Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S7PZEu8uh1FdMPeFJPU5NStzrzA.roa
File: S7PZEu8uh1FdMPeFJPU5NStzrzA.roa (raw, json)
Hash identifier: 78HDaH+M0wfxi2zYUjdWLaaGUeUE627QM/PO7z04la8=
Subject key identifier: 4B:B3:D9:12:EF:2E:87:51:5D:30:F7:85:24:F5:39:35:2B:73:AF:30
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B71D6FA67AD3B29106B883587E2101425
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S7PZEu8uh1FdMPeFJPU5NStzrzA.roa
Signing time: Fri 27 Oct 2023 15:53:16 +0000
ROA not before: Fri 27 Oct 2023 15:53:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 62.76.227.0/24 maxlen: 24
194.85.250.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:d6:fa:67:ad:3b:29:10:6b:88:35:87:e2:10:14:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 27 15:53:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bb3d912ef2e87515d30f78524f539352b73af30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:1e:71:dc:5e:bd:e3:80:4e:92:4f:e1:1e:
58:09:23:0b:6f:0f:63:82:f0:a1:66:7d:f8:c6:42:
02:68:6b:59:18:e9:af:70:4e:33:90:e9:22:a9:69:
f3:a1:49:6d:d5:11:7d:05:08:0b:57:34:07:4e:06:
7d:f2:e5:10:77:79:19:e1:b7:c4:f7:c1:0f:55:f3:
28:9e:76:a1:ec:c7:65:c4:e2:63:f9:c6:b0:a1:75:
e8:ad:ec:4d:b4:49:3d:a4:93:a7:eb:3b:d5:01:1d:
f6:63:84:a7:52:c7:3e:bd:6b:e6:0f:20:00:5d:ec:
0c:6c:06:a0:a6:01:70:9b:f4:06:55:e3:01:d7:34:
e6:0a:97:2b:4f:e4:80:39:62:a9:57:a6:a6:54:8b:
37:ca:3f:74:4d:f8:0f:d1:e7:a9:47:e2:34:ae:d2:
3d:1c:e8:38:a3:3b:e4:19:6c:76:7e:74:7d:2c:3a:
af:17:96:79:ad:85:07:b3:34:5f:1b:6b:91:dc:1e:
30:ae:15:19:8a:ef:74:d1:6a:92:c6:21:6a:b5:31:
2e:fd:7c:28:ca:55:5a:64:40:c9:1f:de:84:1f:b7:
28:7c:17:92:7b:91:21:fb:5d:47:41:ae:7b:60:4b:
77:1c:1c:23:7c:cb:a5:a9:87:ff:b1:3f:b7:02:c2:
af:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B3:D9:12:EF:2E:87:51:5D:30:F7:85:24:F5:39:35:2B:73:AF:30
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S7PZEu8uh1FdMPeFJPU5NStzrzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.227.0/24
194.85.250.0/24
195.133.39.0/24
212.192.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3a:17:96:81:b9:80:a6:a2:d7:51:a2:55:7c:d8:c8:4d:67:
04:90:a0:51:ee:02:cb:36:63:64:80:57:69:29:fe:dc:db:2c:
88:94:7a:ee:d5:05:ae:7c:26:b7:56:b4:40:fc:0b:84:3c:6e:
f5:35:c5:cd:cf:39:cf:a0:5f:22:64:36:48:6f:71:3b:56:1a:
d8:d6:79:a4:6a:56:7d:d9:9b:f2:d1:77:11:70:6d:c1:b9:65:
fe:18:7f:a1:73:00:1f:a6:cb:e1:38:fa:b4:24:ca:d4:ed:a5:
85:d6:7f:d6:8d:73:aa:f9:0a:84:e0:3c:63:6d:6f:49:e4:60:
a0:1a:4f:90:44:6b:0b:22:a9:f9:4a:4b:f9:5d:ac:09:a8:e1:
d1:6f:76:ee:68:3c:c8:8a:f6:cb:ea:c9:e3:08:8f:85:16:38:
b6:1e:2e:9f:9d:c0:8e:c6:75:bd:78:77:b5:0e:8e:0c:4d:ca:
12:be:fc:75:a4:a2:d7:4e:55:fb:7f:fe:2a:b0:d8:34:e7:04:
96:06:24:8f:57:35:23:eb:e1:52:b5:ca:1a:a8:41:3b:ee:dd:
a8:b6:df:83:83:4c:f2:5f:3f:5b:d0:3a:8c:81:0a:d8:02:25:
cf:19:63:da:b2:ee:f2:9a:4a:a0:02:91:72:00:f9:4b:d1:b8:
77:a9:4a:a0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYtx1vpnrTspEGuINYfiEBQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMDI3MTU1MzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmIzZDkxMmVmMmU4NzUxNWQzMGY3ODUyNGY1MzkzNTJiNzNhZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufsecdxeveOATpJP4R5YCSMLbw9j
gvChZn34xkICaGtZGOmvcE4zkOkiqWnzoUlt1RF9BQgLVzQHTgZ98uUQd3kZ4bfE
98EPVfMonnah7MdlxOJj+cawoXXorexNtEk9pJOn6zvVAR32Y4SnUsc+vWvmDyAA
XewMbAagpgFwm/QGVeMB1zTmCpcrT+SAOWKpV6amVIs3yj90TfgP0eepR+I0rtI9
HOg4ozvkGWx2fnR9LDqvF5Z5rYUHszRfG2uR3B4wrhUZiu900WqSxiFqtTEu/Xwo
ylVaZEDJH96EH7cofBeSe5Eh+11HQa57YEt3HBwjfMulqYf/sT+3AsKvgwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEuz2RLvLodRXTD3hST1OTUrc68wMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvUzdQWkV1OHVoMUZkTVBlRkpQVTVOU3R6cnpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPkzjAwQA
wlX6AwQAw4UnAwQA1MD1MA0GCSqGSIb3DQEBCwUAA4IBAQAOOheWgbmApqLXUaJV
fNjITWcEkKBR7gLLNmNkgFdpKf7c2yyIlHru1QWufCa3VrRA/AuEPG71NcXNzznP
oF8iZDZIb3E7VhrY1nmkalZ92Zvy0XcRcG3BuWX+GH+hcwAfpsvhOPq0JMrU7aWF
1n/WjXOq+QqE4DxjbW9J5GCgGk+QRGsLIqn5Skv5XawJqOHRb3buaDzIivbL6snj
CI+FFji2Hi6fncCOxnW9eHe1Do4MTcoSvvx1pKLXTlX7f/4qsNg05wSWBiSPVzUj
6+FStcoaqEE77t2ott+Dg0zyXz9b0DqMgQrYAiXPGWPasu7ymkqgApFyAPlL0bh3
qUqg
-----END CERTIFICATE-----
Generated at Fri Oct 27 17:04:40 2023 by rpki-client on console-fra.rpki-client.org