Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9ZZ_f7ZcsfB5f9058e7eyZGW9oE.roa
File: 9ZZ_f7ZcsfB5f9058e7eyZGW9oE.roa (raw, json)
Hash identifier: os9/uHGTqLWNOhCYQ0Lb8ZOyamKqXaWdscoHZCMq/OE=
Subject key identifier: F5:96:7F:7F:B6:5C:B1:F0:79:7F:DD:39:F1:EE:DE:C9:91:96:F6:81
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01892B9C81199139198A0490B0E9CB66AA04
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9ZZ_f7ZcsfB5f9058e7eyZGW9oE.roa
Signing time: Thu 06 Jul 2023 14:30:24 +0000
ROA not before: Thu 06 Jul 2023 14:30:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203394
IP address blocks: 195.133.74.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Nov 2023 08:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:9c:81:19:91:39:19:8a:04:90:b0:e9:cb:66:aa:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 6 14:30:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5967f7fb65cb1f0797fdd39f1eedec99196f681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:7c:f5:f3:43:91:d4:18:28:6b:a7:33:ab:
d8:4c:17:1a:8b:ca:97:aa:5c:7a:6a:ca:db:64:b9:
20:e5:c0:8d:dc:ad:b9:55:68:7b:5d:ee:66:dc:43:
3e:53:6f:0f:6c:85:39:df:89:1d:72:b1:b0:bb:c0:
b5:d8:da:23:10:5c:13:5c:d3:cf:1f:f3:17:a4:8c:
17:f5:62:23:75:f8:7e:35:20:b3:8e:06:c0:82:1e:
63:5e:ab:58:13:be:46:cf:92:02:4c:2b:a4:d0:2e:
93:e8:e6:92:55:9c:c8:23:4b:8c:f7:c0:54:5f:13:
68:40:d8:c2:0e:ad:8b:50:c8:a9:a4:64:db:08:5d:
35:6d:3f:05:55:35:df:6d:8d:f3:ac:06:71:e6:a4:
d8:5f:e6:5e:de:d1:a2:4c:08:dd:43:fe:fa:96:19:
98:b1:28:51:33:b4:0a:08:6f:87:63:af:06:eb:59:
33:41:d3:6f:60:a5:b6:74:af:d9:7a:8d:3d:0a:89:
55:47:b5:11:b3:5d:18:fe:b9:d2:a4:c1:d2:37:7e:
31:69:42:c0:79:e3:81:8b:93:1a:f6:51:1d:3e:82:
d1:f8:98:4e:39:54:a2:00:37:2a:97:1d:e0:e1:86:
c4:c8:41:13:7d:80:d8:a4:9b:32:29:cb:6a:58:b2:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:96:7F:7F:B6:5C:B1:F0:79:7F:DD:39:F1:EE:DE:C9:91:96:F6:81
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9ZZ_f7ZcsfB5f9058e7eyZGW9oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.74.0/24
212.193.11.0/24
Signature Algorithm: sha256WithRSAEncryption
46:99:63:b1:63:57:df:66:d1:45:ab:7c:40:93:e9:3e:83:94:
8a:6e:27:01:42:2a:22:79:e5:1f:3a:57:bc:ac:4d:eb:91:12:
a9:b2:6e:fb:d8:a3:3d:6b:6c:19:ac:62:0f:b3:df:14:3c:bc:
4c:d0:79:a2:96:a3:d9:bb:39:f9:35:b7:51:b6:58:aa:33:35:
31:ea:53:c3:de:51:52:12:b8:84:ab:0d:8c:22:97:00:d9:50:
1c:e1:e2:81:45:cd:58:b2:fd:4c:87:95:50:36:6b:64:9c:46:
b0:e6:a2:86:70:fe:86:5e:f9:b0:02:85:fc:0a:0f:fc:27:6c:
95:4a:90:2c:ac:ec:bd:6e:5c:62:09:43:ba:f8:d5:3a:3c:c6:
de:33:11:a0:61:32:64:4f:76:fa:17:f1:7f:9d:c1:1a:7e:e0:
7c:2c:e8:b8:a4:54:5e:d5:b1:2f:8c:8a:e9:2d:95:44:c1:c1:
52:a0:c7:9c:cc:39:48:93:88:4f:56:14:77:3d:08:a9:78:3d:
4d:a0:9c:a4:71:43:07:72:a1:70:8e:46:06:7c:00:e9:08:20:
60:73:49:a4:8f:4b:c1:11:3e:c3:d7:15:54:6c:27:1f:75:16:
5e:1a:94:a5:01:a3:91:e5:8b:40:04:3f:2f:5d:a3:1d:50:ce:
6f:e4:1d:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkrnIEZkTkZigSQsOnLZqoEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNzA2MTQzMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTk2N2Y3ZmI2NWNiMWYwNzk3ZmRkMzlmMWVlZGVjOTkxOTZmNjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt189fNDkdQYKGunM6vYTBcai8qX
qlx6asrbZLkg5cCN3K25VWh7Xe5m3EM+U28PbIU534kdcrGwu8C12NojEFwTXNPP
H/MXpIwX9WIjdfh+NSCzjgbAgh5jXqtYE75Gz5ICTCuk0C6T6OaSVZzII0uM98BU
XxNoQNjCDq2LUMippGTbCF01bT8FVTXfbY3zrAZx5qTYX+Ze3tGiTAjdQ/76lhmY
sShRM7QKCG+HY68G61kzQdNvYKW2dK/Zeo09ColVR7URs10Y/rnSpMHSN34xaULA
eeOBi5Ma9lEdPoLR+JhOOVSiADcqlx3g4YbEyEETfYDYpJsyKctqWLLAgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPWWf3+2XLHweX/dOfHu3smRlvaBMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvOVpaX2Y3WmNzZkI1ZjkwNThlN2V5WkdXOW9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw4VKAwQA
1MELMA0GCSqGSIb3DQEBCwUAA4IBAQBGmWOxY1ffZtFFq3xAk+k+g5SKbicBQioi
eeUfOle8rE3rkRKpsm772KM9a2wZrGIPs98UPLxM0HmilqPZuzn5NbdRtliqMzUx
6lPD3lFSEriEqw2MIpcA2VAc4eKBRc1Ysv1Mh5VQNmtknEaw5qKGcP6GXvmwAoX8
Cg/8J2yVSpAsrOy9blxiCUO6+NU6PMbeMxGgYTJkT3b6F/F/ncEafuB8LOi4pFRe
1bEvjIrpLZVEwcFSoMeczDlIk4hPVhR3PQipeD1NoJykcUMHcqFwjkYGfADpCCBg
c0mkj0vBET7D1xVUbCcfdRZeGpSlAaOR5YtABD8vXaMdUM5v5B2q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:07 2024 by rpki-client on console-fra.rpki-client.org