Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/221XaxSUKksvDtchWIlIRo7kSYQ.roa
File: 221XaxSUKksvDtchWIlIRo7kSYQ.roa (raw, json)
Hash identifier: efTOZaumEmHaG/lEI8Cvuq6mfS19oB38Rgq0/oPGX2o=
Subject key identifier: DB:6D:57:6B:14:94:2A:4B:2F:0E:D7:21:58:89:48:46:8E:E4:49:84
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186EA6B05C5349C065FC18161F0E221DE55
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/221XaxSUKksvDtchWIlIRo7kSYQ.roa
Signing time: Thu 16 Mar 2023 12:35:27 +0000
ROA not before: Thu 16 Mar 2023 12:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213035
IP address blocks: 212.193.31.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
195.133.13.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
195.133.40.0/22 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:6b:05:c5:34:9c:06:5f:c1:81:61:f0:e2:21:de:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 16 12:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db6d576b14942a4b2f0ed721588948468ee44984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:0e:b9:51:3f:11:dc:b7:dc:be:0a:54:7e:
ad:84:58:16:18:83:04:04:f9:7f:f4:10:05:85:4b:
5f:3a:a2:33:b9:d3:01:35:12:3f:a8:60:78:cd:f2:
87:1d:bd:dc:02:79:f7:92:7d:2d:da:b8:b1:e6:da:
99:ee:59:30:e0:19:5f:5d:d5:28:85:16:18:cd:fd:
8d:7f:85:e6:92:61:c5:23:e7:ed:24:f8:14:48:5e:
e6:23:d2:38:49:30:4f:aa:56:cc:1b:9f:29:24:23:
32:73:5a:8b:fb:ca:50:e7:a3:cd:46:59:40:3b:71:
84:5e:6b:dc:d2:74:c4:18:b6:f9:7a:1b:15:10:9c:
c7:07:7e:88:78:f5:61:21:96:77:a6:d8:df:10:c4:
e5:11:2b:0e:57:f5:0e:f2:2d:0c:c8:d6:c1:66:08:
9a:ed:7a:0f:06:99:f4:cb:98:da:43:16:c1:f6:ac:
74:d9:4c:23:74:2f:b3:5c:d9:fe:54:87:ea:d1:f4:
e1:a5:52:db:76:e3:1c:03:1d:5f:7a:50:e2:4d:3c:
7b:33:b0:2b:69:c6:6c:fb:5a:d3:83:75:ab:50:7d:
08:8c:50:33:13:c6:cb:5f:a9:ec:06:e5:21:ba:69:
01:e4:8b:e8:07:13:56:7b:11:8d:bb:69:62:da:2b:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6D:57:6B:14:94:2A:4B:2F:0E:D7:21:58:89:48:46:8E:E4:49:84
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/221XaxSUKksvDtchWIlIRo7kSYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.188.0/24
193.124.227.0/24
194.85.249.0/24
194.85.251.0/24
194.87.84.0/24
194.87.86.0/24
194.87.187.0/24
195.133.13.0/24
195.133.37.0/24
195.133.39.0-195.133.43.255
212.192.240.0/24
212.193.28.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d1:4d:2d:2b:17:57:85:85:77:5b:27:4d:3b:9c:a7:30:3b:
5a:8b:2e:96:a1:9d:a5:07:c1:40:0b:06:f8:d2:63:d0:d8:cf:
89:09:89:7d:74:fc:ae:7f:90:55:df:74:62:7a:73:86:2c:04:
82:e0:74:ea:27:2c:6f:05:b8:e9:4f:e6:9d:27:c8:1b:ff:14:
ac:06:3e:b5:16:62:4f:48:3b:14:f1:8f:ee:5a:0f:c9:07:4f:
85:3d:08:1f:7b:70:ac:f4:c1:1d:13:be:54:b4:cc:f8:c2:b2:
93:6d:fc:d5:8e:65:41:c5:52:8f:81:9f:49:34:d6:11:54:27:
07:61:91:c4:f8:86:45:a9:10:b7:4f:50:cc:02:a2:7d:ad:4b:
69:45:71:dd:62:bc:30:b0:23:65:65:4d:89:64:a2:91:72:a8:
c5:e5:da:ce:8b:25:0e:8b:91:b4:31:3e:30:87:98:1f:e6:3d:
02:5d:d5:ff:eb:24:15:27:d6:73:9d:5c:5c:4a:ff:85:61:25:
3d:0c:92:5a:82:b3:48:8d:4d:aa:29:b4:cf:e6:4f:d3:25:8d:
95:b2:96:a3:40:ab:0b:a3:bb:8a:6d:63:c7:a5:00:10:56:7e:
bc:20:ad:42:78:50:1d:f9:ca:7c:49:21:ac:b7:b0:09:00:6f:
88:94:18:09
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYbqawXFNJwGX8GBYfDiId5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMzE2MTIzNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjZkNTc2YjE0OTQyYTRiMmYwZWQ3MjE1ODg5NDg0NjhlZTQ0OTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEcOuVE/Edy33L4KVH6thFgWGIME
BPl/9BAFhUtfOqIzudMBNRI/qGB4zfKHHb3cAnn3kn0t2rix5tqZ7lkw4BlfXdUo
hRYYzf2Nf4XmkmHFI+ftJPgUSF7mI9I4STBPqlbMG58pJCMyc1qL+8pQ56PNRllA
O3GEXmvc0nTEGLb5ehsVEJzHB36IePVhIZZ3ptjfEMTlESsOV/UO8i0MyNbBZgia
7XoPBpn0y5jaQxbB9qx02UwjdC+zXNn+VIfq0fThpVLbduMcAx1felDiTTx7M7Ar
acZs+1rTg3WrUH0IjFAzE8bLX6nsBuUhumkB5IvoBxNWexGNu2li2is2JQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFNttV2sUlCpLLw7XIViJSEaO5EmEMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMjIxWGF4U1VLa3N2RHRjaFdJbElSbzdrU1lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAwHy8AwQA
wXzjAwQAwlX5AwQAwlX7AwQAwldUAwQAwldWAwQAwle7AwQAw4UNAwQAw4UlMAwD
BADDhScDBALDhSgDBADUwPADBADUwRwDBADUwR8wDQYJKoZIhvcNAQELBQADggEB
AJbRTS0rF1eFhXdbJ007nKcwO1qLLpahnaUHwUALBvjSY9DYz4kJiX10/K5/kFXf
dGJ6c4YsBILgdOonLG8FuOlP5p0nyBv/FKwGPrUWYk9IOxTxj+5aD8kHT4U9CB97
cKz0wR0TvlS0zPjCspNt/NWOZUHFUo+Bn0k01hFUJwdhkcT4hkWpELdPUMwCon2t
S2lFcd1ivDCwI2VlTYlkopFyqMXl2s6LJQ6LkbQxPjCHmB/mPQJd1f/rJBUn1nOd
XFxK/4VhJT0MklqCs0iNTaoptM/mT9MljZWylqNAqwuju4ptY8elABBWfrwgrUJ4
UB35ynxJIay3sAkAb4iUGAk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-ams.rpki-client.org