Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/K6ffL_3ssJ1gV9z7583lMqWobSY.roa
File: K6ffL_3ssJ1gV9z7583lMqWobSY.roa (raw, json)
Hash identifier: dunGtuVGrCp6e49MUqNaedkO58ixZa7a7hdLHGp4/xQ=
Subject key identifier: 2B:A7:DF:2F:FD:EC:B0:9D:60:57:DC:FB:E7:CD:E5:32:A5:A8:6D:26
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188BB3D66EEFC43A97FFD0FF55DDD53204B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/K6ffL_3ssJ1gV9z7583lMqWobSY.roa
Signing time: Wed 14 Jun 2023 18:49:03 +0000
ROA not before: Wed 14 Jun 2023 18:49:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49316
IP address blocks: 194.87.209.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bb:3d:66:ee:fc:43:a9:7f:fd:0f:f5:5d:dd:53:20:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 14 18:49:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ba7df2ffdecb09d6057dcfbe7cde532a5a86d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:7e:b6:8e:7a:7f:b4:c6:0c:27:f7:77:5f:
28:13:4a:e7:48:04:9c:3e:71:ef:63:62:5c:a5:9c:
b2:da:08:b1:51:65:b9:12:ca:c0:e2:dd:9a:45:2d:
47:97:cc:15:03:c3:67:a6:ea:3f:7f:d1:06:a9:aa:
cd:43:33:b6:b2:0c:d3:16:e9:01:41:83:9e:e6:ef:
a2:89:07:b6:7a:29:b7:47:a7:ce:19:ab:55:13:5b:
6f:81:37:67:4f:15:d4:70:a2:30:70:bd:bd:f6:a2:
ba:e5:f0:53:30:4b:aa:24:a1:27:95:5a:cf:c2:c0:
9a:54:cf:e6:b4:4c:55:ca:e8:ff:bd:d1:c3:f7:72:
a1:93:4b:02:67:a8:63:32:a9:6a:19:bb:e8:02:d3:
da:bf:0e:77:95:d7:0d:ba:b9:9a:0d:0d:5b:e0:5c:
8f:80:17:0a:2d:11:a7:93:c6:7d:8f:d0:fc:2e:f4:
f0:10:f8:92:fb:18:e9:bd:ee:4d:9f:84:45:29:1a:
5f:49:fa:8b:26:56:3e:67:98:f3:e1:d5:d4:e3:99:
37:3d:ec:e9:4e:6f:19:20:54:f7:cd:c1:16:45:07:
85:df:22:c1:9a:3e:94:00:23:dc:33:3e:98:21:21:
4f:93:47:20:38:18:05:12:04:07:ed:ca:5b:04:1d:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:DF:2F:FD:EC:B0:9D:60:57:DC:FB:E7:CD:E5:32:A5:A8:6D:26
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/K6ffL_3ssJ1gV9z7583lMqWobSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.30.0/24
194.87.209.0/24
212.192.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:14:47:1d:0a:00:7d:f1:d9:83:34:6e:f0:ee:03:67:21:37:
51:48:28:8f:58:28:d1:10:10:6f:68:4b:20:cb:03:0e:57:b9:
c2:51:40:fa:ce:22:ea:72:b2:9d:1f:32:11:20:5d:de:2c:f7:
1b:f1:a9:02:49:59:94:9d:b8:b5:eb:ea:77:7b:b5:e5:09:37:
03:27:c0:5c:68:84:00:55:82:bd:6b:d1:13:47:d1:e6:c7:90:
ae:29:c4:7c:c9:22:52:a6:bf:d9:69:d5:c0:c0:ab:33:35:13:
0e:04:10:0d:a3:58:a6:5d:c4:8d:7b:85:23:86:93:8c:61:f1:
6a:4b:6c:b4:72:62:66:c5:ad:0f:da:eb:f9:de:b6:6d:8a:e8:
e4:19:f3:9c:77:0a:e4:66:8b:f7:9d:e5:07:d6:64:1f:1c:a8:
c6:00:e3:b9:6e:56:41:eb:4a:e2:27:e8:2d:94:c6:cf:0e:79:
e9:58:bd:20:23:4e:02:29:66:0f:65:fa:96:ca:f2:17:ac:0b:
fd:b0:9a:f7:bc:2b:b3:46:66:6d:ea:b1:a3:e9:ce:e8:e2:16:
87:93:ac:c4:d8:10:55:92:ac:eb:1a:2b:7f:b9:dc:23:15:f3:
95:73:ce:5a:2e:29:b9:a1:a4:0b:48:67:81:54:e9:18:e3:b3:
3f:69:05:36
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYi7PWbu/EOpf/0P9V3dUyBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNjE0MTg0OTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmE3ZGYyZmZkZWNiMDlkNjA1N2RjZmJlN2NkZTUzMmE1YTg2ZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NJ+to56f7TGDCf3d18oE0rnSASc
PnHvY2JcpZyy2gixUWW5EsrA4t2aRS1Hl8wVA8Nnpuo/f9EGqarNQzO2sgzTFukB
QYOe5u+iiQe2eim3R6fOGatVE1tvgTdnTxXUcKIwcL299qK65fBTMEuqJKEnlVrP
wsCaVM/mtExVyuj/vdHD93Khk0sCZ6hjMqlqGbvoAtPavw53ldcNurmaDQ1b4FyP
gBcKLRGnk8Z9j9D8LvTwEPiS+xjpve5Nn4RFKRpfSfqLJlY+Z5jz4dXU45k3Pezp
Tm8ZIFT3zcEWRQeF3yLBmj6UACPcMz6YISFPk0cgOBgFEgQH7cpbBB3TWQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCun3y/97LCdYFfc++fN5TKlqG0mMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSzZmZkxfM3NzSjFnVjl6NzU4M2xNcVdvYlNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwlceAwQA
wlfRAwQA1MAHMA0GCSqGSIb3DQEBCwUAA4IBAQAtFEcdCgB98dmDNG7w7gNnITdR
SCiPWCjREBBvaEsgywMOV7nCUUD6ziLqcrKdHzIRIF3eLPcb8akCSVmUnbi16+p3
e7XlCTcDJ8BcaIQAVYK9a9ETR9Hmx5CuKcR8ySJSpr/ZadXAwKszNRMOBBANo1im
XcSNe4UjhpOMYfFqS2y0cmJmxa0P2uv53rZtiujkGfOcdwrkZov3neUH1mQfHKjG
AOO5blZB60riJ+gtlMbPDnnpWL0gI04CKWYPZfqWyvIXrAv9sJr3vCuzRmZt6rGj
6c7o4haHk6zE2BBVkqzrGit/udwjFfOVc85aLim5oaQLSGeBVOkY47M/aQU2
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:01 2023 by rpki-client on console-fra.rpki-client.org