Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/F2t4j6Ka5uEG-slpeeMrRpUgGnQ.roa
File: F2t4j6Ka5uEG-slpeeMrRpUgGnQ.roa (raw, json)
Hash identifier: 5yChfILF5o/cVP2Swp7OkbUUZx814IHVqcWxz1iWsu8=
Subject key identifier: 17:6B:78:8F:A2:9A:E6:E1:06:FA:C9:69:79:E3:2B:46:95:20:1A:74
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B2891591F2876BA7FA1E3D6ABF5E0D5DB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/F2t4j6Ka5uEG-slpeeMrRpUgGnQ.roa
Signing time: Fri 13 Oct 2023 10:24:56 +0000
ROA not before: Fri 13 Oct 2023 10:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216159
IP address blocks: 194.87.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:91:59:1f:28:76:ba:7f:a1:e3:d6:ab:f5:e0:d5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 13 10:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=176b788fa29ae6e106fac96979e32b4695201a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:22:38:e8:ae:e1:7e:09:0e:a0:54:0e:cf:
c2:ba:73:cc:9a:f2:25:c3:df:92:c9:42:c1:fc:21:
0f:f7:ed:58:73:da:57:5b:b9:aa:1a:fb:04:51:ec:
ba:90:cc:ad:ed:d4:87:43:9c:d9:0c:21:ad:fa:12:
46:91:f2:66:a7:99:f0:32:2d:3b:67:0f:c2:c8:ea:
87:d0:cd:91:5d:86:4b:48:20:17:c0:19:cb:fc:52:
5d:69:36:a5:1b:e8:7e:3b:8a:37:54:5a:df:fe:91:
f1:43:69:32:38:14:ec:06:68:20:47:77:73:63:2e:
54:e2:87:3a:35:05:1a:c2:08:a6:c4:04:07:b9:b8:
b2:9e:34:37:2f:f1:d6:53:c6:92:b1:c5:d2:16:1c:
c3:e3:2e:b8:a5:ec:04:a0:e3:a3:cc:bc:34:89:db:
5f:3f:29:1d:46:e1:96:b1:78:44:e5:61:52:64:26:
63:2d:83:79:ff:39:e8:81:cb:27:23:4b:0f:2b:2e:
76:6c:e3:ff:b0:c4:c3:cc:9a:38:6c:44:24:05:33:
e7:38:db:54:1d:7c:16:2f:5a:ec:20:40:fd:b2:03:
de:43:a3:de:2e:ab:48:a8:aa:a1:d1:1f:dd:b4:5a:
91:01:8a:c1:94:ec:82:6b:aa:bc:8d:e7:7b:04:33:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6B:78:8F:A2:9A:E6:E1:06:FA:C9:69:79:E3:2B:46:95:20:1A:74
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/F2t4j6Ka5uEG-slpeeMrRpUgGnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:29:9f:01:73:8b:56:59:4f:66:bc:02:6c:82:8a:92:47:fa:
ff:82:72:06:15:79:fe:cd:bf:ca:d0:c1:73:46:ef:91:cb:c0:
0d:e6:46:cf:ff:54:a3:91:4f:8c:60:6f:d1:42:05:5a:9b:10:
79:8f:28:bc:cb:db:19:45:9c:f5:25:bf:a8:fa:f7:98:f3:d9:
91:f8:7f:72:17:71:15:2b:12:b9:27:cc:03:35:a0:53:42:d5:
e1:37:19:d8:72:6e:73:10:1b:bf:fc:1c:5d:ee:ce:cb:a0:ce:
9a:f1:5d:17:e3:80:d5:66:0c:76:98:72:23:10:33:d9:e0:3f:
09:7b:b9:25:e2:ef:c3:c6:34:8b:fb:b3:37:c8:f3:15:a0:db:
c7:13:03:8e:5f:64:70:96:c9:bd:96:73:c0:f2:dd:a8:d9:5a:
28:50:ba:96:5d:47:dd:4c:31:b4:77:46:34:2e:a6:fb:60:10:
83:93:d9:cd:e2:3f:f1:4f:a8:97:a5:a8:71:d1:fd:dd:da:37:
83:59:48:e1:62:ea:20:ac:53:c1:86:0b:14:71:11:c6:73:b6:
3b:ef:9a:99:67:54:d1:8e:94:ac:23:e2:a1:8d:bf:df:17:52:
bf:1b:d3:aa:4a:94:93:00:b9:53:db:df:4d:35:ef:b6:62:9c:
b2:e8:de:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsokVkfKHa6f6Hj1qv14NXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMDEzMTAyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzZiNzg4ZmEyOWFlNmUxMDZmYWM5Njk3OWUzMmI0Njk1MjAxYTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt4iOOiu4X4JDqBUDs/CunPMmvIl
w9+SyULB/CEP9+1Yc9pXW7mqGvsEUey6kMyt7dSHQ5zZDCGt+hJGkfJmp5nwMi07
Zw/CyOqH0M2RXYZLSCAXwBnL/FJdaTalG+h+O4o3VFrf/pHxQ2kyOBTsBmggR3dz
Yy5U4oc6NQUawgimxAQHubiynjQ3L/HWU8aSscXSFhzD4y64pewEoOOjzLw0idtf
PykdRuGWsXhE5WFSZCZjLYN5/znogcsnI0sPKy52bOP/sMTDzJo4bEQkBTPnONtU
HXwWL1rsIED9sgPeQ6PeLqtIqKqh0R/dtFqRAYrBlOyCa6q8jed7BDNbewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBdreI+imubhBvrJaXnjK0aVIBp0MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvRjJ0NGo2S2E1dUVHLXNscGVlTXJScFVnR25RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlflMA0G
CSqGSIb3DQEBCwUAA4IBAQALKZ8Bc4tWWU9mvAJsgoqSR/r/gnIGFXn+zb/K0MFz
Ru+Ry8AN5kbP/1SjkU+MYG/RQgVamxB5jyi8y9sZRZz1Jb+o+veY89mR+H9yF3EV
KxK5J8wDNaBTQtXhNxnYcm5zEBu//Bxd7s7LoM6a8V0X44DVZgx2mHIjEDPZ4D8J
e7kl4u/DxjSL+7M3yPMVoNvHEwOOX2Rwlsm9lnPA8t2o2VooULqWXUfdTDG0d0Y0
Lqb7YBCDk9nN4j/xT6iXpahx0f3d2jeDWUjhYuogrFPBhgsUcRHGc7Y775qZZ1TR
jpSsI+Khjb/fF1K/G9OqSpSTALlT299NNe+2Ypyy6N7j
-----END CERTIFICATE-----
Generated at Thu Nov 30 17:48:30 2023 by rpki-client on console-fra.rpki-client.org