Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NTDPrhZ861Rts_1I7mNGuCoUBWE.roa
File: NTDPrhZ861Rts_1I7mNGuCoUBWE.roa (raw, json)
Hash identifier: d+YGrhpmlgnocMNUhLam9C+zHOQvwkfxydpXD2Vjv3U=
Subject key identifier: 35:30:CF:AE:16:7C:EB:54:6D:B3:FD:48:EE:63:46:B8:2A:14:05:61
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F67020DDE935941B8C368FEF7FD52A2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NTDPrhZ861Rts_1I7mNGuCoUBWE.roa
Signing time: Sun 01 Jan 2023 22:14:59 +0000
ROA not before: Sun 01 Jan 2023 22:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201671
IP address blocks: 194.58.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:02:0d:de:93:59:41:b8:c3:68:fe:f7:fd:52:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3530cfae167ceb546db3fd48ee6346b82a140561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:6a:1e:68:7b:ce:e6:04:35:8f:69:63:a3:
9c:8f:0d:5d:7c:c2:50:72:11:b1:10:59:b7:e3:5b:
fe:50:93:18:5e:4a:8b:0a:84:3f:df:7a:33:f3:7c:
77:f7:f8:7a:5f:da:6a:72:25:56:c2:d2:77:fa:ea:
d8:5c:8d:e7:7a:cc:9a:85:63:64:d8:bd:03:6d:6a:
35:6e:54:bf:5d:d9:75:c1:70:01:bd:82:13:de:3c:
1f:7a:3d:62:c3:26:56:6b:10:b2:1c:69:d0:52:a9:
8c:7b:b0:d3:24:2c:0d:9c:ab:a4:52:f2:66:c8:d4:
c6:f0:1e:36:37:eb:ee:0a:bf:c6:8d:21:e7:d3:5f:
e6:f6:da:0a:59:0c:01:e7:79:66:79:7e:76:8a:85:
43:19:06:cb:af:da:b3:af:8c:68:4e:58:f4:be:dd:
47:f0:e0:22:a3:5b:31:8d:13:a3:aa:c6:7f:35:b9:
f8:5e:e0:bf:2c:14:f2:ea:44:c0:fa:81:88:c9:10:
38:f7:4e:70:c7:7f:53:4e:85:f8:bf:73:df:64:c6:
99:aa:ed:d1:2a:b4:cb:db:b1:c0:e0:08:4d:dc:c6:
26:c4:c1:f8:9e:5d:ab:ff:50:fb:b7:20:b9:a3:a5:
7f:3e:f1:7f:be:8e:12:a1:a0:ab:00:ef:e3:04:9e:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:30:CF:AE:16:7C:EB:54:6D:B3:FD:48:EE:63:46:B8:2A:14:05:61
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NTDPrhZ861Rts_1I7mNGuCoUBWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.33.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:9d:ce:b4:a8:9a:96:4a:f0:99:33:15:79:ac:4d:eb:76:2e:
3a:8b:ce:71:79:c9:bb:69:b2:90:94:33:2a:81:06:68:bb:d6:
1c:c8:b9:f9:da:e8:f1:78:87:4a:45:e8:ac:17:b2:d4:88:19:
f5:f1:02:1d:94:e4:8d:ac:bd:c6:24:99:5d:ba:1d:94:ed:bf:
db:a2:e6:c1:f5:fd:d3:ea:55:d3:fe:fc:bc:ac:22:42:a1:dd:
c8:bd:8e:64:1c:18:03:c5:4e:91:a4:af:91:d6:fa:4d:2e:1b:
eb:64:78:12:f3:8d:ae:b9:f6:f2:13:e3:11:16:9d:bc:9d:4b:
24:ef:90:6f:c1:69:7f:a6:12:02:35:e3:62:f3:51:b3:2b:df:
8d:09:95:ae:3c:9b:61:b0:09:f3:76:30:7f:1e:a1:85:c8:69:
c3:14:4f:ae:02:b5:32:e6:ac:8d:0b:25:c1:ef:26:c7:9d:8d:
38:71:cb:ea:be:20:07:2a:2f:f4:70:4e:12:a9:1e:c4:13:8d:
a0:3d:b3:91:88:9d:13:4e:4b:61:e8:2f:2f:23:02:3c:78:f8:
4a:32:88:96:8d:26:34:b9:db:00:dc:8e:cc:92:9a:13:08:c5:
f6:7c:08:96:da:31:7b:c8:0a:22:ee:98:7a:51:12:1e:8b:cc:
2e:c6:67:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvZwIN3pNZQbjDaP73/VKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTAxMjIxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTMwY2ZhZTE2N2NlYjU0NmRiM2ZkNDhlZTYzNDZiODJhMTQwNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFhqHmh7zuYENY9pY6Ocjw1dfMJQ
chGxEFm341v+UJMYXkqLCoQ/33oz83x39/h6X9pqciVWwtJ3+urYXI3nesyahWNk
2L0DbWo1blS/Xdl1wXABvYIT3jwfej1iwyZWaxCyHGnQUqmMe7DTJCwNnKukUvJm
yNTG8B42N+vuCr/GjSHn01/m9toKWQwB53lmeX52ioVDGQbLr9qzr4xoTlj0vt1H
8OAio1sxjROjqsZ/Nbn4XuC/LBTy6kTA+oGIyRA4905wx39TToX4v3PfZMaZqu3R
KrTL27HA4AhN3MYmxMH4nl2r/1D7tyC5o6V/PvF/vo4SoaCrAO/jBJ5jUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDUwz64WfOtUbbP9SO5jRrgqFAVhMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvTlREUHJoWjg2MVJ0c18xSTdtTkd1Q29VQldFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjohMA0G
CSqGSIb3DQEBCwUAA4IBAQA9nc60qJqWSvCZMxV5rE3rdi46i85xecm7abKQlDMq
gQZou9YcyLn52ujxeIdKReisF7LUiBn18QIdlOSNrL3GJJlduh2U7b/boubB9f3T
6lXT/vy8rCJCod3IvY5kHBgDxU6RpK+R1vpNLhvrZHgS842uufbyE+MRFp28nUsk
75BvwWl/phICNeNi81GzK9+NCZWuPJthsAnzdjB/HqGFyGnDFE+uArUy5qyNCyXB
7ybHnY04ccvqviAHKi/0cE4SqR7EE42gPbORiJ0TTkth6C8vIwI8ePhKMoiWjSY0
udsA3I7MkpoTCMX2fAiW2jF7yAoi7ph6URIei8wuxmcw
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org