Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B0wbAMcQOYkt-pz6z5otMq7WloA.roa
File: B0wbAMcQOYkt-pz6z5otMq7WloA.roa (raw, json)
Hash identifier: Z7RbDvXy7mJkg0aOsFsOKzXsrSSWq/eTWqSXSfLJKCw=
Subject key identifier: 07:4C:1B:00:C7:10:39:89:2D:FA:9C:FA:CF:9A:2D:32:AE:D6:96:80
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187BCB354E16785549BF551FF643FC03057
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B0wbAMcQOYkt-pz6z5otMq7WloA.roa
Signing time: Wed 26 Apr 2023 08:34:41 +0000
ROA not before: Wed 26 Apr 2023 08:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203639
IP address blocks: 212.193.14.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:b3:54:e1:67:85:54:9b:f5:51:ff:64:3f:c0:30:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 26 08:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=074c1b00c71039892dfa9cfacf9a2d32aed69680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3f:f4:c6:ab:bd:3e:cd:45:0e:94:9a:72:c5:
62:3e:0e:b9:4f:b8:6a:ac:f0:8d:f4:a7:06:11:a4:
74:16:2f:33:6c:e3:63:9c:49:4f:3a:a9:4e:e5:45:
ab:2a:70:e6:c2:40:b6:a6:69:95:a8:9a:62:66:ad:
3c:73:8a:75:81:56:46:1d:c9:67:28:61:57:46:d3:
41:d1:b9:0b:7e:b8:a1:57:0d:c9:d2:ba:c7:87:c9:
2a:db:5d:9c:d6:1e:c7:99:57:0d:f1:99:1c:96:bc:
7c:31:3b:5a:ff:89:08:f0:51:69:7b:73:10:bc:b2:
40:2e:57:b4:c5:e5:9e:2e:1c:a1:6f:5c:f0:4e:9e:
9d:6b:43:74:73:1f:09:81:c1:a6:63:9d:73:02:c1:
71:25:3c:46:7f:eb:af:db:86:03:46:7e:b8:f9:ad:
c9:e1:13:b3:eb:89:d7:6e:7a:84:a0:15:af:37:cb:
73:c1:2f:f7:c1:82:e5:6c:87:a9:7e:ec:86:73:4c:
d9:26:91:20:c0:ba:a8:8c:5e:4a:4d:ed:6e:87:4a:
37:6f:b4:f3:0e:8f:d2:12:03:57:b1:2e:98:2d:41:
bf:c2:77:48:7a:61:d4:21:03:c3:23:ef:50:a6:bb:
ce:05:56:5a:79:e4:c8:46:d1:47:c3:14:71:34:16:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4C:1B:00:C7:10:39:89:2D:FA:9C:FA:CF:9A:2D:32:AE:D6:96:80
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B0wbAMcQOYkt-pz6z5otMq7WloA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.180.0/24
192.124.190.0/24
194.87.76.0/24
194.87.208.0/24
194.87.221.0/24
194.87.226.0/24
194.87.231.0/24
195.133.15.0/24
212.192.4.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:6c:14:59:84:e6:19:9a:2b:3c:15:34:bb:7c:98:58:ae:dc:
c6:6b:98:b1:3e:52:6d:85:43:b9:0c:bf:9c:c5:72:54:72:08:
84:8a:44:e5:56:d3:b0:c3:1b:0f:e3:63:a9:9c:27:85:44:f0:
1c:b2:38:02:24:af:44:97:3e:d0:af:63:5b:2d:32:c9:d7:b2:
f9:6a:4f:80:80:6e:6a:a8:ed:34:bd:2e:f9:b0:38:1e:29:27:
28:d3:77:34:b4:e8:e3:0f:bc:fb:22:73:12:2b:e0:d8:97:a1:
e2:53:55:14:2b:e8:25:cc:37:9f:5d:6a:8e:9a:cf:f2:ed:dc:
b5:6c:1a:26:8b:d2:99:62:2a:ef:8f:a5:b1:1f:e0:9f:43:5c:
32:e2:59:94:41:da:1a:79:3a:8f:a7:a3:63:71:b3:99:8e:dd:
05:24:87:46:41:1b:c9:56:9b:dd:ff:90:4e:28:ba:bc:36:8f:
93:20:a9:59:71:3f:23:34:d0:00:b9:ac:9d:37:bb:2e:41:77:
2f:36:69:c0:bf:b1:1b:bb:b0:fa:9c:c2:36:5b:14:d9:ab:7d:
b5:58:4d:de:2c:9c:8f:af:c8:5c:15:15:75:c3:d8:48:4b:96:
b2:b3:3c:71:a2:ae:5a:50:d9:86:9c:ea:bf:c0:d6:c4:87:0e:
9c:98:b1:e8
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYe8s1ThZ4VUm/VR/2Q/wDBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDI2MDgzNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzRjMWIwMGM3MTAzOTg5MmRmYTljZmFjZjlhMmQzMmFlZDY5NjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j/0xqu9Ps1FDpSacsViPg65T7hq
rPCN9KcGEaR0Fi8zbONjnElPOqlO5UWrKnDmwkC2pmmVqJpiZq08c4p1gVZGHcln
KGFXRtNB0bkLfrihVw3J0rrHh8kq212c1h7HmVcN8Zkclrx8MTta/4kI8FFpe3MQ
vLJALle0xeWeLhyhb1zwTp6da0N0cx8JgcGmY51zAsFxJTxGf+uv24YDRn64+a3J
4ROz64nXbnqEoBWvN8tzwS/3wYLlbIepfuyGc0zZJpEgwLqojF5KTe1uh0o3b7Tz
Do/SEgNXsS6YLUG/wndIemHUIQPDI+9QprvOBVZaeeTIRtFHwxRxNBYu8wIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFAdMGwDHEDmJLfqc+s+aLTKu1paAMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvQjB3YkFNY1FPWWt0LXB6Nno1b3RNcTdXbG9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAwHy0AwQA
wHy+AwQAwldMAwQAwlfQAwQAwlfdAwQAwlfiAwQAwlfnAwQAw4UPAwQA1MAEAwQA
1MEOMA0GCSqGSIb3DQEBCwUAA4IBAQB+bBRZhOYZmis8FTS7fJhYrtzGa5ixPlJt
hUO5DL+cxXJUcgiEikTlVtOwwxsP42OpnCeFRPAcsjgCJK9Elz7Qr2NbLTLJ17L5
ak+AgG5qqO00vS75sDgeKSco03c0tOjjD7z7InMSK+DYl6HiU1UUK+glzDefXWqO
ms/y7dy1bBomi9KZYirvj6WxH+CfQ1wy4lmUQdoaeTqPp6NjcbOZjt0FJIdGQRvJ
Vpvd/5BOKLq8No+TIKlZcT8jNNAAuaydN7suQXcvNmnAv7Ebu7D6nMI2WxTZq321
WE3eLJyPr8hcFRV1w9hIS5ayszxxoq5aUNmGnOq/wNbEhw6cmLHo
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:57 2023 by rpki-client on console-fra.rpki-client.org