Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PVH0-prPxW7hv3SlJ05AIh_lZPw.roa
File: PVH0-prPxW7hv3SlJ05AIh_lZPw.roa (raw, json)
Hash identifier: 1SRnEiBKxpZAxFcKPCWzjcnvjlT5owmje0ccATjazHY=
Subject key identifier: 3D:51:F4:FA:9A:CF:C5:6E:E1:BF:74:A5:27:4E:40:22:1F:E5:64:FC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186724C23988DE5DF30C2430939E811E7F6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PVH0-prPxW7hv3SlJ05AIh_lZPw.roa
Signing time: Tue 21 Feb 2023 04:47:17 +0000
ROA not before: Tue 21 Feb 2023 04:47:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41745
IP address blocks: 195.133.75.0/24 maxlen: 24
194.87.219.0/24 maxlen: 24
194.87.35.0/24 maxlen: 24
194.87.62.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:72:4c:23:98:8d:e5:df:30:c2:43:09:39:e8:11:e7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 21 04:47:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d51f4fa9acfc56ee1bf74a5274e40221fe564fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:c8:c0:25:22:dc:cd:92:b9:69:94:52:f2:
a1:21:5a:60:8b:22:76:de:21:9c:d4:17:9b:b5:3c:
20:fe:82:e8:f6:4a:35:1c:a9:7f:63:ed:e9:96:3f:
1d:c6:33:0c:ce:9b:3b:ad:d3:a8:00:56:9b:3b:68:
8e:e9:25:69:d8:21:24:66:35:ec:2a:8f:e7:01:87:
30:0a:58:0c:c4:b4:6d:25:c3:66:be:66:27:26:69:
7a:f5:19:68:4d:cd:4d:28:c6:cf:7e:77:a7:e9:96:
4e:d3:a9:03:5e:5c:83:10:ef:18:57:a8:93:fe:23:
d6:89:85:41:9c:c9:0c:ef:73:0b:4e:aa:d6:8c:ab:
d6:05:f4:43:42:01:5a:a3:20:1d:a8:9a:e6:23:cc:
0b:76:fd:50:72:c3:06:fd:98:48:1f:f6:1a:e0:a7:
47:20:30:41:9a:7c:08:30:f4:a7:a3:f6:22:25:7f:
65:c7:e8:41:48:50:3c:9e:6b:21:f7:13:d9:b6:de:
e7:45:03:a0:2b:e3:2c:1c:86:97:c8:21:f3:89:fe:
95:10:86:61:1d:f3:af:61:5b:c1:c4:64:03:c8:97:
a3:5f:e7:56:83:c1:c3:63:ae:06:dc:ef:66:a1:7f:
89:28:17:69:e1:20:27:83:0f:d8:32:06:1d:df:35:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:51:F4:FA:9A:CF:C5:6E:E1:BF:74:A5:27:4E:40:22:1F:E5:64:FC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PVH0-prPxW7hv3SlJ05AIh_lZPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.35.0/24
194.87.62.0/24
194.87.82.0/24
194.87.191.0/24
194.87.219.0/24
195.133.75.0/24
Signature Algorithm: sha256WithRSAEncryption
65:30:2a:4b:69:f8:f4:4f:f7:1c:02:95:43:59:ed:98:da:96:
a7:23:93:94:53:5d:a2:cf:a2:4a:3d:5e:05:aa:93:a0:38:f8:
69:63:79:25:ea:82:2d:9f:5c:64:0e:aa:1a:5d:4c:0c:39:af:
b1:78:de:1d:06:8c:29:20:d0:5a:54:30:b4:08:c3:fb:1e:9b:
ed:1e:e0:93:cf:54:5d:dc:88:0c:b3:ef:b7:5e:cc:c2:b9:6f:
e4:aa:9d:f8:2c:13:e5:60:1f:a8:a1:1b:27:39:54:0d:54:dd:
a9:73:ae:74:c0:ab:4d:b1:d1:70:e2:f7:33:2e:52:c5:76:ba:
cf:a2:b8:24:16:4c:6c:c9:17:a4:49:c1:ef:61:05:8e:0b:e3:
5d:32:a4:7c:70:8e:be:36:32:16:86:14:29:4e:20:3e:eb:69:
bc:b2:74:78:9a:3e:bd:b6:90:f2:4d:ab:d7:98:f4:7d:5e:8b:
20:68:dd:af:12:09:b9:73:e6:3f:ff:87:1b:a2:32:e4:c7:65:
9c:07:57:a9:2a:db:fa:4e:a5:3d:45:8d:9e:2c:76:03:aa:8c:
af:a3:71:55:cc:ef:43:2b:15:74:86:d1:ca:68:ce:74:ad:09:
04:43:e4:61:97:4a:56:6d:81:1d:4e:92:8c:18:d4:b1:94:b3:
10:10:a3:6d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYZyTCOYjeXfMMJDCTnoEef2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMjIxMDQ0NzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDUxZjRmYTlhY2ZjNTZlZTFiZjc0YTUyNzRlNDAyMjFmZTU2NGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrHIwCUi3M2SuWmUUvKhIVpgiyJ2
3iGc1BebtTwg/oLo9ko1HKl/Y+3plj8dxjMMzps7rdOoAFabO2iO6SVp2CEkZjXs
Ko/nAYcwClgMxLRtJcNmvmYnJml69RloTc1NKMbPfnen6ZZO06kDXlyDEO8YV6iT
/iPWiYVBnMkM73MLTqrWjKvWBfRDQgFaoyAdqJrmI8wLdv1QcsMG/ZhIH/Ya4KdH
IDBBmnwIMPSno/YiJX9lx+hBSFA8nmsh9xPZtt7nRQOgK+MsHIaXyCHzif6VEIZh
HfOvYVvBxGQDyJejX+dWg8HDY64G3O9moX+JKBdp4SAngw/YMgYd3zWfhQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFD1R9Pqaz8Vu4b90pSdOQCIf5WT8MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvUFZIMC1wclB4VzdodjNTbEowNUFJaF9sWlB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwlcjAwQA
wlc+AwQAwldSAwQAwle/AwQAwlfbAwQAw4VLMA0GCSqGSIb3DQEBCwUAA4IBAQBl
MCpLafj0T/ccApVDWe2Y2panI5OUU12iz6JKPV4FqpOgOPhpY3kl6oItn1xkDqoa
XUwMOa+xeN4dBowpINBaVDC0CMP7HpvtHuCTz1Rd3IgMs++3XszCuW/kqp34LBPl
YB+ooRsnOVQNVN2pc650wKtNsdFw4vczLlLFdrrPorgkFkxsyRekScHvYQWOC+Nd
MqR8cI6+NjIWhhQpTiA+62m8snR4mj69tpDyTavXmPR9XosgaN2vEgm5c+Y//4cb
ojLkx2WcB1epKtv6TqU9RY2eLHYDqoyvo3FVzO9DKxV0htHKaM50rQkEQ+Rhl0pW
bYEdTpKMGNSxlLMQEKNt
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org