Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bZI_nU1T75reskqPWlu11QnyUEw.roa
File: bZI_nU1T75reskqPWlu11QnyUEw.roa (raw, json)
Hash identifier: rKzKAYsjkUqcJWHV6v9yDp5Jg1dnmvxxMyTFIswF8/4=
Subject key identifier: 6D:92:3F:9D:4D:53:EF:9A:DE:B2:4A:8F:5A:5B:B5:D5:09:F2:50:4C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A03CA4EEA5BD05F3CFCBCB165EBEEC870
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bZI_nU1T75reskqPWlu11QnyUEw.roa
Signing time: Thu 17 Aug 2023 13:58:24 +0000
ROA not before: Thu 17 Aug 2023 13:58:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 195.133.81.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:ca:4e:ea:5b:d0:5f:3c:fc:bc:b1:65:eb:ee:c8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 17 13:58:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d923f9d4d53ef9adeb24a8f5a5bb5d509f2504c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:93:21:80:4d:70:a4:44:12:26:0c:05:dd:94:
1d:d2:be:8f:19:e5:f1:ed:95:b1:4c:66:51:92:29:
12:ad:b2:ec:fd:e3:48:63:85:b8:51:4d:36:d9:9b:
b7:48:79:cd:a7:dd:14:ab:25:f4:a3:fd:f3:57:15:
97:0b:3f:6f:6f:3f:d2:d4:af:d3:d0:ed:56:2d:19:
db:d1:77:b1:37:90:05:0b:e5:52:ee:9b:3b:67:78:
28:81:f9:1c:1b:f2:98:93:d2:0f:34:10:c1:c8:7b:
06:36:d2:a0:b6:e8:4e:e5:3f:96:02:5c:47:51:c9:
ad:8a:a3:e1:2c:00:99:ec:8a:2b:f7:9e:4d:56:5a:
99:eb:22:80:0e:9c:64:d6:30:fb:03:f3:77:47:15:
c5:9f:cd:51:79:02:53:7e:9f:57:93:7a:30:5f:57:
61:c4:3d:fa:8d:e7:48:97:46:5b:be:ce:de:85:e9:
99:28:05:0c:1d:cf:34:88:b8:59:58:85:bf:1c:01:
bd:ba:d7:ed:b6:21:35:be:96:dd:b4:04:cc:69:10:
3e:d0:01:f4:e2:86:57:03:ba:0c:f8:31:36:34:de:
de:68:7c:5b:cc:29:19:e1:fb:13:0a:5b:fb:af:2c:
7b:be:14:2b:8f:05:a9:2c:28:75:1e:33:64:91:a4:
cd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:92:3F:9D:4D:53:EF:9A:DE:B2:4A:8F:5A:5B:B5:D5:09:F2:50:4C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bZI_nU1T75reskqPWlu11QnyUEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.30.0/24
195.133.81.0/24
195.133.194.0/24
212.193.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:10:b5:2d:a9:9c:fa:2a:ca:ba:e4:5a:51:7b:d0:6d:84:fc:
cc:6e:ec:6a:d0:9b:73:8a:f7:9d:88:f5:e9:24:71:5a:6e:0f:
84:8b:ec:3d:eb:d3:03:22:68:aa:b6:b6:40:fb:82:82:82:9a:
1f:9f:04:09:17:90:f2:ce:c4:cd:fc:eb:f1:e9:9e:71:96:d6:
69:f1:e4:97:ce:b2:ef:57:66:3a:a5:d5:01:80:98:c2:0a:a2:
0c:4b:fb:9f:83:7e:cf:af:4b:94:3f:b7:3b:c9:94:bd:8f:54:
51:d5:06:09:a9:3c:58:9c:d9:4e:14:2a:c4:d0:73:37:6e:7a:
f3:54:31:9c:06:65:d0:c1:a1:61:98:40:a4:80:1c:44:c8:7c:
61:f4:84:3d:54:6d:30:54:72:b7:95:78:ef:68:ac:6d:1e:b6:
32:7d:2b:f3:e0:81:b9:b7:a9:95:f4:fc:2f:3f:8e:02:6a:18:
c5:1c:ec:fb:4c:17:e6:59:5f:d2:59:0e:08:a5:ca:3f:7f:59:
5f:2d:f5:b1:e8:39:67:84:4b:c0:53:77:ed:6a:e6:c5:53:d1:
d1:66:c2:81:f3:89:0e:1b:d3:d8:fb:9c:ae:69:e1:f5:c3:00:
08:9e:fa:85:04:dc:6f:df:5c:c8:20:49:07:66:89:d1:d4:fc:
55:64:a3:9b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYoDyk7qW9BfPPy8sWXr7shwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwODE3MTM1ODI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDkyM2Y5ZDRkNTNlZjlhZGViMjRhOGY1YTViYjVkNTA5ZjI1MDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpMhgE1wpEQSJgwF3ZQd0r6PGeXx
7ZWxTGZRkikSrbLs/eNIY4W4UU022Zu3SHnNp90UqyX0o/3zVxWXCz9vbz/S1K/T
0O1WLRnb0XexN5AFC+VS7ps7Z3gogfkcG/KYk9IPNBDByHsGNtKgtuhO5T+WAlxH
UcmtiqPhLACZ7Ior955NVlqZ6yKADpxk1jD7A/N3RxXFn81ReQJTfp9Xk3owX1dh
xD36jedIl0Zbvs7ehemZKAUMHc80iLhZWIW/HAG9utfttiE1vpbdtATMaRA+0AH0
4oZXA7oM+DE2NN7eaHxbzCkZ4fsTClv7ryx7vhQrjwWpLCh1HjNkkaTNtwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFG2SP51NU++a3rJKj1pbtdUJ8lBMMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvYlpJX25VMVQ3NXJlc2txUFdsdTExUW55VUV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwoceAwQA
w4VRAwQAw4XCAwQA1MEGMA0GCSqGSIb3DQEBCwUAA4IBAQAMELUtqZz6Ksq65FpR
e9BthPzMbuxq0JtzivediPXpJHFabg+Ei+w969MDImiqtrZA+4KCgpofnwQJF5Dy
zsTN/Ovx6Z5xltZp8eSXzrLvV2Y6pdUBgJjCCqIMS/ufg37Pr0uUP7c7yZS9j1RR
1QYJqTxYnNlOFCrE0HM3bnrzVDGcBmXQwaFhmECkgBxEyHxh9IQ9VG0wVHK3lXjv
aKxtHrYyfSvz4IG5t6mV9PwvP44CahjFHOz7TBfmWV/SWQ4Ipco/f1lfLfWx6Dln
hEvAU3ftaubFU9HRZsKB84kOG9PY+5yuaeH1wwAInvqFBNxv31zIIEkHZonR1PxV
ZKOb
-----END CERTIFICATE-----
Generated at Thu Aug 17 16:38:34 2023 by rpki-client on console-ams.rpki-client.org