Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/O3Om-DoLjHY76QfUgk183T8ziGo.roa
File: O3Om-DoLjHY76QfUgk183T8ziGo.roa (raw, json)
Hash identifier: 37tF/zGfAT8UDZsjmmdRDkzX6UFDHhZE3E2p3XfAdh8=
Subject key identifier: 3B:73:A6:F8:3A:0B:8C:76:3B:E9:07:D4:82:4D:7C:DD:3F:33:88:6A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018847D868F20DBF9134AA65156439CB6C91
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/O3Om-DoLjHY76QfUgk183T8ziGo.roa
Signing time: Tue 23 May 2023 09:02:24 +0000
ROA not before: Tue 23 May 2023 09:02:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 195.133.82.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:d8:68:f2:0d:bf:91:34:aa:65:15:64:39:cb:6c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 23 09:02:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b73a6f83a0b8c763be907d4824d7cdd3f33886a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:99:4d:ea:3f:e3:fd:5b:7f:5d:d1:fe:53:
ff:23:71:d6:57:e5:51:7b:83:64:b0:99:39:12:ba:
bd:3d:f6:5a:24:5f:13:7a:26:70:bf:a2:d2:ee:9b:
81:e3:df:90:43:e7:cb:2b:96:37:26:47:50:d4:cb:
93:f2:ef:5a:34:80:d8:97:da:8e:0b:a8:e0:ff:39:
3f:31:0c:7c:5e:ab:71:94:7b:df:ab:5d:24:91:b6:
93:59:10:34:fb:ff:b4:57:ac:b8:95:13:0d:19:f1:
35:38:d5:cd:0d:77:df:8c:6e:28:51:f9:f6:c9:a8:
44:21:48:6f:dd:68:a9:f3:b0:d8:14:c7:e7:1d:1f:
eb:2d:8f:b8:7b:24:88:54:3c:48:08:06:c5:9d:f4:
94:1b:a9:1f:42:21:9e:e6:42:82:26:c0:a7:18:e3:
33:0b:ea:41:ae:22:d2:53:bb:bc:96:16:00:39:57:
fd:a8:59:1d:7c:2e:4f:8e:50:56:97:88:12:e7:9c:
c6:22:0a:09:a5:ed:30:03:a1:27:37:be:33:06:3b:
50:71:d5:9c:65:f6:6d:0f:cd:6b:f3:8c:65:51:d3:
39:de:34:15:fa:1b:f4:00:e9:53:fa:3d:47:e8:65:
60:0d:04:ac:fc:c6:11:e7:c8:8c:3f:f5:9f:e1:84:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:73:A6:F8:3A:0B:8C:76:3B:E9:07:D4:82:4D:7C:DD:3F:33:88:6A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/O3Om-DoLjHY76QfUgk183T8ziGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.121.0/24
194.87.165.0/24
194.87.171.0/24
195.133.82.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:30:6a:2f:bc:80:d8:e8:5e:12:3f:e5:79:0d:db:ec:b1:bb:
cd:a1:42:f5:ff:be:c5:8f:94:61:da:c1:eb:67:5f:61:d8:25:
5a:bc:64:85:cd:b3:1d:61:66:38:77:bc:68:3b:06:c8:93:f4:
29:b1:8d:a2:ec:1a:85:ba:34:5b:05:dc:70:4a:24:02:73:a1:
ab:3c:5f:4a:b6:7c:e4:4a:c2:13:20:f1:60:5b:bd:e9:26:1a:
19:e5:c0:aa:c9:27:c6:af:cf:ba:f1:79:a1:a2:0e:b9:76:42:
e5:4e:49:94:eb:7c:78:66:34:e6:35:eb:ca:a6:c7:69:cd:b5:
bb:fa:9f:02:22:dd:2c:07:64:10:a5:4a:c3:52:58:50:7b:51:
bd:82:bf:1b:9a:5e:39:ae:02:0c:b0:79:75:67:68:2c:a1:3c:
87:3a:b3:db:2d:08:3c:d6:1f:72:a9:43:25:37:b7:c0:3b:c3:
f2:1f:90:dd:f0:e2:d5:2a:87:2e:68:05:0d:b0:4a:30:a8:67:
89:55:c2:29:f3:d7:1c:62:6b:7e:a9:96:5a:84:63:71:34:d0:
33:4b:d0:bf:1c:1a:59:59:c0:b1:44:2c:54:7f:a9:39:c8:d5:
90:51:e5:a5:26:88:3c:a8:5a:23:b5:39:e5:e7:54:08:30:eb:
e3:3d:b9:0a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYhH2GjyDb+RNKplFWQ5y2yRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNTIzMDkwMjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjczYTZmODNhMGI4Yzc2M2JlOTA3ZDQ4MjRkN2NkZDNmMzM4ODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZGZTeo/4/1bf13R/lP/I3HWV+VR
e4NksJk5Erq9PfZaJF8TeiZwv6LS7puB49+QQ+fLK5Y3JkdQ1MuT8u9aNIDYl9qO
C6jg/zk/MQx8XqtxlHvfq10kkbaTWRA0+/+0V6y4lRMNGfE1ONXNDXffjG4oUfn2
yahEIUhv3Wip87DYFMfnHR/rLY+4eySIVDxICAbFnfSUG6kfQiGe5kKCJsCnGOMz
C+pBriLSU7u8lhYAOVf9qFkdfC5PjlBWl4gS55zGIgoJpe0wA6EnN74zBjtQcdWc
ZfZtD81r84xlUdM53jQV+hv0AOlT+j1H6GVgDQSs/MYR58iMP/Wf4YSWSwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDtzpvg6C4x2O+kH1IJNfN0/M4hqMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvTzNPbS1Eb0xqSFk3NlFmVWdrMTgzVDh6aUdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwld5AwQA
wlelAwQAwlerAwQAw4VSMA0GCSqGSIb3DQEBCwUAA4IBAQBbMGovvIDY6F4SP+V5
DdvssbvNoUL1/77Fj5Rh2sHrZ19h2CVavGSFzbMdYWY4d7xoOwbIk/QpsY2i7BqF
ujRbBdxwSiQCc6GrPF9KtnzkSsITIPFgW73pJhoZ5cCqySfGr8+68Xmhog65dkLl
TkmU63x4ZjTmNevKpsdpzbW7+p8CIt0sB2QQpUrDUlhQe1G9gr8bml45rgIMsHl1
Z2gsoTyHOrPbLQg81h9yqUMlN7fAO8PyH5Dd8OLVKocuaAUNsEowqGeJVcIp89cc
Ymt+qZZahGNxNNAzS9C/HBpZWcCxRCxUf6k5yNWQUeWlJog8qFojtTnl51QIMOvj
PbkK
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:02 2023 by rpki-client on console-fra.rpki-client.org