Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CX5zCNTQgkMKIakOVnulsiWPis4.roa
File: CX5zCNTQgkMKIakOVnulsiWPis4.roa (raw, json)
Hash identifier: kcWpdz2qrGQxLUU4KzCSoezxBEmvb2sZbwuh97PpMT8=
Subject key identifier: 09:7E:73:08:D4:D0:82:43:0A:21:A9:0E:56:7B:A5:B2:25:8F:8A:CE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188B9DC030D4FBFA101037E8BB80DDD3055
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CX5zCNTQgkMKIakOVnulsiWPis4.roa
Signing time: Wed 14 Jun 2023 12:23:03 +0000
ROA not before: Wed 14 Jun 2023 12:23:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49316
IP address blocks: 194.87.30.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:dc:03:0d:4f:bf:a1:01:03:7e:8b:b8:0d:dd:30:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 14 12:23:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=097e7308d4d082430a21a90e567ba5b2258f8ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:98:4c:9b:59:91:f5:b0:24:5f:d5:2f:e1:
95:2f:17:84:0d:80:91:ff:fe:b7:22:fd:4c:0a:9e:
f1:03:cb:9f:97:cf:de:8d:68:8b:65:e7:50:ef:72:
1a:42:0f:e1:00:ff:4c:b5:aa:2f:fd:33:68:81:4d:
56:7d:43:07:b6:25:24:d6:c6:6a:b5:95:e7:99:3f:
83:6c:51:01:30:f2:53:51:7e:fd:8b:22:e8:91:77:
26:a9:1f:c9:79:53:5f:1b:58:78:8c:53:06:38:f1:
c8:8a:41:40:98:80:d4:de:56:91:17:a9:65:60:41:
2f:6a:47:47:7a:78:19:72:37:62:d6:68:31:d4:0a:
33:0b:1b:60:d9:dc:4c:90:2f:ae:5d:be:d5:2e:50:
cf:b7:8d:1f:f5:46:bf:cc:d0:1b:7c:ae:a1:14:39:
47:fa:d8:e0:94:de:4c:bf:5e:43:d3:e3:ce:c9:d6:
c5:f3:c2:67:ed:8a:49:8d:65:36:52:d5:86:a0:01:
72:64:40:cf:0a:cc:06:1c:1e:e8:a0:7d:be:33:db:
b0:20:83:85:80:b5:9e:a5:4f:2d:81:4d:5f:10:fd:
06:c2:5a:fb:7c:7c:06:20:4f:55:80:a2:4d:41:93:
af:e8:ee:45:cd:af:75:81:c6:a4:4f:f3:5f:a6:9b:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7E:73:08:D4:D0:82:43:0A:21:A9:0E:56:7B:A5:B2:25:8F:8A:CE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CX5zCNTQgkMKIakOVnulsiWPis4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.30.0/24
212.192.7.0/24
Signature Algorithm: sha256WithRSAEncryption
01:81:dd:04:fb:fb:f4:48:e1:4e:ae:89:05:a0:a0:f9:b6:49:
b0:d6:44:af:8f:88:45:75:3e:99:86:9c:7e:23:48:1f:f3:ab:
27:e3:8d:7b:41:37:79:5a:ea:86:66:fb:31:d2:47:99:a9:e6:
46:0b:ad:15:ef:56:a5:d5:11:59:dc:73:f2:32:00:4a:47:2c:
2c:c1:23:c4:d0:2d:12:3e:6f:31:85:64:8d:9d:f2:96:93:4b:
14:9c:21:c0:90:03:55:ea:f8:61:08:66:13:9d:e6:6a:bd:a7:
0c:05:96:5e:f2:b3:bc:16:7d:61:eb:a6:e3:4d:fc:06:35:3e:
ee:e2:f0:d1:82:3c:75:ba:ac:15:71:81:79:99:bf:40:74:ee:
c2:b0:e7:0a:61:ef:37:e1:10:7d:80:1e:77:68:61:5e:e4:43:
03:a0:23:1a:71:b0:76:21:e0:f1:6c:7c:5f:8e:fd:3c:5b:c1:
c5:25:fc:72:67:e2:cd:03:de:6f:63:d4:83:e1:a5:ef:a6:59:
e5:ee:e6:80:87:b8:7a:89:f3:e4:7c:0b:c6:d2:74:75:e6:be:
12:d8:19:32:d4:99:c3:14:e1:56:bb:cf:66:97:62:88:3d:83:
0e:3a:16:42:54:18:52:a1:6d:ae:05:4c:7f:11:8b:78:05:9c:
6b:56:9f:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYi53AMNT7+hAQN+i7gN3TBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNjE0MTIyMzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTdlNzMwOGQ0ZDA4MjQzMGEyMWE5MGU1NjdiYTViMjI1OGY4YWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwheYTJtZkfWwJF/VL+GVLxeEDYCR
//63Iv1MCp7xA8ufl8/ejWiLZedQ73IaQg/hAP9Mtaov/TNogU1WfUMHtiUk1sZq
tZXnmT+DbFEBMPJTUX79iyLokXcmqR/JeVNfG1h4jFMGOPHIikFAmIDU3laRF6ll
YEEvakdHengZcjdi1mgx1AozCxtg2dxMkC+uXb7VLlDPt40f9Ua/zNAbfK6hFDlH
+tjglN5Mv15D0+POydbF88Jn7YpJjWU2UtWGoAFyZEDPCswGHB7ooH2+M9uwIIOF
gLWepU8tgU1fEP0Gwlr7fHwGIE9VgKJNQZOv6O5Fza91gcakT/NfppsjDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAl+cwjU0IJDCiGpDlZ7pbIlj4rOMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvQ1g1ekNOVFFna01LSWFrT1ZudWxzaVdQaXM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwlceAwQA
1MAHMA0GCSqGSIb3DQEBCwUAA4IBAQABgd0E+/v0SOFOrokFoKD5tkmw1kSvj4hF
dT6Zhpx+I0gf86sn4417QTd5WuqGZvsx0keZqeZGC60V71al1RFZ3HPyMgBKRyws
wSPE0C0SPm8xhWSNnfKWk0sUnCHAkANV6vhhCGYTneZqvacMBZZe8rO8Fn1h66bj
TfwGNT7u4vDRgjx1uqwVcYF5mb9AdO7CsOcKYe834RB9gB53aGFe5EMDoCMacbB2
IeDxbHxfjv08W8HFJfxyZ+LNA95vY9SD4aXvplnl7uaAh7h6ifPkfAvG0nR15r4S
2Bky1JnDFOFWu89ml2KIPYMOOhZCVBhSoW2uBUx/EYt4BZxrVp98
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:52 2023 by rpki-client on console-ams.rpki-client.org