Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B-wdtE5vhrMubvMbRWiDsWAVom0.roa
File: B-wdtE5vhrMubvMbRWiDsWAVom0.roa (raw, json)
Hash identifier: y/7GtHK+ZDN3Et1t4vhwfEplvUmH/aeX4UKogYhtxgU=
Subject key identifier: 07:EC:1D:B4:4E:6F:86:B3:2E:6E:F3:1B:45:68:83:B1:60:15:A2:6D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F670CF05368087AF90E247D6013093E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B-wdtE5vhrMubvMbRWiDsWAVom0.roa
Signing time: Sun 01 Jan 2023 22:15:02 +0000
ROA not before: Sun 01 Jan 2023 22:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208685
IP address blocks: 194.87.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:0c:f0:53:68:08:7a:f9:0e:24:7d:60:13:09:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07ec1db44e6f86b32e6ef31b456883b16015a26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2c:e4:38:cd:bf:18:9c:0b:d7:35:cd:f5:db:
fa:96:85:39:a3:32:3a:b9:a3:4f:32:86:58:1f:30:
d2:ed:bc:cd:93:dd:2e:e7:dd:14:f0:e0:93:10:2f:
0b:e3:46:e8:5e:ce:fd:6c:a0:59:d1:77:83:f3:be:
e8:dc:3c:b7:28:50:16:79:09:75:48:72:15:13:dd:
12:61:7b:57:4f:d1:5b:a7:b2:0b:e2:a3:ad:7e:37:
05:85:48:75:c0:43:7f:b3:2d:ce:85:b2:ea:d5:aa:
59:03:e5:c9:fb:99:fc:92:a7:f2:e7:64:c1:f9:87:
92:75:2f:e9:7d:63:ba:36:7c:be:84:1e:d8:40:af:
86:67:79:56:49:9c:d2:e9:49:c6:67:26:34:36:db:
b9:bc:a4:43:1b:c9:aa:8c:f3:b4:84:d7:60:ca:af:
ea:46:ce:7a:56:c1:68:8d:84:ec:c1:ac:05:f9:85:
a7:50:f7:c6:a4:ae:3b:cd:88:19:60:ca:a0:60:39:
29:bb:45:ff:dc:6f:d9:ba:09:60:02:36:9e:e7:f0:
55:d6:d4:e1:65:9e:cd:42:31:fd:ee:87:d9:95:11:
99:5d:5b:c5:e4:87:51:0d:73:de:bc:0e:38:c7:c2:
98:96:fc:42:ab:5a:10:33:21:c6:7f:f7:3e:fa:c2:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EC:1D:B4:4E:6F:86:B3:2E:6E:F3:1B:45:68:83:B1:60:15:A2:6D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B-wdtE5vhrMubvMbRWiDsWAVom0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.201.0/24
Signature Algorithm: sha256WithRSAEncryption
81:35:0d:f6:8d:41:5a:21:fe:21:76:4b:d8:02:bc:dc:14:74:
af:45:5a:fa:7d:1b:8d:07:66:77:0c:52:b0:cb:e1:87:7a:01:
f1:81:b9:3b:f7:f2:b2:cb:60:d9:ed:98:93:a8:cc:cc:01:a9:
43:f8:08:c4:3d:43:95:db:5a:b5:e9:09:9c:2c:ff:9b:f2:99:
4f:41:db:ee:ce:97:d7:0f:33:39:d3:cb:83:24:6c:d6:d7:79:
1d:eb:d7:97:d2:0f:16:10:f2:78:e1:a5:40:17:00:83:43:2a:
56:ac:c1:37:ce:fe:7c:58:9d:90:d6:58:38:50:44:eb:06:15:
ea:96:de:bb:b3:bd:f3:83:76:91:29:c0:b4:23:46:ce:04:76:
a3:0e:9a:81:2f:f2:05:e7:34:b3:13:25:86:d8:bf:fe:6c:07:
46:a9:9d:ba:98:04:6a:43:d2:4e:f6:30:dc:f9:81:2b:01:a7:
d0:15:e0:93:ea:d9:ae:06:6e:41:c1:28:e5:bd:98:75:e4:0e:
32:81:05:17:90:ad:c5:7c:95:f1:55:f0:93:71:7b:a2:25:e7:
4e:d0:8b:de:27:bb:05:be:e0:07:ac:5b:7c:e6:bf:f0:22:1f:
3b:40:a7:cf:1b:a3:d0:d5:03:11:d7:0f:9f:16:fe:72:00:96:
95:d9:d3:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvZwzwU2gIevkOJH1gEwk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTAxMjIxNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2VjMWRiNDRlNmY4NmIzMmU2ZWYzMWI0NTY4ODNiMTYwMTVhMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyzkOM2/GJwL1zXN9dv6loU5ozI6
uaNPMoZYHzDS7bzNk90u590U8OCTEC8L40boXs79bKBZ0XeD877o3Dy3KFAWeQl1
SHIVE90SYXtXT9Fbp7IL4qOtfjcFhUh1wEN/sy3OhbLq1apZA+XJ+5n8kqfy52TB
+YeSdS/pfWO6Nny+hB7YQK+GZ3lWSZzS6UnGZyY0Ntu5vKRDG8mqjPO0hNdgyq/q
Rs56VsFojYTswawF+YWnUPfGpK47zYgZYMqgYDkpu0X/3G/ZuglgAjae5/BV1tTh
ZZ7NQjH97ofZlRGZXVvF5IdRDXPevA44x8KYlvxCq1oQMyHGf/c++sKjMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAfsHbROb4azLm7zG0Vog7FgFaJtMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvQi13ZHRFNXZock11YnZNYlJXaURzV0FWb20wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlfJMA0G
CSqGSIb3DQEBCwUAA4IBAQCBNQ32jUFaIf4hdkvYArzcFHSvRVr6fRuNB2Z3DFKw
y+GHegHxgbk79/Kyy2DZ7ZiTqMzMAalD+AjEPUOV21q16QmcLP+b8plPQdvuzpfX
DzM508uDJGzW13kd69eX0g8WEPJ44aVAFwCDQypWrME3zv58WJ2Q1lg4UETrBhXq
lt67s73zg3aRKcC0I0bOBHajDpqBL/IF5zSzEyWG2L/+bAdGqZ26mARqQ9JO9jDc
+YErAafQFeCT6tmuBm5BwSjlvZh15A4ygQUXkK3FfJXxVfCTcXuiJedO0IveJ7sF
vuAHrFt85r/wIh87QKfPG6PQ1QMR1w+fFv5yAJaV2dO8
-----END CERTIFICATE-----
Generated at Tue Nov 14 08:07:33 2023 by rpki-client on console-ams.rpki-client.org