Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1gDkRSeSbF8F2dj8zBWahJU6BT0.roa
File: 1gDkRSeSbF8F2dj8zBWahJU6BT0.roa (raw, json)
Hash identifier: 6BvHIdhzUPcvy4sI69gCP58MG8o/1uyDXcn6SjT0jr4=
Subject key identifier: D6:00:E4:45:27:92:6C:5F:05:D9:D8:FC:CC:15:9A:84:95:3A:05:3D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AB7CE7C6EC767716B0F76312CEFD1489A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1gDkRSeSbF8F2dj8zBWahJU6BT0.roa
Signing time: Thu 21 Sep 2023 12:54:37 +0000
ROA not before: Thu 21 Sep 2023 12:54:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216394
IP address blocks: 194.87.224.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
195.133.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:ce:7c:6e:c7:67:71:6b:0f:76:31:2c:ef:d1:48:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 21 12:54:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d600e44527926c5f05d9d8fccc159a84953a053d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fa:91:3f:cd:6b:3f:f4:14:01:93:ff:33:04:
4b:5d:b6:e2:90:12:b8:cc:a0:49:af:5a:13:76:20:
e0:ce:3b:8c:02:c9:f2:41:d7:c7:f9:f5:2b:32:41:
a1:74:f9:1c:3d:e9:ff:11:9d:36:b5:13:ca:1c:71:
3d:cb:6b:54:85:01:74:e8:2d:8b:1e:16:69:ad:39:
a6:4e:71:ce:90:95:18:82:13:4f:d0:4a:47:a2:54:
38:c1:7a:b5:bd:e7:7a:41:c4:be:c7:6b:d6:00:07:
db:79:02:c5:2b:74:7a:79:48:04:7d:92:6a:f5:75:
29:8c:1d:39:19:85:70:05:fb:7e:8a:47:51:f5:34:
30:4b:b3:75:4d:27:d2:ba:0b:f7:8b:cf:1e:4a:5b:
bb:d3:c8:78:16:e6:8b:54:6d:a7:4a:73:be:c6:20:
79:f5:eb:58:b3:43:24:4c:d9:93:94:95:8e:05:bd:
9e:9d:ae:1e:e7:91:3e:80:1d:37:90:87:6c:f8:06:
d2:3f:3a:99:62:77:e7:e0:52:8e:8f:ea:e5:5d:a0:
dd:c2:70:e6:09:8e:5b:40:53:1e:45:70:f7:9b:51:
5d:75:0a:4c:31:0e:14:fa:68:0f:1e:1e:54:87:ea:
97:c1:0d:f8:44:d8:0a:f9:2d:0d:f5:52:ca:37:2e:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:00:E4:45:27:92:6C:5F:05:D9:D8:FC:CC:15:9A:84:95:3A:05:3D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1gDkRSeSbF8F2dj8zBWahJU6BT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.26.0/23
194.87.130.0/24
194.87.224.0/24
194.87.246.0/24
195.133.43.0/24
212.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1e:7c:60:9b:d6:d4:af:95:83:97:fb:c4:64:15:25:25:57:
02:f4:78:af:88:1c:15:a5:2e:fb:19:dc:1c:9d:80:f5:a6:fe:
42:54:54:3c:8a:dd:5d:c3:f1:c8:3c:cc:88:4d:28:94:f3:e2:
2b:b6:d4:93:f8:72:3e:33:9f:a3:d9:da:15:0d:f1:70:d6:e0:
32:5a:be:b6:82:8d:99:78:92:5c:37:83:93:e8:71:e5:8d:3f:
1a:2f:78:86:e5:3d:f6:22:ee:4e:15:c4:9f:69:ba:9f:c5:67:
e2:db:ab:5b:16:50:ff:c2:69:3e:9a:bd:e4:f1:c5:cf:88:bc:
38:f0:39:ee:46:a7:22:1b:cc:6b:f4:12:76:95:50:ac:54:cf:
a6:04:55:92:d3:21:d2:43:c0:27:df:74:47:96:aa:ef:15:ea:
5a:09:33:eb:a4:98:a7:20:e0:60:f1:a0:24:4e:04:03:a8:9c:
a6:3f:03:6c:1a:13:53:a0:6a:1b:95:25:05:cf:be:81:0d:b1:
a5:3f:3f:59:4c:43:1d:b0:7f:f9:1a:4a:ce:7b:f3:fb:d7:8f:
eb:44:a9:65:79:e0:b8:2b:c3:3a:8b:20:12:97:7b:b2:49:84:
c9:a4:8b:12:3f:47:c8:71:50:4c:d0:e7:68:00:85:cb:aa:78:
8c:ae:d7:51
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYq3znxux2dxaw92MSzv0UiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwOTIxMTI1NDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjAwZTQ0NTI3OTI2YzVmMDVkOWQ4ZmNjYzE1OWE4NDk1M2EwNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvqRP81rP/QUAZP/MwRLXbbikBK4
zKBJr1oTdiDgzjuMAsnyQdfH+fUrMkGhdPkcPen/EZ02tRPKHHE9y2tUhQF06C2L
HhZprTmmTnHOkJUYghNP0EpHolQ4wXq1ved6QcS+x2vWAAfbeQLFK3R6eUgEfZJq
9XUpjB05GYVwBft+ikdR9TQwS7N1TSfSugv3i88eSlu708h4FuaLVG2nSnO+xiB5
9etYs0MkTNmTlJWOBb2ena4e55E+gB03kIds+AbSPzqZYnfn4FKOj+rlXaDdwnDm
CY5bQFMeRXD3m1FddQpMMQ4U+mgPHh5Uh+qXwQ34RNgK+S0N9VLKNy5YyQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNYA5EUnkmxfBdnY/MwVmoSVOgU9MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMWdEa1JTZVNiRjhGMmRqOHpCV2FoSlU2QlQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBwlcaAwQA
wleCAwQAwlfgAwQAwlf2AwQAw4UrAwQA1MDeMA0GCSqGSIb3DQEBCwUAA4IBAQBm
Hnxgm9bUr5WDl/vEZBUlJVcC9HiviBwVpS77GdwcnYD1pv5CVFQ8it1dw/HIPMyI
TSiU8+IrttST+HI+M5+j2doVDfFw1uAyWr62go2ZeJJcN4OT6HHljT8aL3iG5T32
Iu5OFcSfabqfxWfi26tbFlD/wmk+mr3k8cXPiLw48DnuRqciG8xr9BJ2lVCsVM+m
BFWS0yHSQ8An33RHlqrvFepaCTPrpJinIOBg8aAkTgQDqJymPwNsGhNToGoblSUF
z76BDbGlPz9ZTEMdsH/5GkrOe/P714/rRKlleeC4K8M6iyASl3uySYTJpIsSP0fI
cVBM0OdoAIXLqniMrtdR
-----END CERTIFICATE-----
Generated at Wed Oct 11 09:58:25 2023 by rpki-client on console-fra.rpki-client.org