Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8YBCztEXFPQ9K1l1h-CgDDKd30c.roa
File: 8YBCztEXFPQ9K1l1h-CgDDKd30c.roa (raw, json)
Hash identifier: 6Jd/YWKIYiCy4C/b/XnBaQwWy4/RA3euAtfABFQQulY=
Subject key identifier: F1:80:42:CE:D1:17:14:F4:3D:2B:59:75:87:E0:A0:0C:32:9D:DF:47
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188C391AF28E1C10181D15CC23CD56A723B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8YBCztEXFPQ9K1l1h-CgDDKd30c.roa
Signing time: Fri 16 Jun 2023 09:38:04 +0000
ROA not before: Fri 16 Jun 2023 09:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
195.133.195.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
212.193.0.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:91:af:28:e1:c1:01:81:d1:5c:c2:3c:d5:6a:72:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 16 09:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f18042ced11714f43d2b597587e0a00c329ddf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:17:b5:3c:54:f3:27:a5:ce:2e:5f:4f:79:52:
7d:f9:65:ba:e4:32:a3:1b:ef:28:77:15:4b:3b:80:
b2:f9:74:0b:7c:ba:47:a1:78:ee:f5:97:6c:f6:a0:
28:2b:a8:58:9b:3c:fb:db:cf:a4:c9:58:12:22:af:
dc:ef:b9:49:28:9e:ab:c0:e8:fd:97:cb:48:5c:15:
30:f5:a9:e9:dc:e5:84:07:e1:d3:b8:09:07:81:e8:
6c:c4:4f:80:50:d8:23:e2:73:6d:5e:37:9e:8b:39:
80:1f:a3:dd:4c:9b:90:99:66:44:0a:01:f1:91:ac:
a6:d4:00:3c:cf:7c:43:7e:f5:6d:5f:05:0e:43:e9:
33:83:80:94:91:71:e7:c4:f7:6c:d6:6d:09:8a:66:
bf:1f:19:3a:b4:0a:da:0e:f2:68:a5:39:28:c4:25:
8b:93:d8:36:51:c2:ac:6c:d3:c1:6b:b4:e5:0d:0b:
01:82:a8:fd:9f:94:ae:7e:60:03:cd:ad:bc:b0:90:
4f:d4:77:61:fa:b8:89:22:39:af:71:00:37:52:ae:
5e:62:b8:4e:85:df:d4:78:7f:fc:f4:73:4f:83:93:
d8:58:4f:b3:6e:ee:97:19:c4:bf:f1:1c:68:c8:8b:
49:7e:18:d3:ff:dd:64:08:f1:2b:ab:77:66:9f:d1:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:80:42:CE:D1:17:14:F4:3D:2B:59:75:87:E0:A0:0C:32:9D:DF:47
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8YBCztEXFPQ9K1l1h-CgDDKd30c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.45.0-194.58.47.255
194.87.27.0/24
194.87.136.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
195.58.56.0/21
195.133.55.0/24
195.133.195.0/24
212.192.0.0/23
212.193.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:bf:88:94:0d:db:e4:54:f8:77:34:28:bc:f0:5b:0a:ea:3d:
62:60:04:9a:92:5d:43:ff:c3:51:6a:3d:ab:71:ad:a8:df:08:
37:ca:6d:1f:51:26:7f:a9:1d:59:ec:4b:6b:5f:37:2c:85:e8:
e9:cd:64:a9:ec:f0:b9:b2:01:1c:0e:dd:a2:5f:97:c6:e5:5a:
74:cd:90:dd:59:e6:7a:9f:37:15:a7:be:1e:f8:54:8f:d0:12:
4f:d2:27:3a:f6:a3:79:d1:b4:fd:e1:81:09:c7:5b:c1:b1:8a:
35:78:95:d7:16:ae:fb:0f:0e:3a:b1:e3:5a:37:9d:b0:24:57:
67:ff:cc:cd:4b:18:f1:2e:60:60:0d:32:95:b0:c9:1e:c3:43:
e7:ed:74:e7:9b:da:14:68:d4:99:b6:07:72:1c:fc:be:10:4f:
ce:ff:f5:d3:e2:1c:45:6d:f1:fd:1f:81:6f:12:b4:da:3e:da:
fb:23:2b:68:16:cf:96:01:44:f2:19:b4:df:ba:61:63:93:a9:
d5:11:82:59:05:0f:54:67:21:9f:df:1c:f8:d4:80:64:a4:ed:
f5:f1:b5:39:2b:48:4a:dd:d4:d1:47:1f:06:a2:f5:36:b9:e4:
1c:70:6d:19:7d:ac:23:ca:be:40:5c:9b:b7:53:91:cf:ed:31:
b0:38:bc:4c
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAYjDka8o4cEBgdFcwjzVanI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNjE2MDkzODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTgwNDJjZWQxMTcxNGY0M2QyYjU5NzU4N2UwYTAwYzMyOWRkZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRe1PFTzJ6XOLl9PeVJ9+WW65DKj
G+8odxVLO4Cy+XQLfLpHoXju9Zds9qAoK6hYmzz728+kyVgSIq/c77lJKJ6rwOj9
l8tIXBUw9anp3OWEB+HTuAkHgehsxE+AUNgj4nNtXjeeizmAH6PdTJuQmWZECgHx
kaym1AA8z3xDfvVtXwUOQ+kzg4CUkXHnxPds1m0Jima/Hxk6tAraDvJopTkoxCWL
k9g2UcKsbNPBa7TlDQsBgqj9n5SufmADza28sJBP1Hdh+riJIjmvcQA3Uq5eYrhO
hd/UeH/89HNPg5PYWE+zbu6XGcS/8RxoyItJfhjT/91kCPErq3dmn9FejwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFPGAQs7RFxT0PStZdYfgoAwynd9HMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvOFlCQ3p0RVhGUFE5SzFsMWgtQ2dEREtkMzBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKMAwDBADCOi0D
BATCOiADBADCVxsDBADCV4gDBADCV8YDBAHCV9ADBAHCV94DBAPDOjgDBADDhTcD
BADDhcMDBAHUwAADBADUwQAwDQYJKoZIhvcNAQELBQADggEBAH6/iJQN2+RU+Hc0
KLzwWwrqPWJgBJqSXUP/w1FqPatxrajfCDfKbR9RJn+pHVnsS2tfNyyF6OnNZKns
8LmyARwO3aJfl8blWnTNkN1Z5nqfNxWnvh74VI/QEk/SJzr2o3nRtP3hgQnHW8Gx
ijV4ldcWrvsPDjqx41o3nbAkV2f/zM1LGPEuYGANMpWwyR7DQ+ftdOeb2hRo1Jm2
B3Ic/L4QT87/9dPiHEVt8f0fgW8StNo+2vsjK2gWz5YBRPIZtN+6YWOTqdURglkF
D1RnIZ/fHPjUgGSk7fXxtTkrSErd1NFHHwai9Ta55BxwbRl9rCPKvkBcm7dTkc/t
MbA4vEw=
-----END CERTIFICATE-----
Generated at Fri Jul 21 09:15:21 2023 by rpki-client on console-ams.rpki-client.org