Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HpvYoGJBRRn5GBky2VgBYAEVD-o.roa
File: HpvYoGJBRRn5GBky2VgBYAEVD-o.roa (raw, json)
Hash identifier: B4/C4WHJtDm9UbYElCB/bjtyV/pYspR62ZOoVXsWAbA=
Subject key identifier: 1E:9B:D8:A0:62:41:45:19:F9:18:19:32:D9:58:01:60:01:15:0F:EA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BD11E2C2CC860CAA057963E8402D8DA8E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HpvYoGJBRRn5GBky2VgBYAEVD-o.roa
Signing time: Wed 15 Nov 2023 03:54:57 +0000
ROA not before: Wed 15 Nov 2023 03:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21769
IP address blocks: 194.87.22.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d1:1e:2c:2c:c8:60:ca:a0:57:96:3e:84:02:d8:da:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 15 03:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e9bd8a062414519f9181932d958016001150fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:d4:3c:aa:28:6e:e5:e9:54:0b:d1:1a:df:
56:83:f1:a0:07:05:0b:4b:41:87:02:44:07:e9:5b:
4f:2f:ac:9a:03:b6:4e:d4:62:50:01:7a:54:c9:4f:
67:cd:f2:f2:97:9b:f2:40:d1:9b:90:70:93:20:1e:
ff:f6:cc:a9:dd:34:97:e4:00:89:30:c1:f9:46:34:
ce:99:10:d3:d5:f8:23:e8:d9:7a:30:ff:74:31:75:
11:ba:fc:aa:ba:74:2c:08:97:1f:19:32:da:f2:00:
67:ce:74:ba:17:fb:6e:b7:a4:2d:e6:c0:75:97:83:
8e:6a:ca:21:9c:52:9d:02:ba:e0:82:36:7b:32:a7:
be:22:6e:80:ea:04:d4:6e:ac:9c:56:88:c4:74:fc:
51:d0:0b:50:c9:25:26:c0:44:4b:8e:e6:6d:a3:ea:
b7:05:4b:02:f8:08:91:44:ee:55:3c:36:75:55:a1:
6b:b3:2a:f6:fa:2f:8b:ab:97:e1:ec:e1:77:be:d2:
ae:e4:32:e5:c9:74:09:c5:4f:e5:ef:3b:3e:bc:db:
41:ce:14:03:6f:14:bc:2b:33:76:65:8e:0e:93:9c:
ff:cb:bb:81:e0:21:75:09:b8:d8:bb:fe:f9:28:78:
c9:70:a1:37:72:81:fb:4d:b5:0e:a1:14:f5:20:04:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9B:D8:A0:62:41:45:19:F9:18:19:32:D9:58:01:60:01:15:0F:EA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HpvYoGJBRRn5GBky2VgBYAEVD-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
193.124.204.0/24
194.87.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:4c:01:46:30:45:91:5b:60:55:a2:90:79:fc:4c:48:a8:d5:
c7:2d:c5:d5:84:7d:e4:f7:01:8d:9d:0d:b0:f5:61:16:0c:a1:
1c:25:8c:37:2a:10:30:71:86:56:2b:99:f8:11:59:0e:4b:24:
ba:9f:5f:15:24:9a:6d:e1:89:36:e3:e9:27:a4:70:93:6d:91:
5c:7c:ae:d1:5a:66:78:ae:8b:c3:66:f6:a1:d1:76:90:34:43:
e3:51:5a:85:4f:0b:d5:02:73:4f:1a:cd:d1:f6:7b:3a:40:b0:
28:de:ab:3b:19:4d:b8:44:2b:1e:dc:ea:89:b2:78:d4:2b:ea:
88:33:d2:2b:b5:2e:a9:7a:14:b9:4f:9b:20:be:b3:34:05:85:
69:f4:0e:82:d9:fe:83:c7:b6:c3:10:52:86:43:46:bb:64:34:
73:78:25:98:af:d2:e8:60:f6:e7:e6:a2:81:04:3a:9d:ad:87:
52:4c:4c:e9:51:43:50:fb:0d:c7:6f:24:84:7a:97:4f:11:d4:
11:ec:cb:ce:91:2f:e1:e8:c3:c5:7d:67:d4:58:6f:3a:4f:12:
0c:e2:b1:f2:0b:f5:d4:cc:be:ab:78:0a:ca:4c:73:90:e9:44:
37:08:55:3b:68:d9:e7:71:9d:c0:e3:83:c1:d1:9c:28:0d:18:
11:5a:85:d0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYvRHiwsyGDKoFeWPoQC2NqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMTE1MDM1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTliZDhhMDYyNDE0NTE5ZjkxODE5MzJkOTU4MDE2MDAxMTUwZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxijUPKoobuXpVAvRGt9Wg/GgBwUL
S0GHAkQH6VtPL6yaA7ZO1GJQAXpUyU9nzfLyl5vyQNGbkHCTIB7/9syp3TSX5ACJ
MMH5RjTOmRDT1fgj6Nl6MP90MXURuvyqunQsCJcfGTLa8gBnznS6F/tut6Qt5sB1
l4OOasohnFKdArrggjZ7Mqe+Im6A6gTUbqycVojEdPxR0AtQySUmwERLjuZto+q3
BUsC+AiRRO5VPDZ1VaFrsyr2+i+Lq5fh7OF3vtKu5DLlyXQJxU/l7zs+vNtBzhQD
bxS8KzN2ZY4Ok5z/y7uB4CF1CbjYu/75KHjJcKE3coH7TbUOoRT1IATXYwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB6b2KBiQUUZ+RgZMtlYAWABFQ/qMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSHB2WW9HSkJSUm41R0JreTJWZ0JZQUVWRC1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwXwvAwQA
wXzMAwQAwlcWMA0GCSqGSIb3DQEBCwUAA4IBAQBuTAFGMEWRW2BVopB5/ExIqNXH
LcXVhH3k9wGNnQ2w9WEWDKEcJYw3KhAwcYZWK5n4EVkOSyS6n18VJJpt4Yk24+kn
pHCTbZFcfK7RWmZ4rovDZvah0XaQNEPjUVqFTwvVAnNPGs3R9ns6QLAo3qs7GU24
RCse3OqJsnjUK+qIM9IrtS6pehS5T5sgvrM0BYVp9A6C2f6Dx7bDEFKGQ0a7ZDRz
eCWYr9LoYPbn5qKBBDqdrYdSTEzpUUNQ+w3HbySEepdPEdQR7MvOkS/h6MPFfWfU
WG86TxIM4rHyC/XUzL6reArKTHOQ6UQ3CFU7aNnncZ3A44PB0ZwoDRgRWoXQ
-----END CERTIFICATE-----
Generated at Mon Nov 27 17:01:02 2023 by rpki-client on console-ams.rpki-client.org