Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/X8m2AM32zkzQpOWWETEX_s5_qOA.roa
File: X8m2AM32zkzQpOWWETEX_s5_qOA.roa (raw, json)
Hash identifier: 08HbE4a4RcL7iyhlN6aOXDibEM5fBz1EmE8FfhZCzXw=
Subject key identifier: 5F:C9:B6:00:CD:F6:CE:4C:D0:A4:E5:96:11:31:17:FE:CE:7F:A8:E0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A2C3844791880A4AB890EDC4A9ABC5CD2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/X8m2AM32zkzQpOWWETEX_s5_qOA.roa
Signing time: Fri 25 Aug 2023 10:23:19 +0000
ROA not before: Fri 25 Aug 2023 10:23:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 194.87.21.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:38:44:79:18:80:a4:ab:89:0e:dc:4a:9a:bc:5c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 25 10:23:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fc9b600cdf6ce4cd0a4e596113117fece7fa8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e9:16:fe:0d:85:f5:37:8f:2f:ac:ad:fb:2c:
a6:83:b8:fe:5e:00:14:72:c9:43:58:13:c5:9b:5d:
22:f8:db:01:95:83:60:3f:9e:11:21:4e:e2:12:e7:
8f:ef:e3:dc:57:6d:50:b3:64:d3:48:8e:38:62:a8:
34:27:86:17:ca:d0:14:6d:79:c6:9d:ae:83:8e:4b:
07:78:da:79:91:b8:11:38:bc:2f:6b:95:3a:a7:2d:
ea:a3:5b:f0:39:5f:c8:09:16:e0:47:a0:92:72:5f:
09:04:83:d2:a6:5d:6f:c7:b8:5b:c2:61:1a:63:72:
1f:cd:07:59:90:5c:5b:3a:fa:9f:0c:83:e7:79:2f:
d5:6d:9e:91:6c:4d:8a:45:24:9c:63:73:e6:3f:9a:
7a:55:28:64:33:5f:81:d3:dd:73:3a:35:51:6a:9a:
92:a5:87:5f:07:a4:c6:3e:03:7d:b9:fd:76:79:05:
5b:87:c9:43:06:1e:26:c4:05:28:e4:a8:c5:55:20:
fc:b3:e7:34:b2:f3:6e:dd:fb:31:80:c2:d2:ca:dd:
9d:d9:ef:50:e8:7b:82:29:a4:b3:dc:c6:af:8d:95:
4f:ad:ed:1f:ee:15:97:59:17:87:57:8d:f3:40:77:
18:0e:5c:05:99:0a:ef:14:a8:42:75:c3:8e:94:0b:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C9:B6:00:CD:F6:CE:4C:D0:A4:E5:96:11:31:17:FE:CE:7F:A8:E0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/X8m2AM32zkzQpOWWETEX_s5_qOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.95.0/24
194.87.21.0/24
194.87.170.0/24
194.87.181.0/24
194.87.187.0/24
195.58.55.0/24
195.133.22.0/24
212.192.248.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d7:65:fc:bf:69:7e:54:3a:d7:c8:20:f7:9a:18:2b:95:b9:
29:56:29:11:a2:64:25:4f:ab:14:71:aa:7c:ce:78:a7:71:a7:
fa:9e:55:b3:46:56:18:c9:7f:87:18:ca:cd:2c:e1:a8:45:39:
40:bc:6e:e3:d5:fa:0f:18:d9:30:03:59:f4:1f:6c:a4:92:b5:
45:f4:f4:c9:66:40:69:55:fa:0a:1c:ca:88:17:e1:f4:1c:61:
02:7c:74:75:48:ca:69:4a:22:bc:8f:a2:9c:ba:93:9d:c8:93:
72:8a:f2:a4:08:b8:cb:ae:30:4d:89:ce:f6:f1:10:d9:4e:9c:
9b:6b:8f:ef:f0:fb:fe:20:d1:03:ce:d4:6b:59:db:8a:a9:95:
0d:01:76:8e:bb:f1:ac:c1:8c:79:7b:d5:bb:15:12:f3:43:fe:
77:d0:15:60:f1:80:98:51:09:c8:d2:23:56:62:e0:a1:c8:1f:
26:aa:ba:07:d2:87:eb:b8:29:93:65:a2:2d:67:36:43:5d:46:
1d:53:0d:5d:4e:ea:7b:95:5f:a5:6d:f1:57:79:f6:e8:67:ec:
95:fa:10:42:84:f9:d0:e0:da:56:97:d5:4f:a1:eb:cd:be:4c:
43:25:fc:38:cb:c1:d2:34:ee:ae:c3:17:2d:15:fd:91:24:6e:
c9:b3:14:bd
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYosOER5GICkq4kO3EqavFzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwODI1MTAyMzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmM5YjYwMGNkZjZjZTRjZDBhNGU1OTYxMTMxMTdmZWNlN2ZhOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+kW/g2F9TePL6yt+yymg7j+XgAU
cslDWBPFm10i+NsBlYNgP54RIU7iEueP7+PcV21Qs2TTSI44Yqg0J4YXytAUbXnG
na6DjksHeNp5kbgROLwva5U6py3qo1vwOV/ICRbgR6CScl8JBIPSpl1vx7hbwmEa
Y3IfzQdZkFxbOvqfDIPneS/VbZ6RbE2KRSScY3PmP5p6VShkM1+B091zOjVRapqS
pYdfB6TGPgN9uf12eQVbh8lDBh4mxAUo5KjFVSD8s+c0svNu3fsxgMLSyt2d2e9Q
6HuCKaSz3MavjZVPre0f7hWXWReHV43zQHcYDlwFmQrvFKhCdcOOlAv24wIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFF/JtgDN9s5M0KTllhExF/7Of6jgMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvWDhtMkFNMzJ6a3pRcE9XV0VURVhfczVfcU9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAwXxfAwQA
wlcVAwQAwleqAwQAwle1AwQAwle7AwQAwzo3AwQAw4UWAwQA1MD4MA0GCSqGSIb3
DQEBCwUAA4IBAQBk12X8v2l+VDrXyCD3mhgrlbkpVikRomQlT6sUcap8znincaf6
nlWzRlYYyX+HGMrNLOGoRTlAvG7j1foPGNkwA1n0H2ykkrVF9PTJZkBpVfoKHMqI
F+H0HGECfHR1SMppSiK8j6KcupOdyJNyivKkCLjLrjBNic728RDZTpyba4/v8Pv+
INEDztRrWduKqZUNAXaOu/GswYx5e9W7FRLzQ/530BVg8YCYUQnI0iNWYuChyB8m
qroH0ofruCmTZaItZzZDXUYdUw1dTup7lV+lbfFXefboZ+yV+hBChPnQ4NpWl9VP
oevNvkxDJfw4y8HSNO6uwxctFf2RJG7JsxS9
-----END CERTIFICATE-----
Generated at Fri Aug 25 20:46:05 2023 by rpki-client on console-ams.rpki-client.org