Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JDsW_z4B7KugG9WtYfhXwf4aj40.roa
File: JDsW_z4B7KugG9WtYfhXwf4aj40.roa (raw, json)
Hash identifier: upWQRqFgfQpa4N4R00dfK/+mMnFwDlwsRuEtSgK1KYY=
Subject key identifier: 24:3B:16:FF:3E:01:EC:AB:A0:1B:D5:AD:61:F8:57:C1:FE:1A:8F:8D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AABF674ACEBE5842CCAC87BC95EFFAD2C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JDsW_z4B7KugG9WtYfhXwf4aj40.roa
Signing time: Tue 19 Sep 2023 05:42:50 +0000
ROA not before: Tue 19 Sep 2023 05:42:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 212.193.28.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ab:f6:74:ac:eb:e5:84:2c:ca:c8:7b:c9:5e:ff:ad:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 19 05:42:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=243b16ff3e01ecaba01bd5ad61f857c1fe1a8f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:6d:2c:f4:db:9f:70:4a:76:e6:c9:3c:1b:
f2:f4:16:f2:9d:73:6c:ae:d6:5c:47:59:eb:4a:61:
fc:7e:22:f7:c0:95:f5:6b:64:c6:6a:d2:a4:6a:46:
66:c6:77:af:52:99:d0:0f:d2:8e:71:1f:19:20:e0:
6e:5f:2a:8f:2f:02:56:b4:0b:5e:0d:e5:2b:90:c0:
4c:88:1e:16:a9:91:c5:42:e6:b3:43:dd:52:cc:f9:
ad:36:52:f2:61:6e:34:56:c9:ad:6d:ad:e6:30:63:
ed:37:30:a5:df:63:b3:bd:45:e1:a8:1c:a8:02:cd:
2a:f9:31:24:34:84:5c:b0:d9:f7:f1:9d:49:c5:28:
28:95:c7:61:b0:b8:27:d8:0b:44:3b:63:0c:11:d7:
2c:02:86:34:6f:24:d8:2c:7a:74:69:53:63:5c:1e:
e8:aa:8f:c4:fe:a3:cd:67:f2:90:b2:29:93:f5:ee:
0b:eb:aa:fe:12:51:5b:44:e1:84:d9:83:ae:22:46:
ed:4b:bc:35:76:b8:6d:b2:ef:d1:07:73:54:c4:5a:
99:08:01:c6:2d:a0:be:a6:98:aa:fd:ef:8c:b1:d7:
69:35:f8:84:17:5d:e9:bc:89:a4:1c:65:a8:99:ba:
2f:a2:4d:37:9a:79:31:c8:41:32:c2:d2:13:ad:4d:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3B:16:FF:3E:01:EC:AB:A0:1B:D5:AD:61:F8:57:C1:FE:1A:8F:8D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JDsW_z4B7KugG9WtYfhXwf4aj40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.214.0/24
212.193.28.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c0:bb:80:a5:d0:7d:52:83:25:85:45:12:9c:64:b3:d9:c9:
50:c6:bc:4b:52:88:86:6e:22:f5:d7:2f:48:03:7b:f3:d1:88:
85:4c:3b:bd:00:a9:5c:42:d7:10:35:df:23:42:57:42:86:d6:
57:8d:c9:30:7a:a8:84:5b:e0:51:56:4f:da:6c:46:d6:9c:c4:
fa:25:d1:2b:86:13:d7:9f:65:bd:d0:cd:f9:75:46:4b:3e:62:
73:7c:5e:63:11:ec:8a:b5:14:68:04:72:95:cd:91:23:e6:d5:
b9:bf:2c:87:de:da:43:c6:c4:73:c4:5f:af:8a:91:0f:2b:96:
d5:42:6a:c6:cb:ac:53:af:80:e3:8f:ef:36:e6:dd:6b:b9:4e:
e9:c3:6a:4a:53:58:65:3e:7a:c6:67:5d:b6:fc:cf:48:70:a5:
d1:88:87:12:e2:96:43:f9:32:66:a5:b1:dd:89:30:61:f4:1c:
2b:ba:a7:26:99:ce:2d:92:51:85:5c:91:85:1a:f8:f5:cd:5a:
f2:c7:29:24:d4:d3:ac:fb:15:f0:72:70:51:8c:33:84:b8:e4:
2b:14:01:86:87:f2:79:a4:00:aa:2c:bb:d1:f6:e3:63:a2:98:
8f:4e:c2:18:d6:57:b0:36:cc:32:87:ba:5a:d9:3b:44:40:93:
7e:b1:c7:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqr9nSs6+WELMrIe8le/60sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwOTE5MDU0MjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDNiMTZmZjNlMDFlY2FiYTAxYmQ1YWQ2MWY4NTdjMWZlMWE4ZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXVtLPTbn3BKdubJPBvy9BbynXNs
rtZcR1nrSmH8fiL3wJX1a2TGatKkakZmxnevUpnQD9KOcR8ZIOBuXyqPLwJWtAte
DeUrkMBMiB4WqZHFQuazQ91SzPmtNlLyYW40Vsmtba3mMGPtNzCl32OzvUXhqByo
As0q+TEkNIRcsNn38Z1JxSgolcdhsLgn2AtEO2MMEdcsAoY0byTYLHp0aVNjXB7o
qo/E/qPNZ/KQsimT9e4L66r+ElFbROGE2YOuIkbtS7w1drhtsu/RB3NUxFqZCAHG
LaC+ppiq/e+MsddpNfiEF13pvImkHGWombovok03mnkxyEEywtITrU2OWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCQ7Fv8+AeyroBvVrWH4V8H+Go+NMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSkRzV196NEI3S3VnRzlXdFlmaFh3ZjRhajQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1MDWAwQA
1MEcMA0GCSqGSIb3DQEBCwUAA4IBAQA0wLuApdB9UoMlhUUSnGSz2clQxrxLUoiG
biL11y9IA3vz0YiFTDu9AKlcQtcQNd8jQldChtZXjckweqiEW+BRVk/abEbWnMT6
JdErhhPXn2W90M35dUZLPmJzfF5jEeyKtRRoBHKVzZEj5tW5vyyH3tpDxsRzxF+v
ipEPK5bVQmrGy6xTr4Djj+825t1ruU7pw2pKU1hlPnrGZ122/M9IcKXRiIcS4pZD
+TJmpbHdiTBh9Bwruqcmmc4tklGFXJGFGvj1zVryxykk1NOs+xXwcnBRjDOEuOQr
FAGGh/J5pACqLLvR9uNjopiPTsIY1lewNswyh7pa2TtEQJN+scdA
-----END CERTIFICATE-----
Generated at Wed Sep 27 08:17:38 2023 by rpki-client on console-fra.rpki-client.org