Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/47JnlsVjmIzPC4Lx2wgdF1rNEvQ.roa
File: 47JnlsVjmIzPC4Lx2wgdF1rNEvQ.roa (raw, json)
Hash identifier: BbwqH5sLpD1prukpOmfCplQJHKojb/FSE6yS4XuCASM=
Subject key identifier: E3:B2:67:96:C5:63:98:8C:CF:0B:82:F1:DB:08:1D:17:5A:CD:12:F4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189E45402B4C6CEAA16263C094E7DAE1C20
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/47JnlsVjmIzPC4Lx2wgdF1rNEvQ.roa
Signing time: Fri 11 Aug 2023 11:20:58 +0000
ROA not before: Fri 11 Aug 2023 11:20:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 194.87.131.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:54:02:b4:c6:ce:aa:16:26:3c:09:4e:7d:ae:1c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 11 11:20:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3b26796c563988ccf0b82f1db081d175acd12f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:9d:5d:5d:2c:2b:73:d4:7b:11:85:68:11:
7a:5c:1b:d3:4f:68:d3:e3:b6:ce:4a:e9:dc:8e:1c:
c8:73:d0:dc:11:6a:82:f0:a3:c8:96:dd:b2:ec:5a:
f7:d9:c3:4a:43:77:d0:49:ac:23:ab:4e:bd:85:7b:
c1:84:4b:71:85:78:c1:ae:ea:06:84:ef:47:19:d5:
71:cf:ad:55:76:12:07:27:fa:73:0c:a3:4f:08:3a:
14:40:93:c0:cf:07:de:2b:09:87:d1:e6:93:07:12:
e5:56:c3:ce:6d:76:d1:df:b3:79:a7:d7:1a:af:1c:
fe:a7:7c:1e:4e:3f:41:e8:f6:d9:bb:0a:9d:27:e9:
9d:b6:ef:53:0d:96:e5:d6:6f:13:55:b7:e3:8c:9a:
5e:87:23:80:3d:65:9c:91:33:82:b4:12:3a:c4:86:
ef:d8:38:bd:31:2f:9d:e6:6d:46:0a:9f:66:a6:b9:
aa:77:90:55:75:a5:2e:9a:77:39:bf:19:23:e1:c0:
57:2c:70:86:07:f0:3c:6a:50:36:94:05:ad:8e:1e:
73:cd:79:0d:51:84:92:ae:1c:08:99:85:2d:85:b2:
a4:16:4d:ad:7e:34:3c:26:b5:29:18:61:d4:b9:c5:
e1:bf:0b:60:2a:64:45:3f:7c:d7:4f:62:d9:5f:db:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B2:67:96:C5:63:98:8C:CF:0B:82:F1:DB:08:1D:17:5A:CD:12:F4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/47JnlsVjmIzPC4Lx2wgdF1rNEvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.191.0/24
194.58.67.0/24
194.87.63.0/24
194.87.131.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e5:4c:6b:d4:e0:c0:5c:eb:78:70:19:f8:fe:66:76:64:cb:
7f:b4:8f:72:c5:8f:17:ce:96:4a:b8:13:b5:95:1a:9b:fa:74:
1a:9d:13:0e:d1:0b:07:1e:42:84:1d:72:ce:c8:42:2b:ac:b6:
b3:59:5a:da:d9:4c:25:91:fa:09:12:11:44:38:87:5c:52:59:
73:e2:45:f7:94:58:ab:b3:7f:c7:e4:34:67:d1:f4:cb:38:94:
60:8f:b3:5f:fb:d1:d2:e1:6b:f2:29:8b:b4:61:0a:9b:3f:2d:
15:33:12:49:ed:a3:bb:64:14:fd:db:6d:3d:19:c3:04:c0:12:
6a:26:a9:44:58:53:7b:7d:c3:06:ac:c9:c5:31:8b:8e:2c:8f:
f2:4b:5f:dc:cc:16:a8:94:0c:16:f9:de:38:cb:39:c4:14:96:
97:46:e5:da:71:a4:38:81:3b:cd:3e:db:b0:cf:35:eb:d6:5c:
6f:1b:76:a5:b5:a6:5d:e7:3e:67:62:13:68:46:a6:6c:f8:30:
e8:a7:63:87:db:fd:e4:37:a4:f5:87:b1:12:81:33:b5:34:55:
8e:19:ca:0f:95:c4:b4:bb:16:aa:7c:9e:99:7d:21:84:18:8a:
92:2c:99:49:74:38:1e:b5:9a:0d:5c:4b:c6:b2:8e:22:a9:e8:
33:6e:ac:f8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYnkVAK0xs6qFiY8CU59rhwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwODExMTEyMDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2IyNjc5NmM1NjM5ODhjY2YwYjgyZjFkYjA4MWQxNzVhY2QxMmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIedXV0sK3PUexGFaBF6XBvTT2jT
47bOSuncjhzIc9DcEWqC8KPIlt2y7Fr32cNKQ3fQSawjq069hXvBhEtxhXjBruoG
hO9HGdVxz61VdhIHJ/pzDKNPCDoUQJPAzwfeKwmH0eaTBxLlVsPObXbR37N5p9ca
rxz+p3weTj9B6PbZuwqdJ+mdtu9TDZbl1m8TVbfjjJpehyOAPWWckTOCtBI6xIbv
2Di9MS+d5m1GCp9mprmqd5BVdaUumnc5vxkj4cBXLHCGB/A8alA2lAWtjh5zzXkN
UYSSrhwImYUthbKkFk2tfjQ8JrUpGGHUucXhvwtgKmRFP3zXT2LZX9sJmwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOOyZ5bFY5iMzwuC8dsIHRdazRL0MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNDdKbmxzVmptSXpQQzRMeDJ3Z2RGMXJORXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwHy/AwQA
wjpDAwQAwlc/AwQAwleDMA0GCSqGSIb3DQEBCwUAA4IBAQBq5Uxr1ODAXOt4cBn4
/mZ2ZMt/tI9yxY8XzpZKuBO1lRqb+nQanRMO0QsHHkKEHXLOyEIrrLazWVra2Uwl
kfoJEhFEOIdcUllz4kX3lFirs3/H5DRn0fTLOJRgj7Nf+9HS4WvyKYu0YQqbPy0V
MxJJ7aO7ZBT92209GcMEwBJqJqlEWFN7fcMGrMnFMYuOLI/yS1/czBaolAwW+d44
yznEFJaXRuXacaQ4gTvNPtuwzzXr1lxvG3altaZd5z5nYhNoRqZs+DDop2OH2/3k
N6T1h7ESgTO1NFWOGcoPlcS0uxaqfJ6ZfSGEGIqSLJlJdDgetZoNXEvGso4iqegz
bqz4
-----END CERTIFICATE-----
Generated at Tue Aug 15 15:16:35 2023 by rpki-client on console-ams.rpki-client.org