Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1XOTdzt54bHCMYLDMDuyEmXbrG8.roa
File: 1XOTdzt54bHCMYLDMDuyEmXbrG8.roa (raw, json)
Hash identifier: 1n54/segeRYd+kObCNPCIPxu/DsazcWk7hdRFLX4hYg=
Subject key identifier: D5:73:93:77:3B:79:E1:B1:C2:31:82:C3:30:3B:B2:12:65:DB:AC:6F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01878FA3AF80C156D65A05C8FCCC8689229E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1XOTdzt54bHCMYLDMDuyEmXbrG8.roa
Signing time: Mon 17 Apr 2023 14:34:41 +0000
ROA not before: Mon 17 Apr 2023 14:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203639
IP address blocks: 212.193.14.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:a3:af:80:c1:56:d6:5a:05:c8:fc:cc:86:89:22:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 17 14:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d57393773b79e1b1c23182c3303bb21265dbac6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:58:89:df:68:ea:94:cd:6a:08:04:2a:f0:
39:2c:34:72:98:22:76:99:dd:43:ae:f1:7e:28:ec:
9b:e5:1d:3f:26:0c:40:00:a5:7f:92:50:13:84:8c:
09:44:76:dc:32:90:51:45:46:d1:ae:cc:cd:28:c8:
1c:32:3c:74:44:20:25:23:1d:08:f4:55:96:77:f3:
f3:53:79:ca:9b:71:d2:19:5e:d9:81:da:74:d8:e4:
77:e8:d2:3c:2b:35:f2:d5:6b:88:08:b1:8e:65:b8:
62:0c:5c:2f:a6:a6:59:2e:61:e6:38:fd:5b:ea:99:
1f:c9:67:17:d8:79:64:d6:c0:d6:17:9e:67:2e:ee:
1c:66:98:86:6a:47:b9:a2:ea:00:dd:60:68:de:25:
05:cd:ac:e4:32:91:f4:80:e1:e5:6a:08:92:f9:4c:
78:10:42:71:05:ab:98:ad:24:ed:10:e2:a6:a7:89:
4e:50:df:7e:b7:f5:00:fd:8a:41:48:4f:32:c6:4f:
1a:15:cc:11:c3:41:27:4c:97:b3:b8:51:91:53:68:
b7:4a:e7:dc:b6:eb:15:e8:59:74:b9:cb:8b:d0:18:
ae:b0:ed:f4:fd:7b:e4:fb:1a:29:84:de:41:f2:5e:
77:12:60:d5:b6:37:4a:01:3c:b9:ce:bf:d0:6d:f0:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:73:93:77:3B:79:E1:B1:C2:31:82:C3:30:3B:B2:12:65:DB:AC:6F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1XOTdzt54bHCMYLDMDuyEmXbrG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.190.0/24
193.124.202.0/24
194.87.76.0/24
194.87.208.0/24
194.87.221.0/24
194.87.226.0/24
194.87.231.0/24
195.133.15.0/24
212.192.4.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
05:55:47:df:28:9f:88:8e:59:82:34:c1:17:16:a4:dd:b9:e3:
3b:b5:a3:1a:ce:74:e7:49:7d:8e:f1:df:54:1a:e3:95:f9:e2:
42:a2:4f:20:a9:20:26:dd:58:bd:7c:2d:35:c6:1e:cb:e6:a3:
80:6f:37:9b:83:21:d8:36:aa:a0:6b:16:9e:be:ff:70:cb:fa:
a0:c5:51:e8:1e:17:dc:81:0a:a3:b1:a2:11:68:e0:7b:31:63:
ba:9b:2a:90:01:b9:26:ce:e1:a3:09:e1:59:78:54:ae:06:f4:
65:1b:6d:a1:73:0f:26:67:d9:c2:93:ce:9a:99:74:3b:34:b7:
42:8d:a1:fc:17:d2:27:31:94:9e:c6:a0:f7:74:15:15:c3:46:
48:20:82:21:d9:04:ca:49:5d:ac:43:22:1c:6d:ed:8d:2e:2d:
61:cc:7b:e3:bc:17:f4:67:2f:9d:06:84:80:3a:4c:c2:e0:89:
3c:ee:00:68:67:5e:6f:e8:36:e0:7a:51:33:8f:c5:58:1d:db:
ea:e1:68:81:30:f5:64:94:a4:62:31:fc:5d:71:1e:6d:a3:26:
72:68:7d:e4:00:81:5d:88:d0:4a:34:db:6a:b9:f2:d6:9d:ad:
f3:35:56:b4:62:c5:18:6f:d9:e4:b1:88:69:0a:21:4e:c6:8e:
d7:df:28:dc
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYePo6+AwVbWWgXI/MyGiSKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDE3MTQzNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTczOTM3NzNiNzllMWIxYzIzMTgyYzMzMDNiYjIxMjY1ZGJhYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SlYid9o6pTNaggEKvA5LDRymCJ2
md1DrvF+KOyb5R0/JgxAAKV/klAThIwJRHbcMpBRRUbRrszNKMgcMjx0RCAlIx0I
9FWWd/PzU3nKm3HSGV7Zgdp02OR36NI8KzXy1WuICLGOZbhiDFwvpqZZLmHmOP1b
6pkfyWcX2Hlk1sDWF55nLu4cZpiGake5ouoA3WBo3iUFzazkMpH0gOHlagiS+Ux4
EEJxBauYrSTtEOKmp4lOUN9+t/UA/YpBSE8yxk8aFcwRw0EnTJezuFGRU2i3Sufc
tusV6Fl0ucuL0BiusO30/Xvk+xophN5B8l53EmDVtjdKATy5zr/QbfCt8QIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFNVzk3c7eeGxwjGCwzA7shJl26xvMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMVhPVGR6dDU0YkhDTVlMRE1EdXlFbVhickc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAwHy+AwQA
wXzKAwQAwldMAwQAwlfQAwQAwlfdAwQAwlfiAwQAwlfnAwQAw4UPAwQA1MAEAwQA
1MEOMA0GCSqGSIb3DQEBCwUAA4IBAQAFVUffKJ+IjlmCNMEXFqTdueM7taMaznTn
SX2O8d9UGuOV+eJCok8gqSAm3Vi9fC01xh7L5qOAbzebgyHYNqqgaxaevv9wy/qg
xVHoHhfcgQqjsaIRaOB7MWO6myqQAbkmzuGjCeFZeFSuBvRlG22hcw8mZ9nCk86a
mXQ7NLdCjaH8F9InMZSexqD3dBUVw0ZIIIIh2QTKSV2sQyIcbe2NLi1hzHvjvBf0
Zy+dBoSAOkzC4Ik87gBoZ15v6DbgelEzj8VYHdvq4WiBMPVklKRiMfxdcR5toyZy
aH3kAIFdiNBKNNtqufLWna3zNVa0YsUYb9nksYhpCiFOxo7X3yjc
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-ams.rpki-client.org