Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WWg7asDAKZvlNJlTVly5ND5Z7ik.roa
File: WWg7asDAKZvlNJlTVly5ND5Z7ik.roa (raw, json)
Hash identifier: zb+1PA+Usg42fJawO/O80bu6vrX6PPce5j8hRToF0RM=
Subject key identifier: 59:68:3B:6A:C0:C0:29:9B:E5:34:99:53:56:5C:B9:34:3E:59:EE:29
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189F7D96AD14F4CD87C3AE444B409DFBDC3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WWg7asDAKZvlNJlTVly5ND5Z7ik.roa
Signing time: Tue 15 Aug 2023 06:19:28 +0000
ROA not before: Tue 15 Aug 2023 06:19:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 195.133.194.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f7:d9:6a:d1:4f:4c:d8:7c:3a:e4:44:b4:09:df:bd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 15 06:19:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59683b6ac0c0299be5349953565cb9343e59ee29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:50:d9:7e:8a:4e:05:72:76:21:ba:59:42:
47:21:77:66:70:d9:23:83:64:5c:cb:b4:7c:1d:56:
5f:9a:51:79:0c:e2:28:ca:8c:18:ac:e7:5c:28:6c:
66:73:c8:5a:6e:5e:3d:7d:d4:cd:c2:c9:4e:c8:df:
43:d3:12:d2:e5:79:b0:44:5b:c1:f2:56:2a:2d:7d:
c2:c6:2e:14:07:21:26:7f:c1:df:52:c1:28:8d:9b:
49:fc:1d:22:9b:d4:ae:dd:07:bb:b8:e8:bf:cb:04:
38:1c:aa:ff:5e:3f:84:68:e6:91:59:b0:90:44:6d:
3d:dd:c7:6c:f6:62:42:48:71:31:7d:d5:e1:f0:31:
0b:0c:49:e6:76:05:4c:97:99:14:46:e9:22:18:23:
de:4e:23:3d:6d:97:78:e0:de:42:33:f4:29:63:76:
81:3f:7b:6f:06:c5:dd:06:0b:6b:f8:ec:22:a2:d8:
24:cf:08:c9:90:97:2e:2b:2b:6a:1e:28:cc:3e:13:
9d:98:6b:26:6c:2f:4b:13:6e:49:9d:50:9c:37:aa:
a2:ee:9b:cb:ad:4a:3f:03:3c:a7:39:5f:da:53:b4:
cb:f2:9d:ec:28:85:81:0d:33:b9:73:da:c5:88:97:
f6:50:e5:b9:80:26:dc:3d:a3:be:c4:68:d2:04:f6:
af:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:68:3B:6A:C0:C0:29:9B:E5:34:99:53:56:5C:B9:34:3E:59:EE:29
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WWg7asDAKZvlNJlTVly5ND5Z7ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.194.0/24
212.193.6.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e7:4e:83:f6:fd:e9:b5:0c:e2:bc:dc:ad:d0:3f:9d:e1:8f:
bf:a8:07:4e:6f:de:9b:c4:ca:fa:f1:06:1e:be:1d:6f:f4:f3:
17:a8:c1:66:42:41:48:1c:d1:8c:9f:9e:b7:30:32:1f:dc:fd:
80:d6:10:13:67:d8:e2:7e:b2:2b:2a:04:a7:bc:c4:b6:dd:79:
4e:55:d2:72:25:27:27:f5:6f:4d:c0:db:31:d4:d8:6b:12:1f:
29:76:47:d7:98:b5:2d:3c:8b:da:78:d2:0c:30:97:ef:78:ec:
63:87:14:0e:09:16:97:41:d5:b1:a0:08:85:6b:b8:d8:8c:dc:
a6:b8:7e:23:6b:5a:c9:b3:7f:01:cd:86:11:2f:b5:b1:4c:e3:
ac:b6:f1:38:9a:e6:6f:f3:98:c1:f9:3a:8f:71:98:d4:30:44:
89:30:ca:d7:aa:10:60:97:59:9b:a7:8b:7b:89:f1:8f:b2:2d:
e2:9d:39:4d:af:7e:9a:42:4f:9c:2b:1c:b7:55:c3:bb:e6:cc:
08:f8:a2:a4:1a:a3:94:db:6d:24:0b:e0:83:bd:6d:d7:43:61:
f7:71:f7:6b:1b:ab:46:45:ba:32:a5:e2:31:29:0e:5b:f0:ab:
f1:c1:57:5d:6e:08:9d:78:f3:00:72:24:63:c0:8b:b3:8a:bf:
44:02:86:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYn32WrRT0zYfDrkRLQJ373DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwODE1MDYxOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTY4M2I2YWMwYzAyOTliZTUzNDk5NTM1NjVjYjkzNDNlNTllZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7RQ2X6KTgVydiG6WUJHIXdmcNkj
g2Rcy7R8HVZfmlF5DOIoyowYrOdcKGxmc8habl49fdTNwslOyN9D0xLS5XmwRFvB
8lYqLX3Cxi4UByEmf8HfUsEojZtJ/B0im9Su3Qe7uOi/ywQ4HKr/Xj+EaOaRWbCQ
RG093cds9mJCSHExfdXh8DELDEnmdgVMl5kURukiGCPeTiM9bZd44N5CM/QpY3aB
P3tvBsXdBgtr+OwiotgkzwjJkJcuKytqHijMPhOdmGsmbC9LE25JnVCcN6qi7pvL
rUo/AzynOV/aU7TL8p3sKIWBDTO5c9rFiJf2UOW5gCbcPaO+xGjSBPavvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFloO2rAwCmb5TSZU1ZcuTQ+We4pMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvV1dnN2FzREFLWnZsTkpsVFZseTVORDVaN2lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw4XCAwQA
1MEGMA0GCSqGSIb3DQEBCwUAA4IBAQAh506D9v3ptQzivNyt0D+d4Y+/qAdOb96b
xMr68QYevh1v9PMXqMFmQkFIHNGMn563MDIf3P2A1hATZ9jifrIrKgSnvMS23XlO
VdJyJScn9W9NwNsx1NhrEh8pdkfXmLUtPIvaeNIMMJfveOxjhxQOCRaXQdWxoAiF
a7jYjNymuH4ja1rJs38BzYYRL7WxTOOstvE4muZv85jB+TqPcZjUMESJMMrXqhBg
l1mbp4t7ifGPsi3inTlNr36aQk+cKxy3VcO75swI+KKkGqOU220kC+CDvW3XQ2H3
cfdrG6tGRboypeIxKQ5b8KvxwVddbgidePMAciRjwIuzir9EAoYh
-----END CERTIFICATE-----
Generated at Thu Aug 17 13:35:58 2023 by rpki-client on console-ams.rpki-client.org