Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Iw8HGZq9FFUs3eY6EipgjdrNKXA.roa
File: Iw8HGZq9FFUs3eY6EipgjdrNKXA.roa (raw, json)
Hash identifier: HYcoBHGfPVV/6/ARCZJ/afZ0n6uwUkLzUI2thUw1kMI=
Subject key identifier: 23:0F:07:19:9A:BD:14:55:2C:DD:E6:3A:12:2A:60:8D:DA:CD:29:70
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AB7CD924A63D795FB78B4C96EFC3CA79C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Iw8HGZq9FFUs3eY6EipgjdrNKXA.roa
Signing time: Thu 21 Sep 2023 12:53:37 +0000
ROA not before: Thu 21 Sep 2023 12:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
212.192.0.0/23 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
212.193.0.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:cd:92:4a:63:d7:95:fb:78:b4:c9:6e:fc:3c:a7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 21 12:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=230f07199abd14552cdde63a122a608ddacd2970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:e3:cd:75:42:11:29:10:ef:ce:77:83:21:
b0:a7:74:69:8e:c0:72:f9:6b:21:19:71:97:d8:51:
e8:01:6d:36:99:f6:92:6e:ad:7f:fa:62:51:da:5c:
57:d0:44:bb:cd:57:17:ed:81:b1:1d:97:5f:5b:2e:
e2:f7:d0:7b:71:5f:7f:23:83:13:88:f0:93:5f:5f:
87:39:2d:55:3a:e8:0b:07:b5:30:bc:55:fc:46:b9:
ea:bc:c1:b2:42:47:57:d1:fd:35:c6:d9:f7:03:cb:
48:97:04:a0:f5:35:c2:a3:82:b3:b5:39:55:22:f4:
8a:20:6b:11:02:89:aa:46:b4:aa:37:33:2f:2f:cc:
c9:5d:7e:05:44:2e:21:57:dd:12:c9:58:b8:be:4a:
48:2b:8e:14:71:47:f7:4f:71:b8:d6:54:f9:c3:56:
fa:1e:33:40:61:a6:93:44:8d:f7:25:2d:9d:f7:d7:
40:64:6b:9a:d0:35:3a:0e:a8:b5:1b:47:24:fd:15:
b5:52:5c:34:ca:fe:24:40:31:67:66:f0:56:b8:73:
9e:1f:41:14:8d:39:ec:99:c4:b2:82:06:de:68:11:
3e:18:9b:21:54:a3:9a:a6:d9:2a:8b:57:c1:76:77:
30:c0:ec:35:c0:2b:02:ee:33:ae:33:40:aa:36:93:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0F:07:19:9A:BD:14:55:2C:DD:E6:3A:12:2A:60:8D:DA:CD:29:70
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Iw8HGZq9FFUs3eY6EipgjdrNKXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.45.0-194.58.47.255
194.87.208.0/23
194.87.222.0/23
195.58.56.0/21
195.133.55.0/24
212.192.0.0/23
212.193.0.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4c:3c:e7:5b:8e:c6:28:ea:68:b2:c5:d2:fc:95:f8:0b:7a:
08:6b:02:41:5c:cc:6e:c5:e5:28:dc:39:61:93:86:bc:ca:8c:
8a:ac:79:6d:7f:22:96:08:cf:aa:11:e5:74:2e:71:c7:cc:c6:
2d:04:b9:f0:1e:65:31:51:6d:cb:59:da:07:35:f5:90:37:f4:
cd:20:65:83:95:c1:2e:ea:b8:86:8e:9a:2a:27:b4:61:29:25:
c5:9a:ff:1e:f8:10:94:c5:ec:81:23:2e:2d:1f:29:b5:fb:58:
70:9d:63:f9:e2:bf:46:bb:f2:f1:02:71:ed:f6:c5:2d:b9:9f:
59:f5:c5:74:5b:27:27:31:e5:25:0a:58:c2:ea:19:1a:88:23:
72:36:f1:6d:34:7c:0c:f5:d9:ef:b6:78:d4:23:fd:bf:97:e0:
c6:9c:c9:80:f3:5b:cd:ce:a0:c6:bc:47:f6:ee:21:7a:38:df:
ee:71:79:42:81:53:9c:88:9f:56:ec:f1:b9:dc:6b:d1:ae:9b:
dd:b0:eb:8c:ad:e6:c9:15:46:89:74:71:d4:1e:1c:9f:3c:97:
34:e4:a7:4b:1f:48:20:4d:20:67:5d:40:49:38:e6:70:94:89:
bf:d5:42:1d:c1:49:64:ac:34:e9:f2:00:7f:54:ba:69:8e:a2:
85:d5:c3:c1
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYq3zZJKY9eV+3i0yW78PKecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwOTIxMTI1MzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzBmMDcxOTlhYmQxNDU1MmNkZGU2M2ExMjJhNjA4ZGRhY2QyOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ7jzXVCESkQ7853gyGwp3RpjsBy
+WshGXGX2FHoAW02mfaSbq1/+mJR2lxX0ES7zVcX7YGxHZdfWy7i99B7cV9/I4MT
iPCTX1+HOS1VOugLB7UwvFX8RrnqvMGyQkdX0f01xtn3A8tIlwSg9TXCo4KztTlV
IvSKIGsRAomqRrSqNzMvL8zJXX4FRC4hV90SyVi4vkpIK44UcUf3T3G41lT5w1b6
HjNAYaaTRI33JS2d99dAZGua0DU6Dqi1G0ck/RW1Ulw0yv4kQDFnZvBWuHOeH0EU
jTnsmcSyggbeaBE+GJshVKOaptkqi1fBdncwwOw1wCsC7jOuM0CqNpMhLQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFCMPBxmavRRVLN3mOhIqYI3azSlwMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSXc4SEdacTlGRlVzM2VZNkVpcGdqZHJOS1hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBADCOi0D
BATCOiADBAHCV9ADBAHCV94DBAPDOjgDBADDhTcDBAHUwAADBADUwQAwDQYJKoZI
hvcNAQELBQADggEBABhMPOdbjsYo6miyxdL8lfgLeghrAkFczG7F5SjcOWGThrzK
jIqseW1/IpYIz6oR5XQuccfMxi0EufAeZTFRbctZ2gc19ZA39M0gZYOVwS7quIaO
miontGEpJcWa/x74EJTF7IEjLi0fKbX7WHCdY/niv0a78vECce32xS25n1n1xXRb
Jycx5SUKWMLqGRqII3I28W00fAz12e+2eNQj/b+X4MacyYDzW83OoMa8R/buIXo4
3+5xeUKBU5yIn1bs8bnca9Gum92w64yt5skVRol0cdQeHJ88lzTkp0sfSCBNIGdd
QEk45nCUib/VQh3BSWSsNOnyAH9UummOooXVw8E=
-----END CERTIFICATE-----
Generated at Fri Nov 3 05:49:44 2023 by rpki-client on console-ams.rpki-client.org