Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CkS3eJCaGvY6dgfZ_7G_Zv6uCig.roa
File: CkS3eJCaGvY6dgfZ_7G_Zv6uCig.roa (raw, json)
Hash identifier: I8ra/8mRnhg9Mcg/NHZbfANp2r3/iPJsOhRa26xGe/8=
Subject key identifier: 0A:44:B7:78:90:9A:1A:F6:3A:76:07:D9:FF:B1:BF:66:FE:AE:0A:28
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A6AF23B645DB46DE50875E386F07D0D55
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CkS3eJCaGvY6dgfZ_7G_Zv6uCig.roa
Signing time: Wed 06 Sep 2023 14:42:54 +0000
ROA not before: Wed 06 Sep 2023 14:42:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 212.193.30.0/24 maxlen: 24
195.133.38.0/24 maxlen: 24
194.87.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:f2:3b:64:5d:b4:6d:e5:08:75:e3:86:f0:7d:0d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 6 14:42:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a44b778909a1af63a7607d9ffb1bf66feae0a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:70:71:1a:6b:33:50:72:18:92:c8:fd:73:
ab:b3:10:fd:bd:f2:28:e9:d3:ad:77:ed:9d:56:03:
52:f7:b4:9d:85:0b:b8:85:d8:5c:53:26:d8:ca:32:
86:fa:2b:86:de:e5:8f:eb:01:e9:78:1b:9e:73:88:
cd:7e:dd:4f:90:55:fd:52:29:a3:01:bd:2d:bb:a6:
ad:4a:5e:e3:31:a2:d0:f0:86:20:e9:80:0c:74:39:
35:08:dc:40:0e:2b:2e:05:ec:c2:5f:88:b0:ac:ee:
3d:d9:e9:81:e1:77:2c:bf:92:1a:2c:22:a8:11:3e:
07:b8:f4:cc:55:f1:f7:df:b6:bc:cf:92:35:73:60:
d2:0e:7a:35:78:38:b4:04:d6:2c:be:2a:8f:98:c0:
13:df:78:bb:5e:c8:5a:46:6d:b0:84:bf:d2:4b:d8:
54:55:08:ea:9c:e8:81:f1:cc:5e:6b:19:72:4d:72:
b7:70:02:54:10:d0:75:26:68:27:ff:af:28:d9:9c:
6a:55:0b:50:02:5f:ae:75:b1:25:ca:39:71:56:b2:
48:44:23:d0:1d:74:52:96:76:66:f3:61:c8:2c:2b:
bb:ac:64:d3:9b:48:b9:8f:4d:6f:5c:3e:4d:e4:a4:
4f:8f:d2:c1:02:af:c6:56:c6:3a:84:18:cc:c0:ed:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:44:B7:78:90:9A:1A:F6:3A:76:07:D9:FF:B1:BF:66:FE:AE:0A:28
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CkS3eJCaGvY6dgfZ_7G_Zv6uCig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.87.0/24
195.133.38.0/24
212.193.30.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6e:f5:58:73:e9:21:9d:38:95:ae:c1:d7:fc:0e:8a:ef:d7:
6d:b5:11:65:f0:01:b6:a6:02:8d:6c:75:89:0c:66:ca:89:6d:
f9:22:01:5a:c7:17:01:f7:25:96:62:db:b6:22:2b:bc:4f:ef:
48:a2:7d:21:e4:9c:6f:c9:37:ca:6f:83:e4:c0:a7:db:65:3f:
58:d4:1b:fd:1c:07:a7:1f:85:3c:d0:05:0d:f6:34:12:40:78:
d9:09:ba:ba:a1:f2:17:ab:81:17:ca:4d:83:15:58:5c:3c:2a:
f9:c7:be:ed:9c:4f:a9:25:54:c1:0a:1b:07:24:61:d1:33:2b:
6a:bb:6e:84:d5:16:9a:81:f3:76:35:40:03:71:a4:c4:1d:bb:
66:ea:74:da:19:0c:6b:6d:2f:78:a8:84:24:3f:1d:9c:b4:ca:
bf:9c:11:e7:c4:fc:84:39:55:52:c6:9a:54:fb:40:0a:82:6d:
60:e9:dd:27:bb:06:0c:9a:48:bd:cb:14:9f:4f:6b:6a:c3:74:
f4:8f:6a:f4:03:f7:11:eb:7f:bb:49:1d:dd:8a:26:ce:f1:e0:
18:6e:2f:51:75:ff:6a:b7:bb:31:ac:29:c4:41:fc:99:ba:cd:
7e:9a:e7:92:35:ff:3f:b5:b2:3c:68:e7:a8:47:9e:b9:93:42:
a6:07:a1:02
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYpq8jtkXbRt5Qh144bwfQ1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwOTA2MTQ0MjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTQ0Yjc3ODkwOWExYWY2M2E3NjA3ZDlmZmIxYmY2NmZlYWUwYTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWFwcRprM1ByGJLI/XOrsxD9vfIo
6dOtd+2dVgNS97SdhQu4hdhcUybYyjKG+iuG3uWP6wHpeBuec4jNft1PkFX9Uimj
Ab0tu6atSl7jMaLQ8IYg6YAMdDk1CNxADisuBezCX4iwrO492emB4Xcsv5IaLCKo
ET4HuPTMVfH337a8z5I1c2DSDno1eDi0BNYsviqPmMAT33i7XshaRm2whL/SS9hU
VQjqnOiB8cxeaxlyTXK3cAJUENB1Jmgn/68o2ZxqVQtQAl+udbElyjlxVrJIRCPQ
HXRSlnZm82HILCu7rGTTm0i5j01vXD5N5KRPj9LBAq/GVsY6hBjMwO0BDQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFApEt3iQmhr2OnYH2f+xv2b+rgooMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvQ2tTM2VKQ2FHdlk2ZGdmWl83R19adjZ1Q2lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwldXAwQA
w4UmAwQA1MEeMA0GCSqGSIb3DQEBCwUAA4IBAQBObvVYc+khnTiVrsHX/A6K79dt
tRFl8AG2pgKNbHWJDGbKiW35IgFaxxcB9yWWYtu2Iiu8T+9Ion0h5JxvyTfKb4Pk
wKfbZT9Y1Bv9HAenH4U80AUN9jQSQHjZCbq6ofIXq4EXyk2DFVhcPCr5x77tnE+p
JVTBChsHJGHRMytqu26E1RaagfN2NUADcaTEHbtm6nTaGQxrbS94qIQkPx2ctMq/
nBHnxPyEOVVSxppU+0AKgm1g6d0nuwYMmki9yxSfT2tqw3T0j2r0A/cR63+7SR3d
iibO8eAYbi9Rdf9qt7sxrCnEQfyZus1+mueSNf8/tbI8aOeoR565k0KmB6EC
-----END CERTIFICATE-----
Generated at Fri Oct 6 15:22:22 2023 by rpki-client on console-fra.rpki-client.org