Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-UR6BoOec4pNHw1EvMvLMhAyTyA.roa
File: 1-UR6BoOec4pNHw1EvMvLMhAyTyA.roa (raw, json)
Hash identifier: 0OkkDa8qzuGQSaMHLjrHBJmIqaP5vSmhisCUMKbjVmI=
Subject key identifier: F9:44:7A:06:83:9E:73:8A:4D:1F:0D:44:BC:CB:CB:32:10:32:4F:20
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018682C6DA3DF4FE21C712FB2AC5BFE80AED
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-UR6BoOec4pNHw1EvMvLMhAyTyA.roa
Signing time: Fri 24 Feb 2023 09:35:15 +0000
ROA not before: Fri 24 Feb 2023 09:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49870
IP address blocks: 195.133.84.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:c6:da:3d:f4:fe:21:c7:12:fb:2a:c5:bf:e8:0a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 24 09:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9447a06839e738a4d1f0d44bccbcb3210324f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:56:a6:cc:64:b7:8e:b6:48:cb:14:d6:be:dc:
35:a5:98:1e:6b:80:14:53:db:ef:14:ae:d5:7a:5c:
7d:4d:ac:28:38:67:2e:40:74:73:bd:a1:4c:51:0f:
09:98:de:f9:3e:b8:f7:08:2f:cb:dd:de:af:ff:01:
0c:3f:00:08:ce:d1:50:69:a2:fb:ba:0a:cd:b8:37:
c7:96:26:44:5e:b9:63:9b:e2:09:eb:42:2e:e3:30:
f9:a9:0a:c8:8d:6b:49:31:56:5a:de:a8:27:3a:83:
72:3a:73:72:1b:f7:6c:9a:6d:a0:8d:c9:26:71:4b:
2d:9d:d5:14:01:ce:aa:37:01:93:f0:5c:89:38:2a:
5b:51:3c:24:f7:e4:0d:be:e3:00:e8:55:fd:a4:2e:
8d:5c:a2:3f:d1:00:59:8c:4f:77:20:45:cd:7e:34:
d1:a4:5e:70:e8:80:ea:d5:4c:7d:67:33:64:76:75:
e3:33:e7:31:03:fc:dd:db:03:49:fb:8b:11:d5:c9:
35:21:3f:8f:04:13:ea:9f:42:48:80:79:82:be:2b:
e9:a7:9e:ef:d5:ed:ea:08:64:05:ab:f3:8c:a5:b3:
08:33:37:6d:7a:3a:5b:65:36:60:09:80:9a:4c:00:
dc:7d:00:22:5c:6f:d4:21:c8:8c:45:7d:a3:34:a7:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:44:7A:06:83:9E:73:8A:4D:1F:0D:44:BC:CB:CB:32:10:32:4F:20
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-UR6BoOec4pNHw1EvMvLMhAyTyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.45.0/24
193.124.94.0/24
194.58.58.0/24
194.87.220.0/24
195.133.84.0/24
Signature Algorithm: sha256WithRSAEncryption
78:af:da:d0:1d:91:36:11:4c:49:dc:6b:fe:15:ba:d2:e0:aa:
df:e5:33:09:e2:d5:ca:e0:d6:20:e6:30:ca:7f:08:3d:68:49:
35:5d:7c:d9:a7:c6:6a:c2:5e:e8:50:d5:33:40:67:56:ae:2a:
3a:f6:57:80:62:ba:f6:29:34:12:6d:6e:9f:4a:54:02:c7:8f:
5c:0b:d7:17:07:f2:1c:21:1b:6d:99:85:83:c0:11:a1:d6:ce:
a0:ee:f0:b4:48:63:34:e0:b0:66:e0:92:f1:ab:58:51:16:50:
ac:1b:63:c4:8c:7e:1c:a8:05:c8:dd:fc:55:55:d1:6f:6c:8b:
8a:f0:e6:56:af:b2:9d:1f:60:e2:ed:f7:75:eb:9d:8b:fb:89:
4d:48:a9:27:53:87:62:2f:da:70:2a:a2:88:d1:e0:a9:b1:39:
f7:a6:b1:cb:fd:33:4f:22:c1:e0:a9:96:ba:08:fa:cc:c6:9b:
e3:34:2c:46:c1:85:f8:54:33:2f:1f:cd:e8:2d:fc:8e:8c:5e:
a6:dd:13:d8:c0:cb:5c:c3:8d:65:58:35:4c:7f:36:62:99:4a:
3b:d6:6d:e1:2a:f9:d4:d4:fe:18:ee:16:32:b4:f0:04:4c:a3:
59:87:e7:d0:70:06:96:be:46:21:fa:c0:1f:56:a4:7a:1b:32:
63:7f:19:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYaCxto99P4hxxL7KsW/6ArtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMjI0MDkzNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTQ0N2EwNjgzOWU3MzhhNGQxZjBkNDRiY2NiY2IzMjEwMzI0ZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklamzGS3jrZIyxTWvtw1pZgea4AU
U9vvFK7Velx9TawoOGcuQHRzvaFMUQ8JmN75Prj3CC/L3d6v/wEMPwAIztFQaaL7
ugrNuDfHliZEXrljm+IJ60Iu4zD5qQrIjWtJMVZa3qgnOoNyOnNyG/dsmm2gjckm
cUstndUUAc6qNwGT8FyJOCpbUTwk9+QNvuMA6FX9pC6NXKI/0QBZjE93IEXNfjTR
pF5w6IDq1Ux9ZzNkdnXjM+cxA/zd2wNJ+4sR1ck1IT+PBBPqn0JIgHmCvivpp57v
1e3qCGQFq/OMpbMIMzdtejpbZTZgCYCaTADcfQAiXG/UIciMRX2jNKf4HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlEegaDnnOKTR8NRLzLyzIQMk8gMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMS1VUjZCb09lYzRwTkh3MUV2TXZMTWhBeVR5QS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0
My8xL05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAMF8LQME
AMF8XgMEAMI6OgMEAMJX3AMEAMOFVDANBgkqhkiG9w0BAQsFAAOCAQEAeK/a0B2R
NhFMSdxr/hW60uCq3+UzCeLVyuDWIOYwyn8IPWhJNV182afGasJe6FDVM0BnVq4q
OvZXgGK69ik0Em1un0pUAsePXAvXFwfyHCEbbZmFg8ARodbOoO7wtEhjNOCwZuCS
8atYURZQrBtjxIx+HKgFyN38VVXRb2yLivDmVq+ynR9g4u33deudi/uJTUipJ1OH
Yi/acCqiiNHgqbE596axy/0zTyLB4KmWugj6zMab4zQsRsGF+FQzLx/N6C38joxe
pt0T2MDLXMONZVg1TH82YplKO9Zt4Sr51NT+GO4WMrTwBEyjWYfn0HAGlr5GIfrA
H1akehsyY38ZZw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:54 2023 by rpki-client on console-fra.rpki-client.org