Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bVhuDn_iQ1qEto-Luisp2L0dn0k.roa
File: bVhuDn_iQ1qEto-Luisp2L0dn0k.roa (raw, json)
Hash identifier: xx4IUaDeNpBoLttPw/hgz6G4UFBfVKiZ4LGih/8B4rs=
Subject key identifier: 6D:58:6E:0E:7F:E2:43:5A:84:B6:8F:8B:BA:2B:29:D8:BD:1D:9F:49
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187FE94AF5DB4F7085C47185D1CB9755CC8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bVhuDn_iQ1qEto-Luisp2L0dn0k.roa
Signing time: Tue 09 May 2023 03:36:09 +0000
ROA not before: Tue 09 May 2023 03:36:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 212.193.15.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
185.72.9.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fe:94:af:5d:b4:f7:08:5c:47:18:5d:1c:b9:75:5c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 9 03:36:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d586e0e7fe2435a84b68f8bba2b29d8bd1d9f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a6:84:84:2d:0d:bd:0c:0c:a1:25:98:b5:d9:
20:34:cd:2a:00:a9:7e:e8:34:36:58:07:84:95:68:
6c:09:2f:2f:fe:05:7a:5e:c3:e4:c5:3b:72:5c:1d:
94:da:cf:04:0f:c4:78:70:72:b0:5d:6e:b5:7c:0b:
57:e1:f0:c5:6f:69:d2:d2:5a:62:93:68:bc:a3:a7:
fb:ca:3d:c6:61:ef:75:c1:ed:8d:af:7b:68:f4:64:
1b:46:6d:25:e2:06:d1:b5:2f:d3:fa:ef:d7:23:2c:
ca:52:ff:56:dd:77:e9:3e:92:07:4e:9d:9f:80:fb:
11:5b:4b:97:0f:59:b3:5c:47:aa:ca:e1:ad:16:f3:
22:29:40:aa:54:e3:e1:76:10:2d:be:49:8f:a3:b3:
35:78:78:04:66:6a:0d:31:20:9a:4f:ce:6f:54:ef:
ad:7e:e8:cc:66:bc:34:46:c5:4d:1f:e8:b9:80:b4:
4e:5d:d0:d2:40:75:72:fd:0c:89:f0:9f:f7:b6:88:
c8:2a:89:91:6c:6b:d3:0a:46:db:a8:3d:3a:4b:ce:
cb:13:bb:d4:02:61:40:d1:d3:fc:bb:24:8f:5b:08:
31:10:6f:b7:d7:7c:74:34:8e:57:c1:2f:19:ef:4f:
6e:f5:94:96:fe:13:ed:4c:b1:f0:a1:d3:ea:a0:56:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:58:6E:0E:7F:E2:43:5A:84:B6:8F:8B:BA:2B:29:D8:BD:1D:9F:49
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bVhuDn_iQ1qEto-Luisp2L0dn0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.9.0/24
194.87.73.0/24
194.87.90.0/24
194.87.181.0/24
194.87.198.0/24
195.133.82.0/24
212.193.0.0-212.193.2.255
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f4:3d:47:59:6f:c4:7c:2d:11:04:7d:35:e5:71:84:3b:e5:
f1:09:a0:16:a2:cc:f8:b1:d2:c3:0c:b3:3c:17:13:13:55:f6:
84:9b:cc:5c:7f:7d:16:d7:46:2c:78:21:89:ef:d8:3c:23:0e:
93:21:2d:9e:49:d9:56:18:57:1c:40:86:95:57:da:87:1a:83:
3e:8e:df:51:a3:f4:ae:3a:1f:e7:68:70:9f:ba:4b:82:ab:0c:
d4:80:8e:5e:ef:32:a3:a8:45:82:48:0c:0a:2b:22:96:64:dd:
ef:cb:e4:7a:ae:ed:65:a2:49:82:99:37:12:70:07:c7:8b:71:
fd:47:38:66:7c:63:bb:35:24:bb:7d:9b:41:34:ca:a6:07:be:
d6:6f:d0:2a:92:cc:5f:6d:01:8f:35:67:21:d6:85:b7:87:70:
e9:a5:06:b9:96:8f:58:9c:6e:07:73:32:31:ef:a0:c1:11:92:
30:43:2b:e2:bf:cc:05:8d:d3:c6:ad:33:dd:1b:be:9f:e8:3e:
a6:0f:f1:fe:e3:39:bb:7e:5b:a2:f4:29:05:7a:72:6f:50:4b:
f9:15:aa:48:32:41:9f:5e:da:2d:ca:b1:88:21:5f:c1:4c:76:
2a:82:29:8a:26:7c:9a:79:61:ab:a1:78:e6:08:60:d2:7a:88:
04:90:c5:65
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYf+lK9dtPcIXEcYXRy5dVzIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNTA5MDMzNjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDU4NmUwZTdmZTI0MzVhODRiNjhmOGJiYTJiMjlkOGJkMWQ5ZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aaEhC0NvQwMoSWYtdkgNM0qAKl+
6DQ2WAeElWhsCS8v/gV6XsPkxTtyXB2U2s8ED8R4cHKwXW61fAtX4fDFb2nS0lpi
k2i8o6f7yj3GYe91we2Nr3to9GQbRm0l4gbRtS/T+u/XIyzKUv9W3XfpPpIHTp2f
gPsRW0uXD1mzXEeqyuGtFvMiKUCqVOPhdhAtvkmPo7M1eHgEZmoNMSCaT85vVO+t
fujMZrw0RsVNH+i5gLROXdDSQHVy/QyJ8J/3tojIKomRbGvTCkbbqD06S87LE7vU
AmFA0dP8uySPWwgxEG+313x0NI5XwS8Z709u9ZSW/hPtTLHwodPqoFaYkwIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFG1Ybg5/4kNahLaPi7orKdi9HZ9JMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvYlZodURuX2lRMXFFdG8tTHVpc3AyTDBkbjBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzA9BAIAATA3AwQAuUgJAwQA
wldJAwQAwldaAwQAwle1AwQAwlfGAwQAw4VSMAsDAwDUwQMEANTBAgMEANTBDzAN
BgkqhkiG9w0BAQsFAAOCAQEAcPQ9R1lvxHwtEQR9NeVxhDvl8QmgFqLM+LHSwwyz
PBcTE1X2hJvMXH99FtdGLHghie/YPCMOkyEtnknZVhhXHECGlVfahxqDPo7fUaP0
rjof52hwn7pLgqsM1ICOXu8yo6hFgkgMCisilmTd78vkeq7tZaJJgpk3EnAHx4tx
/Uc4ZnxjuzUku32bQTTKpge+1m/QKpLMX20BjzVnIdaFt4dw6aUGuZaPWJxuB3My
Me+gwRGSMEMr4r/MBY3Txq0z3Ru+n+g+pg/x/uM5u35bovQpBXpyb1BL+RWqSDJB
n17aLcqxiCFfwUx2KoIpiiZ8mnlhq6F45ghg0nqIBJDFZQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org