Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_JlmVVdKr0noOf0CN_RyC5zuGxw.roa
File: _JlmVVdKr0noOf0CN_RyC5zuGxw.roa (raw, json)
Hash identifier: Zbj6qaplWOwz7jJ/LtR/ivuMi8Hdp+sJfHomNwUj+70=
Subject key identifier: FC:99:66:55:57:4A:AF:49:E8:39:FD:02:37:F4:72:0B:9C:EE:1B:1C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CC8C00D8DA0F55DFD1126F10BB3483A2A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_JlmVVdKr0noOf0CN_RyC5zuGxw.roa
Signing time: Tue 02 Jan 2024 05:57:58 +0000
ROA not before: Tue 02 Jan 2024 05:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 212.193.12.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:c0:0d:8d:a0:f5:5d:fd:11:26:f1:0b:b3:48:3a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 05:57:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc996655574aaf49e839fd0237f4720b9cee1b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9c:a3:2e:c6:86:9b:1b:18:0c:65:fd:57:cd:
70:79:52:75:af:df:c3:99:9a:6f:0a:09:27:76:bd:
f3:39:2c:fd:7e:2b:84:4d:1d:c0:ff:d3:f2:64:87:
b2:6e:56:86:19:ab:99:d8:b1:4b:62:33:f6:16:9e:
17:79:3c:fc:c5:53:4f:d5:5b:31:af:4e:fd:e2:3c:
de:4c:e5:23:f9:a2:a5:51:79:58:4c:bd:18:b7:85:
84:cc:15:09:e3:56:cf:7d:3e:3f:6a:50:46:80:2e:
1a:91:a7:8f:7c:cf:28:0a:0c:ca:ef:1f:66:44:75:
c4:4f:50:bb:cc:84:2e:78:b4:09:5d:dd:66:6a:e5:
9d:99:b6:03:aa:10:24:06:72:cc:bc:41:5b:a1:98:
a3:ba:8a:fa:d1:e3:7a:88:26:78:fa:b6:12:66:87:
81:c6:b3:eb:aa:96:b6:65:33:a4:dd:6f:bf:43:5a:
2b:3b:3a:2c:5d:3f:1a:ab:30:93:a6:c4:2f:5b:36:
0c:aa:9a:c7:d7:2b:76:bb:75:a2:23:e3:d2:5f:58:
12:05:57:7e:2c:ec:1e:a6:29:01:28:14:f9:03:7b:
cf:70:b5:e2:f2:9f:aa:34:70:20:d3:68:84:3f:79:
93:44:5b:7c:4b:d3:3c:e1:58:6b:ae:3d:f5:c4:de:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:66:55:57:4A:AF:49:E8:39:FD:02:37:F4:72:0B:9C:EE:1B:1C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_JlmVVdKr0noOf0CN_RyC5zuGxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
194.87.26.0/24
194.87.128.0/24
212.192.214.0/24
212.192.222.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
65:41:76:3c:4b:59:17:51:0f:8c:c5:5e:36:80:6a:79:6d:8e:
f4:78:b2:48:14:5a:6d:26:de:4a:fe:29:c5:dd:d0:4f:6a:dd:
b3:c8:a0:06:b2:5d:18:de:6d:cd:7a:16:46:66:1e:53:1d:0b:
26:46:96:47:97:31:55:2d:74:54:0a:ac:d9:67:aa:80:91:4e:
c7:7b:2f:a6:39:47:6e:34:27:12:91:c2:ba:de:2b:43:92:e2:
9f:ea:03:8b:12:a5:05:60:3a:22:34:a7:71:38:6a:67:da:8c:
3f:c2:bf:68:42:15:03:1e:8e:ac:23:8d:b1:46:46:28:3c:37:
09:8d:c9:df:19:c5:45:1f:35:52:ac:41:6b:f4:e3:2a:0c:8c:
fd:fa:8b:15:59:8c:bb:72:7a:da:58:d9:00:53:a8:38:cd:d4:
c9:0d:30:a6:07:40:f4:51:5f:95:85:72:41:f6:3b:f8:b7:0d:
55:05:46:59:a0:3a:d9:b2:00:0d:0d:91:38:d8:66:89:62:cb:
93:87:4b:75:46:58:76:ea:14:ef:b1:a4:06:73:37:b9:20:01:
28:e1:c9:a3:5c:df:21:36:0d:6d:fe:94:63:8f:c6:b3:ef:80:
cd:62:fd:e6:ae:e9:ed:87:fc:fc:db:85:69:be:45:6e:7a:f5:
8e:14:21:c2
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYzIwA2NoPVd/REm8QuzSDoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMDU1NzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzk5NjY1NTU3NGFhZjQ5ZTgzOWZkMDIzN2Y0NzIwYjljZWUxYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpyjLsaGmxsYDGX9V81weVJ1r9/D
mZpvCgkndr3zOSz9fiuETR3A/9PyZIeyblaGGauZ2LFLYjP2Fp4XeTz8xVNP1Vsx
r0794jzeTOUj+aKlUXlYTL0Yt4WEzBUJ41bPfT4/alBGgC4akaePfM8oCgzK7x9m
RHXET1C7zIQueLQJXd1mauWdmbYDqhAkBnLMvEFboZijuor60eN6iCZ4+rYSZoeB
xrPrqpa2ZTOk3W+/Q1orOzosXT8aqzCTpsQvWzYMqprH1yt2u3WiI+PSX1gSBVd+
LOwepikBKBT5A3vPcLXi8p+qNHAg02iEP3mTRFt8S9M84Vhrrj31xN6UiQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFPyZZlVXSq9J6Dn9Ajf0cguc7hscMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvX0psbVZWZEtyMG5vT2YwQ05fUnlDNXp1R3h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwXwvAwQA
wlcaAwQAwleAAwQA1MDWAwQA1MDeAwQA1MEMMA0GCSqGSIb3DQEBCwUAA4IBAQBl
QXY8S1kXUQ+MxV42gGp5bY70eLJIFFptJt5K/inF3dBPat2zyKAGsl0Y3m3NehZG
Zh5THQsmRpZHlzFVLXRUCqzZZ6qAkU7Hey+mOUduNCcSkcK63itDkuKf6gOLEqUF
YDoiNKdxOGpn2ow/wr9oQhUDHo6sI42xRkYoPDcJjcnfGcVFHzVSrEFr9OMqDIz9
+osVWYy7cnraWNkAU6g4zdTJDTCmB0D0UV+VhXJB9jv4tw1VBUZZoDrZsgANDZE4
2GaJYsuTh0t1Rlh26hTvsaQGcze5IAEo4cmjXN8hNg1t/pRjj8az74DNYv3mrunt
h/z824VpvkVuevWOFCHC
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:21 2024 by rpki-client on console-fra.rpki-client.org