Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7FzBgCm2n_tN3dNmMpTJsTbPnhg.roa
File: 7FzBgCm2n_tN3dNmMpTJsTbPnhg.roa (raw, json)
Hash identifier: tz7dfj3GDCJoROXaSAlbJszdLR1/oZp2/dkq0dLtGQU=
Subject key identifier: EC:5C:C1:80:29:B6:9F:FB:4D:DD:D3:66:32:94:C9:B1:36:CF:9E:18
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01898716D370246D4DEA18214F792EE5C302
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7FzBgCm2n_tN3dNmMpTJsTbPnhg.roa
Signing time: Mon 24 Jul 2023 08:49:27 +0000
ROA not before: Mon 24 Jul 2023 08:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 193.124.47.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:87:16:d3:70:24:6d:4d:ea:18:21:4f:79:2e:e5:c3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 24 08:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec5cc18029b69ffb4dddd3663294c9b136cf9e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:e5:a6:72:fc:d1:81:ed:b7:25:3d:6b:c5:
71:35:94:dd:81:0c:1d:94:41:c5:dc:a7:5e:e5:36:
0e:76:53:07:21:92:c8:45:c4:82:28:07:04:4e:e3:
62:c5:30:a3:cb:9e:e3:15:f9:77:91:9f:ba:ca:27:
7e:0d:cc:da:cf:64:ec:48:47:cc:2e:35:c6:8b:de:
02:5a:5a:f5:fe:f1:9b:2e:46:d2:20:99:e9:98:da:
08:02:09:2b:f7:15:a6:d5:9c:73:7b:bd:fc:c1:3a:
a9:f2:5d:1b:e9:89:06:15:a2:c4:eb:49:34:c7:f3:
0d:b7:91:6e:4a:a9:b2:1c:fe:1d:9f:a1:d9:0d:00:
83:12:a8:5b:6d:96:23:f1:d9:06:37:89:3a:9f:65:
9e:17:63:4d:cf:cf:19:51:47:a3:ce:12:43:d1:f3:
64:e2:2c:09:cf:0f:ca:00:57:4c:d3:85:1d:7e:a5:
45:33:35:fc:7c:39:a0:7a:a4:49:8f:3d:7f:05:c7:
4f:63:fe:04:50:45:f5:c9:ee:3b:f2:74:da:29:46:
12:73:e2:7f:61:68:29:f5:f2:b6:3b:ef:ce:24:fb:
86:70:df:96:05:87:72:09:47:b9:0e:7a:71:83:db:
00:fa:58:eb:4a:41:24:33:f0:93:70:83:b8:e1:43:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5C:C1:80:29:B6:9F:FB:4D:DD:D3:66:32:94:C9:B1:36:CF:9E:18
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7FzBgCm2n_tN3dNmMpTJsTbPnhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
194.87.149.0/24
Signature Algorithm: sha256WithRSAEncryption
42:55:67:46:3c:a0:fd:6a:e8:b3:3a:2a:6f:db:17:43:28:d1:
32:b5:ed:11:0d:d0:f8:f5:a8:b5:2b:91:f0:50:ff:7d:fb:b2:
07:c9:65:f8:49:d4:99:28:f0:99:93:89:48:c4:ba:d4:b8:96:
74:71:03:99:7b:a1:74:bf:c6:b8:dc:32:ee:58:8b:49:cd:98:
a8:b9:ee:70:51:76:9d:a9:50:19:e7:7e:49:25:5a:34:9a:f5:
a1:cc:70:31:cd:dc:ad:7f:97:92:22:27:21:49:df:04:13:da:
c5:01:23:58:cc:b0:d3:10:db:22:4f:78:9c:de:17:f7:d7:d1:
49:8c:f4:7b:4d:09:c9:42:b4:fc:20:e3:94:a4:98:cc:94:4e:
a6:32:78:2a:19:d0:ba:93:09:f6:50:f4:f6:06:1b:65:7a:14:
3d:4f:67:1d:eb:ee:8c:bf:99:59:5a:95:9f:91:70:08:9f:b2:
69:15:b4:a1:d9:94:3b:fb:fc:aa:76:ec:d6:03:e5:05:aa:f2:
19:f8:af:01:2d:a7:bf:75:78:f2:bd:bd:10:de:64:c4:01:15:
9d:39:28:cd:a0:37:66:73:b0:11:5e:ea:18:7f:bc:f9:37:71:
08:2c:aa:b5:45:e5:04:41:7c:6a:b8:01:65:99:b3:c6:64:99:
6e:06:32:39
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYmHFtNwJG1N6hghT3ku5cMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNzI0MDg0OTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzVjYzE4MDI5YjY5ZmZiNGRkZGQzNjYzMjk0YzliMTM2Y2Y5ZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsLlpnL80YHttyU9a8VxNZTdgQwd
lEHF3Kde5TYOdlMHIZLIRcSCKAcETuNixTCjy57jFfl3kZ+6yid+Dczaz2TsSEfM
LjXGi94CWlr1/vGbLkbSIJnpmNoIAgkr9xWm1Zxze738wTqp8l0b6YkGFaLE60k0
x/MNt5FuSqmyHP4dn6HZDQCDEqhbbZYj8dkGN4k6n2WeF2NNz88ZUUejzhJD0fNk
4iwJzw/KAFdM04UdfqVFMzX8fDmgeqRJjz1/BcdPY/4EUEX1ye478nTaKUYSc+J/
YWgp9fK2O+/OJPuGcN+WBYdyCUe5Dnpxg9sA+ljrSkEkM/CTcIO44UNaWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOxcwYAptp/7Td3TZjKUybE2z54YMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvN0Z6QmdDbTJuX3ROM2RObU1wVEpzVGJQbmhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwXwvAwQA
wleVMA0GCSqGSIb3DQEBCwUAA4IBAQBCVWdGPKD9auizOipv2xdDKNEyte0RDdD4
9ai1K5HwUP99+7IHyWX4SdSZKPCZk4lIxLrUuJZ0cQOZe6F0v8a43DLuWItJzZio
ue5wUXadqVAZ535JJVo0mvWhzHAxzdytf5eSIichSd8EE9rFASNYzLDTENsiT3ic
3hf319FJjPR7TQnJQrT8IOOUpJjMlE6mMngqGdC6kwn2UPT2BhtlehQ9T2cd6+6M
v5lZWpWfkXAIn7JpFbSh2ZQ7+/yqduzWA+UFqvIZ+K8BLae/dXjyvb0Q3mTEARWd
OSjNoDdmc7ARXuoYf7z5N3EILKq1ReUEQXxquAFlmbPGZJluBjI5
-----END CERTIFICATE-----
Generated at Mon Sep 18 13:07:47 2023 by rpki-client on console-ams.rpki-client.org