Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6bgm7yg_J-jtWEcJ-z-qv7_K2Sc.roa
File: 6bgm7yg_J-jtWEcJ-z-qv7_K2Sc.roa (raw, json)
Hash identifier: i1fuDOUajUsKuEPx4IO4LDL3saCCl7L42qGSGXM9NGs=
Subject key identifier: E9:B8:26:EF:28:3F:27:E8:ED:58:47:09:FB:3F:AA:BF:BF:CA:D9:27
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AE6AAFCBAFE3F0F4224E8834388764AF9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6bgm7yg_J-jtWEcJ-z-qv7_K2Sc.roa
Signing time: Sat 30 Sep 2023 15:18:00 +0000
ROA not before: Sat 30 Sep 2023 15:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 195.133.194.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.141.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e6:aa:fc:ba:fe:3f:0f:42:24:e8:83:43:88:76:4a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 30 15:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9b826ef283f27e8ed584709fb3faabfbfcad927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:2a:08:67:1c:dd:65:46:6a:b0:22:ee:de:
4d:61:8a:3d:64:2e:9c:47:d8:1a:db:3d:f4:e3:fd:
b0:19:9f:af:09:65:c8:48:4b:d7:a6:f2:de:03:40:
a4:16:a1:a5:a1:01:bf:60:75:4b:25:e1:f8:b2:45:
f1:65:c2:20:81:fe:ed:51:2d:e1:5f:33:01:74:4b:
ac:8f:e6:a1:16:80:f8:26:50:fa:34:9a:84:77:11:
5b:8d:16:07:aa:8d:84:68:02:6e:2d:ee:e7:0d:08:
e4:ab:09:80:8b:d1:44:1e:f7:05:81:31:45:5d:5b:
66:fe:c2:6d:9a:e1:3e:11:aa:92:db:65:82:e9:9a:
de:5d:03:ee:3c:59:5f:7f:1a:9d:68:fa:ef:c4:10:
4d:d1:a3:d3:30:f5:b7:cf:6a:5a:f4:1d:15:05:34:
14:e2:d3:6a:5b:a7:54:f2:a9:66:01:3b:10:49:54:
d4:01:5d:31:41:70:a2:02:98:f5:df:e8:e6:1c:08:
4e:04:9d:2c:bd:2f:f6:eb:a9:6c:47:40:d6:33:65:
13:6d:e1:4b:1b:05:81:c1:14:0d:59:a4:f7:bb:78:
b9:fd:19:eb:63:58:f4:78:6c:ee:5e:08:31:74:2a:
66:1f:29:ce:70:e8:ee:9c:57:a8:c7:c1:8d:1b:47:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B8:26:EF:28:3F:27:E8:ED:58:47:09:FB:3F:AA:BF:BF:CA:D9:27
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6bgm7yg_J-jtWEcJ-z-qv7_K2Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.41.0/24
194.87.140.0/23
194.135.30.0/24
195.133.194.0/24
212.192.244.0/24
Signature Algorithm: sha256WithRSAEncryption
67:83:4e:41:91:9d:f2:78:ce:6a:75:aa:21:00:c1:fd:9a:7d:
b6:e3:17:71:a2:6d:f3:60:be:88:8f:72:e1:92:fb:1b:c8:04:
29:36:49:6b:09:46:c4:50:03:11:ba:53:48:11:4f:a8:91:93:
e6:1e:a8:65:35:ae:39:08:2b:97:f5:a7:35:31:f6:6b:cc:a2:
17:15:e0:1a:4f:be:3c:9e:78:59:00:49:49:96:95:8e:83:22:
ac:a3:f2:0b:60:2b:e0:8b:96:58:34:c7:f7:02:c0:b0:03:81:
8b:33:55:65:40:fe:21:30:47:9c:8a:f2:72:13:b8:61:fd:7e:
00:f9:e1:95:4a:81:a8:6c:3b:da:d2:eb:47:79:76:7f:b5:84:
75:30:77:bd:bd:87:22:43:bf:b6:e0:aa:d5:b6:67:f0:db:11:
7c:ca:32:b2:0d:e6:a5:c7:0d:71:e7:68:6e:30:ad:98:d9:4c:
cf:fb:79:e4:00:25:53:18:25:b0:b8:29:c7:6e:72:2f:0b:ca:
95:58:12:d6:0a:6b:63:13:b6:9e:19:6e:23:18:a2:c4:96:4d:
1b:a1:97:b5:96:d9:d6:32:db:d9:17:19:7c:c8:8c:f9:10:50:
02:85:64:16:1b:24:0c:33:5a:d3:26:95:8e:39:ae:1f:1c:16:
c7:0d:0a:19
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYrmqvy6/j8PQiTog0OIdkr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwOTMwMTUxODAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWI4MjZlZjI4M2YyN2U4ZWQ1ODQ3MDlmYjNmYWFiZmJmY2FkOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8QqCGcc3WVGarAi7t5NYYo9ZC6c
R9ga2z304/2wGZ+vCWXISEvXpvLeA0CkFqGloQG/YHVLJeH4skXxZcIggf7tUS3h
XzMBdEusj+ahFoD4JlD6NJqEdxFbjRYHqo2EaAJuLe7nDQjkqwmAi9FEHvcFgTFF
XVtm/sJtmuE+EaqS22WC6ZreXQPuPFlffxqdaPrvxBBN0aPTMPW3z2pa9B0VBTQU
4tNqW6dU8qlmATsQSVTUAV0xQXCiApj13+jmHAhOBJ0svS/266lsR0DWM2UTbeFL
GwWBwRQNWaT3u3i5/RnrY1j0eGzuXggxdCpmHynOcOjunFeox8GNG0cfwwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOm4Ju8oPyfo7VhHCfs/qr+/ytknMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNmJnbTd5Z19KLWp0V0VjSi16LXF2N19LMlNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwjopAwQB
wleMAwQAwoceAwQAw4XCAwQA1MD0MA0GCSqGSIb3DQEBCwUAA4IBAQBng05BkZ3y
eM5qdaohAMH9mn224xdxom3zYL6Ij3LhkvsbyAQpNklrCUbEUAMRulNIEU+okZPm
HqhlNa45CCuX9ac1MfZrzKIXFeAaT748nnhZAElJlpWOgyKso/ILYCvgi5ZYNMf3
AsCwA4GLM1VlQP4hMEecivJyE7hh/X4A+eGVSoGobDva0utHeXZ/tYR1MHe9vYci
Q7+24KrVtmfw2xF8yjKyDealxw1x52huMK2Y2UzP+3nkACVTGCWwuCnHbnIvC8qV
WBLWCmtjE7aeGW4jGKLElk0boZe1ltnWMtvZFxl8yIz5EFAChWQWGyQMM1rTJpWO
Oa4fHBbHDQoZ
-----END CERTIFICATE-----
Generated at Mon Oct 2 07:29:15 2023 by rpki-client on console-ams.rpki-client.org