Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_33lF_HDIeFV20gev5gHKSileTU.roa
File: _33lF_HDIeFV20gev5gHKSileTU.roa (raw, json)
Hash identifier: DAmve8pCdCMi/1YvRgj/L7BfaqkvOsYUCl86Dbzktr8=
Subject key identifier: FF:7D:E5:17:F1:C3:21:E1:55:DB:48:1E:BF:98:07:29:28:A5:79:35
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F6713F73F1AEBC8C9D29E512474ACC8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_33lF_HDIeFV20gev5gHKSileTU.roa
Signing time: Sun 01 Jan 2023 22:15:04 +0000
ROA not before: Sun 01 Jan 2023 22:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 194.87.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:13:f7:3f:1a:eb:c8:c9:d2:9e:51:24:74:ac:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff7de517f1c321e155db481ebf98072928a57935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:7d:52:3d:be:6a:02:65:70:ab:05:16:5b:
5f:13:8f:20:c7:98:d0:50:d1:66:9e:be:3d:5c:84:
34:46:10:fb:80:77:1a:c9:2c:bf:18:0a:2e:31:b6:
b6:7b:ba:e5:1b:64:85:4d:2c:df:e5:3b:83:59:a6:
cd:df:b5:fd:5a:5f:3d:ae:6e:0f:69:dd:53:74:81:
9c:15:89:b2:a6:3d:4f:e8:ea:0d:72:62:71:7f:aa:
5e:ef:bb:43:e9:2b:20:58:21:f6:72:20:07:05:36:
1f:09:2d:d7:9d:73:7a:da:5f:7b:18:13:9a:6b:80:
f3:d3:7a:9c:78:12:9e:a2:80:bd:e5:68:6c:44:6f:
58:12:c8:48:f0:0e:78:6f:10:08:34:d9:55:16:37:
c2:6e:2a:b9:be:4e:91:f8:16:6f:0b:ee:3f:17:da:
4d:9a:33:f7:6c:5c:b5:b8:4b:59:9e:e3:c9:d7:c7:
29:d2:f0:ff:7a:ce:0b:3c:2c:21:26:b4:bb:cf:e3:
c2:b8:36:85:92:1b:fe:df:41:2f:2a:10:e5:0e:44:
c8:a3:76:e0:e6:2a:76:5d:3b:55:1b:9f:24:a8:19:
84:35:99:b6:40:28:8e:14:4a:bd:03:f8:51:17:72:
f1:44:43:d6:97:3a:1c:40:68:ed:6d:f2:bd:92:ea:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7D:E5:17:F1:C3:21:E1:55:DB:48:1E:BF:98:07:29:28:A5:79:35
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_33lF_HDIeFV20gev5gHKSileTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.137.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a9:7e:43:52:bc:86:48:ce:c0:b4:73:00:cb:22:8f:b2:89:
c0:a8:f8:24:b1:b0:3b:59:f7:10:df:64:ae:92:2d:7f:53:f0:
51:24:4a:1c:f3:8e:7c:a8:9d:db:8b:a8:13:5e:0e:eb:15:f7:
9c:e2:3c:7b:ca:33:37:e2:b1:15:df:75:af:cb:dd:0e:64:83:
b2:be:e5:e2:f1:c2:2f:c7:11:88:b4:b1:0a:61:09:d6:6a:20:
32:05:03:82:63:f7:86:a3:b8:bb:a2:59:2f:c5:91:f5:c0:85:
88:92:84:04:ab:62:86:e6:db:1c:68:18:19:2b:d5:f5:dd:52:
70:42:b9:c7:50:de:a4:c4:7b:9c:9f:0f:8d:16:46:5a:a2:a3:
0d:cb:68:f5:6b:e9:89:95:a8:39:5f:99:05:2d:e3:89:89:72:
9f:41:03:db:1b:de:4f:b9:41:90:e5:43:74:70:7d:36:85:73:
4b:ef:46:42:0c:98:3a:53:3b:70:20:29:95:f3:ca:57:a3:b1:
a9:78:e7:ff:59:6c:6e:7a:9d:8e:7b:03:73:50:d4:b5:62:ae:
50:2c:d0:dd:1a:2a:67:bf:47:f6:46:56:7b:23:a0:7d:c7:50:
68:96:98:08:f0:2b:1b:56:39:1d:08:98:c6:3a:94:86:70:aa:
0f:e1:33:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvZxP3PxrryMnSnlEkdKzIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTAxMjIxNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjdkZTUxN2YxYzMyMWUxNTVkYjQ4MWViZjk4MDcyOTI4YTU3OTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizN9Uj2+agJlcKsFFltfE48gx5jQ
UNFmnr49XIQ0RhD7gHcaySy/GAouMba2e7rlG2SFTSzf5TuDWabN37X9Wl89rm4P
ad1TdIGcFYmypj1P6OoNcmJxf6pe77tD6SsgWCH2ciAHBTYfCS3XnXN62l97GBOa
a4Dz03qceBKeooC95WhsRG9YEshI8A54bxAINNlVFjfCbiq5vk6R+BZvC+4/F9pN
mjP3bFy1uEtZnuPJ18cp0vD/es4LPCwhJrS7z+PCuDaFkhv+30EvKhDlDkTIo3bg
5ip2XTtVG58kqBmENZm2QCiOFEq9A/hRF3LxREPWlzocQGjtbfK9kupEFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP995RfxwyHhVdtIHr+YBykopXk1MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvXzMzbEZfSERJZUZWMjBnZXY1Z0hLU2lsZVRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwleJMA0G
CSqGSIb3DQEBCwUAA4IBAQBpqX5DUryGSM7AtHMAyyKPsonAqPgksbA7WfcQ32Su
ki1/U/BRJEoc8458qJ3bi6gTXg7rFfec4jx7yjM34rEV33Wvy90OZIOyvuXi8cIv
xxGItLEKYQnWaiAyBQOCY/eGo7i7olkvxZH1wIWIkoQEq2KG5tscaBgZK9X13VJw
QrnHUN6kxHucnw+NFkZaoqMNy2j1a+mJlag5X5kFLeOJiXKfQQPbG95PuUGQ5UN0
cH02hXNL70ZCDJg6UztwICmV88pXo7GpeOf/WWxuep2OewNzUNS1Yq5QLNDdGipn
v0f2RlZ7I6B9x1BolpgI8CsbVjkdCJjGOpSGcKoP4TNG
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org