Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Jxg5yrH-_QFeeN00urZYxt8_A0c.roa
File: Jxg5yrH-_QFeeN00urZYxt8_A0c.roa (raw, json)
Hash identifier: T9BtFL1Hvk2wE+f4hNn4pBVsnUI2mAnpRjBNJd0boj8=
Subject key identifier: 27:18:39:CA:B1:FE:FD:01:5E:78:DD:34:BA:B6:58:C6:DF:3F:03:47
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C6C968691E34334CBE97BB5E12BE003D8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Jxg5yrH-_QFeeN00urZYxt8_A0c.roa
Signing time: Fri 15 Dec 2023 08:27:33 +0000
ROA not before: Fri 15 Dec 2023 08:27:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147287
IP address blocks: 195.133.78.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:96:86:91:e3:43:34:cb:e9:7b:b5:e1:2b:e0:03:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 15 08:27:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=271839cab1fefd015e78dd34bab658c6df3f0347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:08:a0:15:ef:d0:17:ad:a7:6c:f0:96:bd:
5c:04:d5:eb:af:6e:79:27:2a:eb:d1:c8:64:2c:d3:
db:71:c3:9d:1c:60:d8:51:a5:41:3e:9c:30:f1:98:
2f:d0:b2:e9:3e:8b:1c:0e:56:51:86:01:b7:fe:9a:
fe:d2:dd:55:66:b5:6e:2b:63:f0:d3:67:0c:40:eb:
af:1d:e8:5f:8f:92:bb:67:6d:e8:43:75:10:0d:dd:
70:4c:14:1b:01:15:09:32:8d:61:2f:e0:39:1a:12:
c1:a7:99:06:38:1d:cc:33:fc:5c:f1:0f:20:a6:ad:
87:9b:fd:1b:84:42:61:05:3f:0d:a7:41:8a:5d:9b:
76:cc:0a:82:7b:27:ac:3b:7d:9b:73:2a:66:2e:4f:
df:85:12:27:12:16:43:ea:7e:a8:0e:24:81:28:f6:
7d:b0:a9:56:ad:3a:d3:aa:16:9e:8d:70:ed:0e:94:
4d:bc:87:26:43:67:8e:3c:3a:24:db:61:c8:52:52:
c0:27:68:89:fe:65:68:ee:3e:4d:12:3e:9e:11:86:
68:bd:50:e9:0a:ca:f8:02:66:fe:e6:99:ad:e7:c7:
91:db:5e:8d:13:c5:0b:cd:3b:99:7a:7c:c0:06:6a:
43:2c:05:b5:a3:ce:63:38:bb:60:7a:9a:6e:f3:ea:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:18:39:CA:B1:FE:FD:01:5E:78:DD:34:BA:B6:58:C6:DF:3F:03:47
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Jxg5yrH-_QFeeN00urZYxt8_A0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.142.0/24
195.133.37.0/24
195.133.78.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f8:31:ec:64:58:e6:10:66:50:68:26:95:79:db:e6:bf:1b:
23:c4:d4:39:12:b9:4d:79:b3:97:86:cf:94:5f:89:99:01:78:
e5:2c:3d:29:b8:9a:6a:16:97:1f:6a:13:13:f3:01:3b:d3:64:
d6:b4:e7:62:0a:69:fd:d1:8a:97:4a:29:98:40:81:1c:e0:fe:
93:fd:53:f8:91:0e:fe:5c:6d:7e:47:d6:a0:61:98:8e:56:39:
94:40:f7:76:d8:ed:ed:20:a6:e9:b6:8e:12:62:fa:bf:b2:f0:
c4:ad:d4:a0:0f:2b:34:24:55:e2:17:68:93:cb:13:98:16:5f:
2b:03:3a:23:4d:d1:35:e9:a1:26:df:76:e1:43:8f:2f:12:b4:
11:e3:5b:0b:f2:a2:ca:15:44:93:ca:4c:33:25:84:b6:24:a7:
26:94:69:46:bc:7b:31:ad:bb:f0:e1:2d:69:1d:af:54:44:b5:
47:dd:d8:4c:f6:2f:8a:e0:c5:2f:fb:35:1d:1b:da:31:e2:80:
12:78:49:ea:e6:b8:44:a2:c9:2d:e7:eb:ee:09:7b:a5:49:53:
92:d8:c6:95:38:a3:88:c0:7c:3b:d8:05:c2:0d:5e:5d:f9:83:
b4:c8:c8:ec:78:65:b9:8f:77:ab:dc:25:bb:cc:bd:ab:cf:ef:
ff:db:14:85
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYxsloaR40M0y+l7teEr4APYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMjE1MDgyNzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzE4MzljYWIxZmVmZDAxNWU3OGRkMzRiYWI2NThjNmRmM2YwMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWAIoBXv0Betp2zwlr1cBNXrr255
Jyrr0chkLNPbccOdHGDYUaVBPpww8Zgv0LLpPoscDlZRhgG3/pr+0t1VZrVuK2Pw
02cMQOuvHehfj5K7Z23oQ3UQDd1wTBQbARUJMo1hL+A5GhLBp5kGOB3MM/xc8Q8g
pq2Hm/0bhEJhBT8Np0GKXZt2zAqCeyesO32bcypmLk/fhRInEhZD6n6oDiSBKPZ9
sKlWrTrTqhaejXDtDpRNvIcmQ2eOPDok22HIUlLAJ2iJ/mVo7j5NEj6eEYZovVDp
Csr4Amb+5pmt58eR216NE8ULzTuZenzABmpDLAW1o85jOLtgeppu8+rnUQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCcYOcqx/v0BXnjdNLq2WMbfPwNHMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSnhnNXlySC1fUUZlZU4wMHVyWll4dDhfQTBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwleOAwQA
w4UlAwQAw4VOMA0GCSqGSIb3DQEBCwUAA4IBAQB5+DHsZFjmEGZQaCaVedvmvxsj
xNQ5ErlNebOXhs+UX4mZAXjlLD0puJpqFpcfahMT8wE702TWtOdiCmn90YqXSimY
QIEc4P6T/VP4kQ7+XG1+R9agYZiOVjmUQPd22O3tIKbpto4SYvq/svDErdSgDys0
JFXiF2iTyxOYFl8rAzojTdE16aEm33bhQ48vErQR41sL8qLKFUSTykwzJYS2JKcm
lGlGvHsxrbvw4S1pHa9URLVH3dhM9i+K4MUv+zUdG9ox4oASeEnq5rhEoskt5+vu
CXulSVOS2MaVOKOIwHw72AXCDV5d+YO0yMjseGW5j3er3CW7zL2rz+//2xSF
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:20 2024 by rpki-client on console-fra.rpki-client.org