Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DY1tM5VRuuQx7sRmoRUL0ntBiL0.roa
File: DY1tM5VRuuQx7sRmoRUL0ntBiL0.roa (raw, json)
Hash identifier: yPm6y4dQQpZfmZrj0V+QLQ+oSpfbobFyTKv968ySBXE=
Subject key identifier: 0D:8D:6D:33:95:51:BA:E4:31:EE:C4:66:A1:15:0B:D2:7B:41:88:BD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01894AC94B77810B177413D1309D27C51A7D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DY1tM5VRuuQx7sRmoRUL0ntBiL0.roa
Signing time: Wed 12 Jul 2023 15:47:33 +0000
ROA not before: Wed 12 Jul 2023 15:47:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210773
IP address blocks: 194.87.230.0/24 maxlen: 24
212.193.4.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:c9:4b:77:81:0b:17:74:13:d1:30:9d:27:c5:1a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 12 15:47:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d8d6d339551bae431eec466a1150bd27b4188bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ba:ff:91:57:45:f7:90:39:ec:7a:a3:2b:3b:
6d:9b:40:5a:08:5c:08:72:d5:2b:29:e4:e9:de:9e:
b4:5f:d4:86:6c:5b:32:85:da:69:f3:31:3b:4b:2b:
c3:ae:28:b8:76:14:51:60:90:9c:40:f4:38:c1:6c:
97:1f:b5:18:b9:53:bb:f5:04:17:2b:33:fc:cd:11:
e3:0d:f7:05:14:0c:25:7b:4e:63:35:88:d4:5b:b9:
96:9d:3e:86:4d:83:f4:ad:16:98:35:fa:cd:f5:90:
86:79:ee:ce:05:44:22:b0:16:cd:c3:2e:c0:7d:2d:
c6:34:50:2a:a9:c9:6c:2f:3e:61:9e:9c:46:1b:cb:
a9:7b:34:ec:eb:7d:73:f8:26:6d:5f:a4:07:3b:f4:
a7:06:e9:81:6f:4f:fb:50:0e:e3:0b:59:4e:ef:36:
41:80:c1:38:d2:e8:a9:14:cd:72:5b:9f:fa:ce:12:
86:f7:69:9b:0c:fc:b2:3c:27:62:4e:f8:63:89:cf:
04:bf:52:32:78:06:28:28:02:59:6d:31:63:b6:b2:
31:d8:1a:f7:0a:6d:eb:6e:e3:64:05:81:76:a4:9f:
1b:6f:13:84:23:ec:17:9b:04:20:f8:2f:6e:ae:90:
41:c0:0d:c2:11:b0:29:4a:94:48:a8:ce:31:e9:ff:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8D:6D:33:95:51:BA:E4:31:EE:C4:66:A1:15:0B:D2:7B:41:88:BD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DY1tM5VRuuQx7sRmoRUL0ntBiL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.230.0/24
212.193.4.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:22:bc:58:8f:fb:7f:92:e8:18:41:c0:ab:d3:5e:f3:83:4c:
dd:ab:6e:66:25:14:0e:1c:c8:e0:c1:f2:c4:38:e3:9b:f2:57:
e8:55:69:c2:b2:fe:92:f3:0b:ec:fe:55:45:c1:3a:4d:ef:f7:
f9:fd:ec:4d:23:c6:ae:b8:ba:23:cb:a6:96:52:ab:f1:9c:eb:
8b:dd:21:1e:19:47:f9:c7:59:53:9d:39:47:06:ac:3b:03:dd:
fb:c3:98:32:da:ab:43:61:bf:30:ed:e0:d8:64:5d:1d:6a:75:
22:1b:86:04:ad:2e:67:03:06:78:92:2e:71:cd:89:dd:d2:46:
9e:f2:77:2e:eb:10:aa:6b:72:f3:88:45:cd:e1:2e:78:0b:28:
82:ac:4d:3c:34:be:9f:9d:fa:70:e3:08:ed:4e:4b:fd:72:c2:
01:cc:08:af:ad:0a:f2:8f:47:9d:bc:4f:76:b7:0a:96:8b:9f:
55:35:34:4e:29:36:97:00:3f:a0:0e:de:d9:6e:c9:bf:32:da:
81:63:95:70:4a:af:34:34:6d:cb:23:cb:e6:c6:29:f9:47:cf:
f0:a2:b1:03:33:00:ad:e0:b1:d2:2e:50:bd:27:e6:84:43:d2:
b8:28:5b:6f:96:41:05:ee:d7:48:46:f1:3d:27:9e:16:1d:ee:
a2:5d:89:b5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYlKyUt3gQsXdBPRMJ0nxRp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNzEyMTU0NzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDhkNmQzMzk1NTFiYWU0MzFlZWM0NjZhMTE1MGJkMjdiNDE4OGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3br/kVdF95A57HqjKzttm0BaCFwI
ctUrKeTp3p60X9SGbFsyhdpp8zE7SyvDrii4dhRRYJCcQPQ4wWyXH7UYuVO79QQX
KzP8zRHjDfcFFAwle05jNYjUW7mWnT6GTYP0rRaYNfrN9ZCGee7OBUQisBbNwy7A
fS3GNFAqqclsLz5hnpxGG8upezTs631z+CZtX6QHO/SnBumBb0/7UA7jC1lO7zZB
gME40uipFM1yW5/6zhKG92mbDPyyPCdiTvhjic8Ev1IyeAYoKAJZbTFjtrIx2Br3
Cm3rbuNkBYF2pJ8bbxOEI+wXmwQg+C9urpBBwA3CEbApSpRIqM4x6f9a8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA2NbTOVUbrkMe7EZqEVC9J7QYi9MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvRFkxdE01VlJ1dVF4N3NSbW9SVUwwbnRCaUwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwlfmAwQB
1MEEMA0GCSqGSIb3DQEBCwUAA4IBAQB/IrxYj/t/kugYQcCr017zg0zdq25mJRQO
HMjgwfLEOOOb8lfoVWnCsv6S8wvs/lVFwTpN7/f5/exNI8auuLojy6aWUqvxnOuL
3SEeGUf5x1lTnTlHBqw7A937w5gy2qtDYb8w7eDYZF0danUiG4YErS5nAwZ4ki5x
zYnd0kae8ncu6xCqa3LziEXN4S54CyiCrE08NL6fnfpw4wjtTkv9csIBzAivrQry
j0edvE92twqWi59VNTROKTaXAD+gDt7Zbsm/MtqBY5VwSq80NG3LI8vmxin5R8/w
orEDMwCt4LHSLlC9J+aEQ9K4KFtvlkEF7tdIRvE9J54WHe6iXYm1
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:58 2023 by rpki-client on console-fra.rpki-client.org