb:7e:
8f:90:38:ab:ca:94:ce:3a:86:f3:4c:cf:4f:c7:38:03:b5:d1:
69:1e:58:fd:4a:8b:66:d4:61:bb:be:d5:9c:5f:e2:fd:1a:54:
d0:6d:c5:cd:48:eb:3e:30:27:43:11:d8:cc:62:e0:d5:19:e1:
59:47:55:1f:e8:14:ef:84:cd:c3:24:bb:65:df:85:2a:81:1b:
90:09:54:90:fc:1a:c5:c3:f6:4a:6c:e3:36:9a:72:b3:79:21:
c9:ae:3a:06:61:cb:83:31:a9:02:a8:d9:1b:39:1e:fd:06:ed:
bd:77:7e:93:98:ea:7e:24:65:52:0e:d7:e8:5e:5c:48:b3:17:
cb:03:2f:ab:12:3a:86:e0:de:15:ab:2f:9b:81:63:a0:7a:be:
17:61:af:84:db:0e:63:fc:ac:4d:25:d0:f9:fe:39:ba:b5:ee:
81:fb:30:9d:f3:49:39:a0:9d:f0:20:4a:c5:f1:ca:04:09:02:
bb:4b:85:3a:7c:d5:d3:1d:93:5d:38:4e:7e:46:d6:24:cb:42:
b5:b2:fd:71:55:85:0e:65:cf:c8:e1:ac:90:de:18:a7:0b:d5:
3f:91:3b:88
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYfB+NFcy0qkPkmoJHKvdQPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDI3MDkwODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODc5MTAyNGZkZDRlYmM0YjA0MGNjMzdiYmQyNmYzODJkOGQ2Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAS79wJZPYCTvZx8CH5CqhG1FljU
iXxiKKVY+Ij0ep2To2+3eJA+wjgmj2Qx0dvLV+3P+lLKD7INLQ3GrYYFEe/fjuPA
BXHe5L+3aN8/pYP7RdP68H+mDy26R7TmPprxhFD2BAw4BXb8WSsIg/1nnVZbUujm
8sQlYobY/nKEQd9RsVYOkLkYaG0wo68q05RBlvooK9fCXDNwoMTIKXlu09Yigd3+
aKujnWNSRHJPDrLW6K8Ada1B6eC6BxE4D/lU2qXKl9FOZt7nW8weyDcfi0gjux2M
peElEIXIz39MudX+3eJydfqjpJpWKID00qF/rOZRPcAARogBU/ly9rUZKQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPh5ECT91OvEsEDMN7vSbzgtjWZ3MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMS1Ia1FKUDNVNjhTd1FNdzN1OUp2T0MyTlpuYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0
My8xL05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJX9jAN
BgkqhkiG9w0BAQsFAAOCAQEAOt1UlcdL4rSG2S4s6VZAyXJ7moV88wCzNPozqv7m
SOeEfet+j5A4q8qUzjqG80zPT8c4A7XRaR5Y/UqLZtRhu77VnF/i/RpU0G3FzUjr
PjAnQxHYzGLg1RnhWUdVH+gU74TNwyS7Zd+FKoEbkAlUkPwaxcP2SmzjNppys3kh
ya46BmHLgzGpAqjZGzke/QbtvXd+k5jqfiRlUg7X6F5cSLMXywMvqxI6huDeFasv
m4FjoHq+F2GvhNsOY/ysTSXQ+f45urXugfswnfNJOaCd8CBKxfHKBAkCu0uFOnzV
0x2TXThOfkbWJMtCtbL9cVWFDmXPyOGskN4YpwvVP5E7iA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:54 2023 by rpki-client on console-fra.rpki-client.org