Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5F9UqzXbfkqU2nx1menr1Y_iv58.roa
File: 5F9UqzXbfkqU2nx1menr1Y_iv58.roa (raw, json)
Hash identifier: m7WjQXgtaH9/HMqtUzwMTPLuDBTD0Kjn/9ed1xdsrgw=
Subject key identifier: E4:5F:54:AB:35:DB:7E:4A:94:DA:7C:75:99:E9:EB:D5:8F:E2:BF:9F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186A5E84C266DE232528BC30912199483E3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5F9UqzXbfkqU2nx1menr1Y_iv58.roa
Signing time: Fri 03 Mar 2023 05:18:29 +0000
ROA not before: Fri 03 Mar 2023 05:18:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199785
IP address blocks: 194.87.17.0/24 maxlen: 24
194.58.33.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a5:e8:4c:26:6d:e2:32:52:8b:c3:09:12:19:94:83:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 3 05:18:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e45f54ab35db7e4a94da7c7599e9ebd58fe2bf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:d7:54:13:95:7e:b3:3a:22:18:fb:2c:4c:
93:91:1c:d6:56:92:8d:15:ad:57:66:ee:ba:cb:c8:
a1:ae:fc:be:6d:30:ac:87:91:f3:56:da:29:e1:46:
79:2a:40:e1:2e:fa:bd:2c:1e:b9:ae:bd:78:f3:24:
29:14:8a:15:27:f5:1d:6c:73:c5:30:5d:a1:c6:60:
c4:fe:f7:38:2f:30:83:04:9c:68:91:7d:00:a2:73:
ab:3e:0d:9e:47:6b:1a:f6:a2:74:8f:57:e6:24:68:
b4:90:89:41:76:92:ff:ed:e6:01:a0:ba:dc:d7:fb:
e7:52:0d:7e:a6:5f:1f:9e:0c:13:4e:0d:4d:1f:c9:
74:22:d2:6a:e1:38:a8:22:ff:83:8c:c9:eb:97:0f:
12:61:50:27:48:e6:e1:71:12:e2:78:e8:a6:72:16:
c2:95:27:d3:90:c7:55:f6:ec:09:a2:e6:f4:ad:c6:
37:dc:ce:37:09:54:23:b6:ba:43:b3:a2:9f:ca:a4:
4c:37:75:40:cb:e7:00:f9:01:bf:7e:1f:96:cc:45:
57:85:34:d7:ac:80:89:f3:91:21:94:a5:86:d2:53:
a1:2e:23:da:1e:75:9f:bf:26:1d:43:3b:83:03:4a:
79:99:81:8c:58:6f:56:f0:8f:7c:4f:8d:d5:ee:eb:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5F:54:AB:35:DB:7E:4A:94:DA:7C:75:99:E9:EB:D5:8F:E2:BF:9F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5F9UqzXbfkqU2nx1menr1Y_iv58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.33.0/24
194.87.17.0/24
194.87.199.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a8:67:6a:08:95:b5:a6:41:c5:c6:e4:5d:f2:ec:9c:03:c3:
c8:cf:c4:59:c5:14:68:e2:7e:a9:75:cc:4a:9a:c1:51:3f:a4:
96:3a:3a:7c:08:0c:cf:6b:16:5a:5d:ee:b6:8b:58:17:3a:39:
fb:32:03:52:97:6b:3d:81:19:9b:cb:3c:e7:49:9a:bb:67:f6:
aa:93:c8:81:38:6b:d4:50:f5:2a:db:73:74:2e:5b:fc:89:ae:
4b:e7:06:58:ae:ec:7c:8b:20:f6:37:9f:a7:e4:f4:8c:e3:1b:
13:ca:63:f2:c3:9e:ab:d0:e1:a6:6a:fb:c3:ee:42:4a:e8:6f:
df:d0:6b:24:b4:ca:95:ef:0c:6e:24:2b:f0:9c:61:71:ee:6a:
24:5d:ce:6c:3f:f3:92:1a:6c:b1:6b:de:e2:47:8f:6d:48:7d:
39:b4:ed:35:23:09:07:69:77:a5:7b:51:5d:11:83:7c:2c:b6:
47:c4:e8:26:6f:79:fb:7d:23:9f:c0:ae:6e:7d:33:f5:0e:5f:
f9:a8:12:0b:f7:10:48:c6:31:86:36:c5:a6:36:d2:af:04:2a:
94:11:b9:0c:d4:e7:13:5c:dd:81:b5:06:f1:f8:c2:3b:7e:60:
3c:b3:30:77:6b:30:e8:df:01:02:76:f0:e5:e0:bf:69:55:ee:
59:8e:d7:49
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYal6EwmbeIyUovDCRIZlIPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMzAzMDUxODI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDVmNTRhYjM1ZGI3ZTRhOTRkYTdjNzU5OWU5ZWJkNThmZTJiZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDDXVBOVfrM6Ihj7LEyTkRzWVpKN
Fa1XZu66y8ihrvy+bTCsh5HzVtop4UZ5KkDhLvq9LB65rr148yQpFIoVJ/UdbHPF
MF2hxmDE/vc4LzCDBJxokX0AonOrPg2eR2sa9qJ0j1fmJGi0kIlBdpL/7eYBoLrc
1/vnUg1+pl8fngwTTg1NH8l0ItJq4TioIv+DjMnrlw8SYVAnSObhcRLieOimchbC
lSfTkMdV9uwJoub0rcY33M43CVQjtrpDs6KfyqRMN3VAy+cA+QG/fh+WzEVXhTTX
rICJ85EhlKWG0lOhLiPaHnWfvyYdQzuDA0p5mYGMWG9W8I98T43V7usuxQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFORfVKs1235KlNp8dZnp69WP4r+fMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNUY5VXF6WGJma3FVMm54MW1lbnIxWV9pdjU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwjohAwQA
wlcRAwQAwlfHAwQA1MAfMA0GCSqGSIb3DQEBCwUAA4IBAQBwqGdqCJW1pkHFxuRd
8uycA8PIz8RZxRRo4n6pdcxKmsFRP6SWOjp8CAzPaxZaXe62i1gXOjn7MgNSl2s9
gRmbyzznSZq7Z/aqk8iBOGvUUPUq23N0Llv8ia5L5wZYrux8iyD2N5+n5PSM4xsT
ymPyw56r0OGmavvD7kJK6G/f0GsktMqV7wxuJCvwnGFx7mokXc5sP/OSGmyxa97i
R49tSH05tO01IwkHaXele1FdEYN8LLZHxOgmb3n7fSOfwK5ufTP1Dl/5qBIL9xBI
xjGGNsWmNtKvBCqUEbkM1OcTXN2BtQbx+MI7fmA8szB3azDo3wECdvDl4L9pVe5Z
jtdJ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:55 2023 by rpki-client on console-fra.rpki-client.org