Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2OH4rGPL2pWMRhPUPp9JLpfC0Lw.roa
File: 2OH4rGPL2pWMRhPUPp9JLpfC0Lw.roa (raw, json)
Hash identifier: 4thj9sSySTtjp2RN1G/1WfpbdcAkWLp7BTyggVmGBmI=
Subject key identifier: D8:E1:F8:AC:63:CB:DA:95:8C:46:13:D4:3E:9F:49:2E:97:C2:D0:BC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189B4F1E2CD47E2AFEF9375D776CBE1B043
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2OH4rGPL2pWMRhPUPp9JLpfC0Lw.roa
Signing time: Wed 02 Aug 2023 06:31:38 +0000
ROA not before: Wed 02 Aug 2023 06:31:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b4:f1:e2:cd:47:e2:af:ef:93:75:d7:76:cb:e1:b0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 2 06:31:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8e1f8ac63cbda958c4613d43e9f492e97c2d0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cb:70:b0:89:b3:ce:01:ef:f7:6c:dc:4e:f2:
11:1e:4f:60:c1:2b:c9:5f:9b:e6:6b:c6:b8:ff:af:
bb:7b:e7:1f:c9:e9:b3:01:8f:42:b1:cf:0e:17:64:
21:90:93:94:d5:88:40:e6:4a:b9:d7:97:3c:33:4f:
99:84:19:0b:be:bc:de:e9:f4:e6:20:fc:06:39:3f:
0c:0d:3d:ab:fa:a9:89:33:66:4e:ad:47:2c:c9:ae:
74:90:a9:24:f2:70:a9:6b:0e:a0:cb:8c:f1:b7:98:
38:17:ee:bc:2b:e3:b8:e4:ea:7d:59:79:df:8a:bc:
d8:67:1d:b1:0f:90:2f:f3:0b:8b:c0:5d:c6:a5:8c:
ae:c0:67:24:62:81:17:10:23:80:fb:ea:41:f2:7d:
9e:2a:9a:9a:7d:78:30:7d:34:98:cc:bd:cb:e6:55:
e2:3f:5b:8d:7f:9d:5d:e8:ff:43:7e:81:f1:7f:96:
6b:5d:a1:ce:5f:ff:2d:82:c4:aa:31:ac:d2:35:26:
96:a0:f5:e5:01:92:d3:b2:63:ff:07:60:7b:07:4c:
e9:af:5c:a4:8a:5e:b4:14:0d:85:61:b4:76:8b:c2:
e2:ba:1c:bd:9f:31:91:90:e5:32:e5:ff:ae:6a:97:
0c:d8:6e:0a:07:7d:ab:88:39:ea:80:bf:11:c2:af:
6b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E1:F8:AC:63:CB:DA:95:8C:46:13:D4:3E:9F:49:2E:97:C2:D0:BC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2OH4rGPL2pWMRhPUPp9JLpfC0Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
193.124.5.0/24
193.124.91.0/24
193.124.95.0/24
194.87.51.0-194.87.52.255
194.87.54.0/24
194.87.114.0/24
194.87.121.0/24
194.87.178.0/24
195.58.35.0/24
195.133.14.0/24
195.133.81.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1c:7f:80:9e:70:c1:1c:8b:59:17:3b:6c:f6:4f:d3:90:f1:
d6:96:36:2f:5d:80:5c:49:34:34:f2:04:0a:94:f6:18:cf:96:
26:03:85:32:7c:2c:41:0c:ac:2a:c7:d7:19:9c:1e:91:e9:9e:
49:14:21:2b:39:ef:3f:c2:0b:74:1d:a0:5e:73:85:3a:2e:a1:
27:64:fc:54:98:22:ab:9e:54:85:bb:ca:f3:f9:a1:56:95:2d:
e5:79:7a:51:f5:47:fc:1d:88:eb:84:09:ec:0a:12:aa:14:99:
99:10:1b:1f:68:fe:91:50:d7:85:93:e1:d0:24:3c:9a:be:cf:
f1:2e:80:2a:c2:01:4e:76:40:4e:62:70:65:a9:e4:fe:cd:ad:
f9:83:42:8a:bc:04:25:ea:f7:8c:47:4f:03:7e:ae:29:b8:d4:
c4:20:e8:09:23:af:81:60:9d:53:77:9c:a4:e7:fd:d9:a8:b0:
5e:ce:af:84:c9:3d:e8:1a:4f:28:c3:0f:e0:88:33:ae:78:e2:
1d:9a:4a:97:75:86:b6:f5:ae:21:c9:7e:4e:a5:1b:70:c7:ec:
f0:ac:7a:51:ed:c0:44:5e:af:f2:98:b4:2a:f4:a6:a3:92:32:
30:b4:b1:dd:f8:60:27:50:d0:fc:2f:b9:44:d9:f9:fd:48:00:
d0:a6:59:e7
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYm08eLNR+Kv75N113bL4bBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwODAyMDYzMTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGUxZjhhYzYzY2JkYTk1OGM0NjEzZDQzZTlmNDkyZTk3YzJkMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgctwsImzzgHv92zcTvIRHk9gwSvJ
X5vma8a4/6+7e+cfyemzAY9Csc8OF2QhkJOU1YhA5kq515c8M0+ZhBkLvrze6fTm
IPwGOT8MDT2r+qmJM2ZOrUcsya50kKkk8nCpaw6gy4zxt5g4F+68K+O45Op9WXnf
irzYZx2xD5Av8wuLwF3GpYyuwGckYoEXECOA++pB8n2eKpqafXgwfTSYzL3L5lXi
P1uNf51d6P9DfoHxf5ZrXaHOX/8tgsSqMazSNSaWoPXlAZLTsmP/B2B7B0zpr1yk
il60FA2FYbR2i8Liuhy9nzGRkOUy5f+uapcM2G4KB32riDnqgL8Rwq9rcwIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFNjh+Kxjy9qVjEYT1D6fSS6XwtC8MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMk9INHJHUEwycFdNUmhQVVBwOUpMcGZDMEx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAPkzhAwQA
wXwFAwQAwXxbAwQAwXxfMAwDBADCVzMDBADCVzQDBADCVzYDBADCV3IDBADCV3kD
BADCV7IDBADDOiMDBADDhQ4DBADDhVEDBADUwQwwDQYJKoZIhvcNAQELBQADggEB
AGYcf4CecMEci1kXO2z2T9OQ8daWNi9dgFxJNDTyBAqU9hjPliYDhTJ8LEEMrCrH
1xmcHpHpnkkUISs57z/CC3QdoF5zhTouoSdk/FSYIqueVIW7yvP5oVaVLeV5elH1
R/wdiOuECewKEqoUmZkQGx9o/pFQ14WT4dAkPJq+z/EugCrCAU52QE5icGWp5P7N
rfmDQoq8BCXq94xHTwN+rim41MQg6Akjr4FgnVN3nKTn/dmosF7Or4TJPegaTyjD
D+CIM6544h2aSpd1hrb1riHJfk6lG3DH7PCselHtwERer/KYtCr0pqOSMjC0sd34
YCdQ0PwvuUTZ+f1IANCmWec=
-----END CERTIFICATE-----
Generated at Fri Aug 4 06:35:28 2023 by rpki-client on console-fra.rpki-client.org