Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RXImOtBm_JduMqzX9uwGxEjxM9c.roa
File: RXImOtBm_JduMqzX9uwGxEjxM9c.roa (raw, json)
Hash identifier: J6RYE97WZhKQ8XnVZAnOqZK1/o3+NlKMPjAUuRIrar0=
Subject key identifier: 45:72:26:3A:D0:66:FC:97:6E:32:AC:D7:F6:EC:06:C4:48:F1:33:D7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A888668F770DDCE566DFB27FCC518
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RXImOtBm_JduMqzX9uwGxEjxM9c.roa
Signing time: Tue 02 Jan 2024 12:33:54 +0000
ROA not before: Tue 02 Jan 2024 12:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206216
IP address blocks: 194.87.169.0/24 maxlen: 24
212.193.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 05:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:88:86:68:f7:70:dd:ce:56:6d:fb:27:fc:c5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4572263ad066fc976e32acd7f6ec06c448f133d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:c9:6f:a6:b6:97:14:ff:8d:47:b5:2a:65:
91:0d:ba:05:08:00:fd:1e:c0:5c:6d:e0:d7:29:68:
2d:8f:dc:e9:22:2b:56:1a:28:a7:5d:1e:a2:ab:4b:
65:e1:c9:98:f1:c2:6c:1e:93:61:fa:70:b7:c2:64:
27:56:91:4b:d1:0e:9c:35:fd:75:3e:50:07:b9:8d:
01:2d:7e:6e:31:b1:be:a7:66:e7:bc:47:c6:e0:09:
67:f9:f7:e5:97:70:92:7b:b7:71:74:83:f6:22:24:
ca:48:a2:69:64:63:5f:46:7e:ac:47:fa:9c:05:92:
f3:5a:e7:4b:d1:9a:b5:56:0b:0d:20:f8:7d:3d:d4:
f3:c8:a6:c6:5e:26:35:e2:07:2d:78:c8:97:6d:f8:
5b:54:4c:48:b7:88:d3:46:08:d4:29:57:55:5e:3e:
fc:c7:08:f7:27:99:4e:f0:06:05:da:1e:db:20:6a:
76:be:b7:ef:c5:dc:ca:78:48:39:31:25:9d:c0:65:
7e:11:7d:62:36:12:5c:dc:15:c2:07:86:30:ee:29:
c3:19:8a:b4:a8:6d:bc:ab:b8:e0:e5:6e:48:75:c0:
ea:7b:df:57:59:db:db:e6:2f:db:ea:d7:10:7f:51:
9b:99:0b:84:a6:75:e3:1a:74:ac:80:28:46:3a:6a:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:72:26:3A:D0:66:FC:97:6E:32:AC:D7:F6:EC:06:C4:48:F1:33:D7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RXImOtBm_JduMqzX9uwGxEjxM9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.169.0/24
212.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
75:29:3c:6f:f4:3e:fc:0f:d7:49:5f:c9:f4:9b:3d:b8:1b:c7:
de:bc:d9:1a:97:a4:a4:71:76:69:c0:f6:4d:91:78:4c:77:8b:
c7:9a:d0:b8:47:41:a0:4d:aa:b8:0c:ac:64:51:bf:69:78:d1:
16:5e:a5:1a:1c:28:fe:a9:4d:c9:9f:fe:b2:30:e7:f4:46:e3:
a0:5f:c1:05:79:93:62:80:89:53:3a:54:e9:70:c8:ff:08:7e:
4a:71:e1:47:85:f1:c2:45:64:ea:2e:3d:b0:fd:92:15:90:b0:
48:2d:c3:f6:e6:7a:c6:42:e6:82:f0:e2:d2:a5:b5:8e:6a:b6:
3c:02:32:bd:8d:b0:d4:81:b5:19:f5:f6:e0:80:d6:3e:43:58:
36:78:10:38:de:f5:30:5e:14:b2:18:18:6d:ac:2e:46:8b:7c:
28:24:55:b9:35:e6:51:74:33:7f:f3:e6:08:2d:62:54:63:bd:
76:07:93:69:b8:ea:a7:03:b8:01:de:6e:5d:cc:1d:71:8f:25:
e7:a2:4a:f0:bf:5a:74:c9:d3:2c:f9:76:26:ff:b8:d1:40:b3:
d3:2f:51:96:a5:3f:ab:39:d1:38:e0:51:e6:70:e1:9d:28:0d:
33:6b:72:a6:24:4e:4f:3a:b6:27:48:59:18:6b:67:0d:f0:83:
07:c8:7a:08
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKKoiGaPdw3c5Wbfsn/MUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMTIzMzU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTcyMjYzYWQwNjZmYzk3NmUzMmFjZDdmNmVjMDZjNDQ4ZjEzM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJLJb6a2lxT/jUe1KmWRDboFCAD9
HsBcbeDXKWgtj9zpIitWGiinXR6iq0tl4cmY8cJsHpNh+nC3wmQnVpFL0Q6cNf11
PlAHuY0BLX5uMbG+p2bnvEfG4Aln+ffll3CSe7dxdIP2IiTKSKJpZGNfRn6sR/qc
BZLzWudL0Zq1VgsNIPh9PdTzyKbGXiY14gcteMiXbfhbVExIt4jTRgjUKVdVXj78
xwj3J5lO8AYF2h7bIGp2vrfvxdzKeEg5MSWdwGV+EX1iNhJc3BXCB4Yw7inDGYq0
qG28q7jg5W5IdcDqe99XWdvb5i/b6tcQf1GbmQuEpnXjGnSsgChGOmoCFwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEVyJjrQZvyXbjKs1/bsBsRI8TPXMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvUlhJbU90Qm1fSmR1TXF6WDl1d0d4RWp4TTljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwlepAwQA
1MEDMA0GCSqGSIb3DQEBCwUAA4IBAQB1KTxv9D78D9dJX8n0mz24G8fevNkal6Sk
cXZpwPZNkXhMd4vHmtC4R0GgTaq4DKxkUb9peNEWXqUaHCj+qU3Jn/6yMOf0RuOg
X8EFeZNigIlTOlTpcMj/CH5KceFHhfHCRWTqLj2w/ZIVkLBILcP25nrGQuaC8OLS
pbWOarY8AjK9jbDUgbUZ9fbggNY+Q1g2eBA43vUwXhSyGBhtrC5Gi3woJFW5NeZR
dDN/8+YILWJUY712B5NpuOqnA7gB3m5dzB1xjyXnokrwv1p0ydMs+XYm/7jRQLPT
L1GWpT+rOdE44FHmcOGdKA0za3KmJE5POrYnSFkYa2cN8IMHyHoI
-----END CERTIFICATE-----
Generated at Mon Jan 8 06:47:12 2024 by rpki-client on console-fra.rpki-client.org