Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q_7b39hpKUHT589zSoao8gRmpJ0.roa
File: Q_7b39hpKUHT589zSoao8gRmpJ0.roa (raw, json)
Hash identifier: jQc/LHg34aylB5lnz12P8TGTRF8drk/K+9KaRFfxmeo=
Subject key identifier: 43:FE:DB:DF:D8:69:29:41:D3:E7:CF:73:4A:86:A8:F2:04:66:A4:9D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185767427A5288341E5CB2E8C2CF052895B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q_7b39hpKUHT589zSoao8gRmpJ0.roa
Signing time: Tue 03 Jan 2023 07:06:41 +0000
ROA not before: Tue 03 Jan 2023 07:06:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 194.87.151.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.38.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
194.87.84.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:74:27:a5:28:83:41:e5:cb:2e:8c:2c:f0:52:89:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 3 07:06:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43fedbdfd8692941d3e7cf734a86a8f20466a49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:2d:88:94:59:23:b0:be:0c:2e:a2:b7:f1:
96:24:e1:29:a9:a9:6b:02:ca:5d:ff:18:a3:bc:9c:
8d:2d:2b:0e:c8:db:f7:92:73:7a:78:8c:10:58:80:
f5:23:03:6b:80:ff:b0:72:1b:8d:48:58:2b:1c:b5:
70:32:bb:83:86:50:d3:30:43:0f:e7:db:fd:ee:c8:
f9:1e:39:4a:e4:6d:5c:8c:3a:6a:61:e7:82:51:94:
c3:4b:85:10:df:1c:fd:0f:13:fd:a2:04:96:62:3a:
28:37:59:9b:6d:3c:a6:4b:79:d0:5f:71:72:c6:89:
0f:80:4d:f7:fd:fa:8d:62:70:db:1e:f6:b4:30:ba:
3d:df:ce:49:8b:5e:c7:31:10:a9:d0:58:78:f6:77:
f6:19:cb:63:0b:cb:e8:f0:ee:c0:b9:88:08:e5:41:
68:15:e5:14:25:ed:51:23:63:7a:6f:05:2e:a2:e8:
71:4c:77:fa:17:1a:3f:30:06:37:00:dc:49:bd:b1:
a7:4f:fb:93:21:c3:2a:3a:4e:97:8f:b1:c0:7f:1e:
f7:45:07:26:f1:64:be:42:3c:2f:22:7a:48:f6:fb:
08:64:03:24:6c:ca:ce:e7:5b:52:86:73:9f:63:4c:
fe:d7:df:ca:aa:fa:7a:9e:65:00:05:82:d3:1c:38:
c1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FE:DB:DF:D8:69:29:41:D3:E7:CF:73:4A:86:A8:F2:04:66:A4:9D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q_7b39hpKUHT589zSoao8gRmpJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.84.0/22
194.87.151.0/24
195.133.18.0/24
195.133.38.0/24
195.133.40.0/24
212.192.8.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f7:c7:af:61:0f:f8:48:9f:ea:b4:50:64:0a:69:ca:bf:6c:
30:c3:c4:53:ae:46:c1:d0:3a:51:b5:76:fe:a6:dd:06:29:11:
58:d0:e9:44:5d:68:b2:23:ab:80:57:a4:a0:17:4f:98:89:02:
35:12:91:c5:0b:3f:5e:9a:35:f2:52:73:6d:0e:fd:a8:03:73:
e5:cc:33:2f:2b:6f:10:25:8a:e5:ed:20:1d:b3:07:32:3f:54:
f1:01:0f:7c:31:6b:39:07:9f:55:e0:1d:99:96:36:a5:76:35:
54:7c:3c:f7:fc:56:21:90:c2:f4:34:fb:d4:c7:b8:a8:2d:7d:
88:05:59:07:50:50:1d:75:71:8d:aa:84:10:61:b3:e6:39:85:
b9:fe:4b:2c:9b:f5:59:ca:9d:0e:00:fb:a2:e1:72:a3:6c:36:
db:3c:f8:5b:20:1b:6a:63:59:af:e4:81:ae:c6:67:14:48:f4:
4a:7e:06:0a:19:ff:b6:e5:c3:66:fc:22:bd:8b:9c:69:05:6e:
b3:81:ad:4c:ce:a9:c7:6a:12:f8:68:28:4b:c1:fb:18:34:3a:
7a:34:7e:ae:c9:84:bf:d8:be:e8:8c:8d:db:02:dd:10:37:7c:
5d:35:1c:ab:68:e8:1e:8c:04:59:3e:d0:d2:a0:6f:42:1c:97:
52:fa:10:e3
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYV2dCelKINB5csujCzwUolbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTAzMDcwNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2ZlZGJkZmQ4NjkyOTQxZDNlN2NmNzM0YTg2YThmMjA0NjZhNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIctiJRZI7C+DC6it/GWJOEpqalr
Aspd/xijvJyNLSsOyNv3knN6eIwQWID1IwNrgP+wchuNSFgrHLVwMruDhlDTMEMP
59v97sj5HjlK5G1cjDpqYeeCUZTDS4UQ3xz9DxP9ogSWYjooN1mbbTymS3nQX3Fy
xokPgE33/fqNYnDbHva0MLo9385Ji17HMRCp0Fh49nf2GctjC8vo8O7AuYgI5UFo
FeUUJe1RI2N6bwUuouhxTHf6Fxo/MAY3ANxJvbGnT/uTIcMqOk6Xj7HAfx73RQcm
8WS+QjwvInpI9vsIZAMkbMrO51tShnOfY0z+19/Kqvp6nmUABYLTHDjB9wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFEP+29/YaSlB0+fPc0qGqPIEZqSdMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvUV83YjM5aHBLVUhUNTg5elNvYW84Z1JtcEowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCwldUAwQA
wleXAwQAw4USAwQAw4UmAwQAw4UoAwQA1MAIMA0GCSqGSIb3DQEBCwUAA4IBAQAu
98evYQ/4SJ/qtFBkCmnKv2www8RTrkbB0DpRtXb+pt0GKRFY0OlEXWiyI6uAV6Sg
F0+YiQI1EpHFCz9emjXyUnNtDv2oA3PlzDMvK28QJYrl7SAdswcyP1TxAQ98MWs5
B59V4B2ZljaldjVUfDz3/FYhkML0NPvUx7ioLX2IBVkHUFAddXGNqoQQYbPmOYW5
/kssm/VZyp0OAPui4XKjbDbbPPhbIBtqY1mv5IGuxmcUSPRKfgYKGf+25cNm/CK9
i5xpBW6zga1MzqnHahL4aChLwfsYNDp6NH6uyYS/2L7ojI3bAt0QN3xdNRyraOge
jARZPtDSoG9CHJdS+hDj
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:03 2023 by rpki-client on console-fra.rpki-client.org