Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EShvq47yE1oJiBW9h4DIuT5qK28.roa
File: EShvq47yE1oJiBW9h4DIuT5qK28.roa (raw, json)
Hash identifier: F4Gk28hPZQkzSWvA6pyVF+hyFaKWe/+1iU16ZiDhfXo=
Subject key identifier: 11:28:6F:AB:8E:F2:13:5A:09:88:15:BD:87:80:C8:B9:3E:6A:2B:6F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187523B5C27D8F3C3D23C1CEAC30857CD0E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EShvq47yE1oJiBW9h4DIuT5qK28.roa
Signing time: Wed 05 Apr 2023 16:23:54 +0000
ROA not before: Wed 05 Apr 2023 16:23:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212871
IP address blocks: 193.124.49.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:3b:5c:27:d8:f3:c3:d2:3c:1c:ea:c3:08:57:cd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 5 16:23:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11286fab8ef2135a098815bd8780c8b93e6a2b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:5c:d9:7d:81:53:7c:cf:76:3c:c7:13:82:
fc:ae:d6:a4:f2:b4:30:e8:a9:08:66:e9:d6:1c:2b:
e4:bb:2c:21:c0:64:d0:66:40:1d:5c:10:d0:23:ba:
31:5f:fd:f6:9d:e1:a5:46:5f:3c:8f:19:77:4c:9c:
63:5b:44:5f:bb:14:ca:03:cd:12:85:f2:a8:61:58:
f0:20:ab:38:76:65:c1:96:9e:f1:c8:df:0a:f2:84:
02:7e:aa:1b:a3:e2:71:a0:49:fe:76:e5:7d:73:e0:
b8:85:ac:dd:60:1a:83:2a:76:cd:40:b0:56:5e:c8:
d0:7d:44:31:55:86:0e:f1:a6:00:51:b9:1e:c7:03:
cb:92:79:72:02:27:a7:eb:4e:8c:f9:28:26:bc:ae:
78:79:11:aa:30:9f:d0:35:42:2c:11:96:25:6d:0d:
a6:59:10:77:e5:8c:ff:bb:a3:a5:35:19:19:00:c4:
e6:b8:54:3d:a9:e3:0b:ba:ec:82:aa:2b:ef:f0:cd:
00:d9:fd:51:d7:98:b3:ae:29:45:d5:85:44:5f:ce:
61:df:8f:cd:b8:b1:3c:03:a5:00:0b:81:84:bc:ac:
71:f4:33:4a:a4:17:a2:59:8f:30:05:bf:cf:8a:70:
d8:c8:66:09:20:52:4e:41:fd:b5:dc:99:f9:9e:69:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:28:6F:AB:8E:F2:13:5A:09:88:15:BD:87:80:C8:B9:3E:6A:2B:6F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EShvq47yE1oJiBW9h4DIuT5qK28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.49.0/24
194.135.46.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f0:c8:2c:31:bd:13:c5:8f:b5:f5:36:27:f1:95:91:7d:e8:
28:fa:bb:2e:5d:af:15:b6:0f:e6:0c:2d:32:b5:5a:1d:f5:37:
ea:bf:50:24:e5:55:b3:d9:6c:7c:f2:6f:73:1f:6b:de:ee:59:
76:40:90:9c:47:b3:8c:53:b3:8d:fb:8d:dd:04:39:f9:41:f4:
12:fa:e7:27:3b:61:dd:51:e1:7c:91:6b:4e:c7:52:0b:08:4c:
c1:7e:2b:3f:8d:4f:b7:df:70:ca:93:38:0e:50:9f:f4:c5:cf:
b6:2b:40:3c:9f:2e:1e:ba:6c:29:3e:2c:7d:15:cb:dd:5c:90:
57:89:1e:e7:fd:d8:f9:49:53:8d:1a:54:93:59:2e:80:fa:82:
45:2c:47:9d:ab:eb:6e:02:1a:a9:d9:ac:ad:06:74:bd:ca:7c:
01:c2:ed:81:a5:79:53:4f:e4:ef:8b:cd:92:c6:78:07:d9:c1:
70:30:c6:92:55:74:91:15:77:45:1c:15:a6:6b:3f:02:16:03:
a0:08:62:42:7d:b5:4e:00:f3:11:4a:b9:50:a1:aa:d5:25:c5:
ca:60:15:32:29:83:00:1e:07:2b:9d:8f:27:f5:3d:f4:bb:72:
4e:77:39:9d:c3:9f:95:ff:ca:5e:1b:6f:c2:e4:30:d1:a2:02:
d0:a1:35:a2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdSO1wn2PPD0jwc6sMIV80OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDA1MTYyMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTI4NmZhYjhlZjIxMzVhMDk4ODE1YmQ4NzgwYzhiOTNlNmEyYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VRc2X2BU3zPdjzHE4L8rtak8rQw
6KkIZunWHCvkuywhwGTQZkAdXBDQI7oxX/32neGlRl88jxl3TJxjW0RfuxTKA80S
hfKoYVjwIKs4dmXBlp7xyN8K8oQCfqobo+JxoEn+duV9c+C4hazdYBqDKnbNQLBW
XsjQfUQxVYYO8aYAUbkexwPLknlyAien606M+SgmvK54eRGqMJ/QNUIsEZYlbQ2m
WRB35Yz/u6OlNRkZAMTmuFQ9qeMLuuyCqivv8M0A2f1R15izrilF1YVEX85h34/N
uLE8A6UAC4GEvKxx9DNKpBeiWY8wBb/PinDYyGYJIFJOQf213Jn5nmmnGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBEob6uO8hNaCYgVvYeAyLk+aitvMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvRVNodnE0N3lFMW9KaUJXOWg0REl1VDVxSzI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwXwxAwQA
wocuMA0GCSqGSIb3DQEBCwUAA4IBAQBl8MgsMb0TxY+19TYn8ZWRfego+rsuXa8V
tg/mDC0ytVod9Tfqv1Ak5VWz2Wx88m9zH2ve7ll2QJCcR7OMU7ON+43dBDn5QfQS
+ucnO2HdUeF8kWtOx1ILCEzBfis/jU+333DKkzgOUJ/0xc+2K0A8ny4eumwpPix9
FcvdXJBXiR7n/dj5SVONGlSTWS6A+oJFLEedq+tuAhqp2aytBnS9ynwBwu2BpXlT
T+Tvi82SxngH2cFwMMaSVXSRFXdFHBWmaz8CFgOgCGJCfbVOAPMRSrlQoarVJcXK
YBUyKYMAHgcrnY8n9T30u3JOdzmdw5+V/8peG2/C5DDRogLQoTWi
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org