Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UVXDDFWIcMZf0I83ECGX3LflUcA.roa
File: UVXDDFWIcMZf0I83ECGX3LflUcA.roa (raw, json)
Hash identifier: VFtMNuUUCsDgLXGQZppn9gl81PWeSvBtwOQdjjAFWnE=
Subject key identifier: 51:55:C3:0C:55:88:70:C6:5F:D0:8F:37:10:21:97:DC:B7:E5:51:C0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188DEB0EF872DD7E45CF8C1E6F60BAD4F69
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UVXDDFWIcMZf0I83ECGX3LflUcA.roa
Signing time: Wed 21 Jun 2023 16:01:57 +0000
ROA not before: Wed 21 Jun 2023 16:01:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199077
IP address blocks: 194.87.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:b0:ef:87:2d:d7:e4:5c:f8:c1:e6:f6:0b:ad:4f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 21 16:01:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5155c30c558870c65fd08f37102197dcb7e551c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:91:b2:03:cc:68:5e:3e:e7:e1:03:ae:1d:
8c:c6:82:17:23:d4:83:50:31:a0:29:47:78:b7:be:
8a:c4:58:62:3e:db:c0:2c:8f:0d:44:63:f3:46:b4:
e7:1a:d3:6a:d3:dd:4c:18:78:dd:f3:a4:c4:f1:07:
bb:2f:26:9c:3d:c4:73:96:cc:af:1f:3b:92:9d:c9:
31:c7:c3:b6:f5:6f:87:12:fa:ef:6a:6a:72:da:38:
c3:be:79:55:38:d6:8d:ae:10:58:08:a6:30:7d:df:
41:47:5a:94:d8:41:54:05:aa:4a:fd:db:96:15:92:
bf:c5:fc:9d:f3:d6:b5:ca:24:9f:1d:ec:64:f2:28:
b0:d2:99:f3:e2:45:0e:39:c5:81:7a:a1:26:fb:d2:
a0:5a:cf:35:fc:02:e6:6d:dd:bf:d2:09:d8:6c:03:
24:0d:e1:36:a2:4c:6e:a1:4f:88:e7:a0:5b:43:24:
a7:7e:43:7d:0a:d2:b0:ee:63:dd:40:e7:f5:28:d0:
7a:0c:b5:16:22:af:27:4e:b5:46:34:f6:34:a0:85:
d0:02:2f:a4:c1:6c:1e:e8:47:91:d4:0a:02:72:d0:
d2:ac:99:c0:3a:87:ba:e6:cc:de:f2:4d:8a:69:17:
83:c1:d9:18:c1:a3:b9:8e:22:fd:9a:83:3e:1e:4c:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:55:C3:0C:55:88:70:C6:5F:D0:8F:37:10:21:97:DC:B7:E5:51:C0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UVXDDFWIcMZf0I83ECGX3LflUcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.67.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a7:7a:6e:72:15:bd:97:56:3a:21:84:9c:5b:f6:86:70:11:
19:0b:08:29:7a:2e:45:0e:a8:e4:71:43:f4:2d:7e:71:6a:81:
34:05:07:bb:2d:99:28:60:7b:ee:d6:a0:81:35:fe:67:4e:d4:
20:3c:5f:9d:13:10:54:cf:e2:46:9b:c9:81:57:e2:71:51:cc:
be:25:af:83:32:65:2d:38:e1:43:0d:b7:b6:dc:65:7d:a5:b0:
09:36:fd:b9:88:25:dc:ae:29:21:91:00:5d:d2:50:75:3f:1e:
e7:af:c4:9e:23:f7:03:11:63:7b:3f:c9:6b:4e:ab:cd:2c:00:
e9:30:96:8f:4b:c2:fd:49:b4:3d:85:c1:73:86:51:5c:e6:aa:
1c:1e:ef:75:64:68:10:39:31:b6:16:b0:cd:6d:d3:21:a5:3d:
6b:0b:e1:c4:43:7f:b2:12:e7:b8:7f:b9:d1:80:5a:28:e6:e1:
68:fb:2e:f5:54:3d:ef:02:ce:fc:1d:6d:0f:10:0d:72:6f:56:
e3:6e:e3:b6:39:d9:4f:1a:1d:5b:a3:ef:1b:0f:07:9c:89:88:
10:a0:20:82:00:c3:40:92:cc:c5:4e:fc:63:54:e5:69:89:31:
5f:c8:ef:3f:12:02:03:13:20:df:a9:3f:2f:91:59:d9:e9:78:
0c:2e:56:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjesO+HLdfkXPjB5vYLrU9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNjIxMTYwMTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTU1YzMwYzU1ODg3MGM2NWZkMDhmMzcxMDIxOTdkY2I3ZTU1MWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/ORsgPMaF4+5+EDrh2MxoIXI9SD
UDGgKUd4t76KxFhiPtvALI8NRGPzRrTnGtNq091MGHjd86TE8Qe7LyacPcRzlsyv
HzuSnckxx8O29W+HEvrvampy2jjDvnlVONaNrhBYCKYwfd9BR1qU2EFUBapK/duW
FZK/xfyd89a1yiSfHexk8iiw0pnz4kUOOcWBeqEm+9KgWs81/ALmbd2/0gnYbAMk
DeE2okxuoU+I56BbQySnfkN9CtKw7mPdQOf1KNB6DLUWIq8nTrVGNPY0oIXQAi+k
wWwe6EeR1AoCctDSrJnAOoe65sze8k2KaReDwdkYwaO5jiL9moM+Hkyr8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFFVwwxViHDGX9CPNxAhl9y35VHAMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVVZYRERGV0ljTVpmMEk4M0VDR1gzTGZsVWNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwldDMA0G
CSqGSIb3DQEBCwUAA4IBAQB3p3puchW9l1Y6IYScW/aGcBEZCwgpei5FDqjkcUP0
LX5xaoE0BQe7LZkoYHvu1qCBNf5nTtQgPF+dExBUz+JGm8mBV+JxUcy+Ja+DMmUt
OOFDDbe23GV9pbAJNv25iCXcrikhkQBd0lB1Px7nr8SeI/cDEWN7P8lrTqvNLADp
MJaPS8L9SbQ9hcFzhlFc5qocHu91ZGgQOTG2FrDNbdMhpT1rC+HEQ3+yEue4f7nR
gFoo5uFo+y71VD3vAs78HW0PEA1yb1bjbuO2OdlPGh1bo+8bDweciYgQoCCCAMNA
kszFTvxjVOVpiTFfyO8/EgIDEyDfqT8vkVnZ6XgMLlZ+
-----END CERTIFICATE-----
Generated at Thu Dec 21 15:01:45 2023 by rpki-client on console-fra.rpki-client.org