Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f_RXhlvLmd74VpErR-njncyDu6g.roa
File: f_RXhlvLmd74VpErR-njncyDu6g.roa (raw, json)
Hash identifier: lc4eDmJAjzkWazmx0Jt9oth06gn29h8EYpX7W3GW/AI=
Subject key identifier: 7F:F4:57:86:5B:CB:99:DE:F8:56:91:2B:47:E9:E3:9D:CC:83:BB:A8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01872BA72FDFF89F723A2536CEC2A291EF40
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f_RXhlvLmd74VpErR-njncyDu6g.roa
Signing time: Wed 29 Mar 2023 04:36:29 +0000
ROA not before: Wed 29 Mar 2023 04:36:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 193.108.112.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2b:a7:2f:df:f8:9f:72:3a:25:36:ce:c2:a2:91:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 29 04:36:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff457865bcb99def856912b47e9e39dcc83bba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:e9:c3:b5:81:6c:92:d6:c5:c1:45:d6:c6:
8b:5d:c6:57:44:52:e1:87:57:c3:a2:a6:ca:e0:49:
ed:3a:60:b0:ec:4c:3a:95:bc:f9:82:99:1c:55:94:
a2:1b:92:8c:f1:5c:1d:c4:85:e7:9c:1a:e7:32:f2:
b3:d8:c4:e2:9e:62:50:0b:1b:87:2a:dd:aa:d8:e8:
ad:fc:c7:06:6a:78:bd:ee:81:39:18:07:52:52:0a:
17:fd:f0:67:36:9c:ec:a8:d3:a5:2d:86:b0:0e:2a:
75:d3:8e:6d:b0:19:56:36:3d:45:3a:cc:85:de:b2:
ee:b7:06:96:66:25:c2:97:08:9a:5b:1d:b2:a6:ea:
77:64:26:a1:e3:42:2b:ae:d7:97:5e:e0:0e:85:2b:
57:05:54:a5:0b:10:1c:a4:ee:33:e7:f5:34:14:00:
8f:74:c3:0d:89:86:b0:5b:82:e6:c4:26:a4:49:72:
c5:e7:4f:68:49:14:d9:58:e5:9d:4e:fb:ce:89:b6:
63:fc:2c:fd:3d:8d:f2:96:49:c3:b5:e6:08:5d:de:
05:2b:9b:00:cd:7a:46:7b:3d:5f:59:e4:77:2c:11:
d8:0b:65:ac:93:9f:2f:c1:79:74:62:a3:4e:be:bf:
13:4a:91:7e:e4:2b:a3:12:af:7d:5c:68:49:0b:9b:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:57:86:5B:CB:99:DE:F8:56:91:2B:47:E9:E3:9D:CC:83:BB:A8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f_RXhlvLmd74VpErR-njncyDu6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.209.0/24
193.108.112.0/24
194.58.60.0/24
195.133.31.0/24
212.192.6.0/24
212.193.10.0/24
Signature Algorithm: sha256WithRSAEncryption
56:58:ac:e0:1b:d8:8b:4c:21:19:ca:d5:4c:29:82:11:9d:cb:
d1:4a:af:72:35:43:45:1d:9c:5c:0d:f0:a3:5d:49:95:e4:64:
5e:35:f5:71:58:20:92:d9:c4:50:3d:10:a9:52:74:f3:1a:93:
77:07:ab:5d:8e:71:45:65:ef:af:e5:4e:1a:ee:58:29:e8:0b:
9d:06:47:be:0a:72:6f:29:d5:d2:3a:d5:74:1f:7a:d7:34:ee:
07:88:7f:9c:f7:90:c3:86:58:10:d2:11:e0:9d:04:e7:b2:76:
60:46:86:df:c9:c7:2d:dc:c6:54:da:4d:63:14:76:bb:fb:f0:
1d:d4:0d:25:ad:f5:93:ee:b5:76:4d:8a:ab:c6:e9:b6:a5:37:
58:af:58:07:6e:4d:56:a4:6a:30:37:2f:77:4a:7b:dd:0e:bf:
0b:9c:96:d4:de:52:3d:0f:24:a1:67:31:ac:76:dd:52:c4:52:
5c:19:a8:90:b3:d5:1b:f6:ea:5b:de:6f:4b:43:16:4d:7f:3d:
3d:f4:f0:4f:da:ce:54:ba:f5:d8:c7:12:22:7c:e4:ab:d2:4b:
5f:4d:cb:d0:b4:fc:9e:4f:e5:03:81:82:81:8e:67:7b:02:b0:
96:5a:0f:55:75:04:1c:9f:dd:0b:f2:ae:9a:54:14:8d:88:35:
81:72:2e:a6
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYcrpy/f+J9yOiU2zsKike9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMzI5MDQzNjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmY0NTc4NjViY2I5OWRlZjg1NjkxMmI0N2U5ZTM5ZGNjODNiYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp3pw7WBbJLWxcFF1saLXcZXRFLh
h1fDoqbK4EntOmCw7Ew6lbz5gpkcVZSiG5KM8VwdxIXnnBrnMvKz2MTinmJQCxuH
Kt2q2Oit/McGani97oE5GAdSUgoX/fBnNpzsqNOlLYawDip1045tsBlWNj1FOsyF
3rLutwaWZiXClwiaWx2ypup3ZCah40IrrteXXuAOhStXBVSlCxAcpO4z5/U0FACP
dMMNiYawW4LmxCakSXLF509oSRTZWOWdTvvOibZj/Cz9PY3ylknDteYIXd4FK5sA
zXpGez1fWeR3LBHYC2Wsk58vwXl0YqNOvr8TSpF+5CujEq99XGhJC5tETwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFH/0V4Zby5ne+FaRK0fp453Mg7uoMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvZl9SWGhsdkxtZDc0VnBFclItbmpuY3lEdTZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwHzRAwQA
wWxwAwQAwjo8AwQAw4UfAwQA1MAGAwQA1MEKMA0GCSqGSIb3DQEBCwUAA4IBAQBW
WKzgG9iLTCEZytVMKYIRncvRSq9yNUNFHZxcDfCjXUmV5GReNfVxWCCS2cRQPRCp
UnTzGpN3B6tdjnFFZe+v5U4a7lgp6AudBke+CnJvKdXSOtV0H3rXNO4HiH+c95DD
hlgQ0hHgnQTnsnZgRobfycct3MZU2k1jFHa7+/Ad1A0lrfWT7rV2TYqrxum2pTdY
r1gHbk1WpGowNy93SnvdDr8LnJbU3lI9DyShZzGsdt1SxFJcGaiQs9Ub9upb3m9L
QxZNfz099PBP2s5UuvXYxxIifOSr0ktfTcvQtPyeT+UDgYKBjmd7ArCWWg9VdQQc
n90L8q6aVBSNiDWBci6m
-----END CERTIFICATE-----
Generated at Tue Aug 15 08:53:19 2023 by rpki-client on console-fra.rpki-client.org