Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gP6zj517_t0mE83kMuVH-QjWWHw.roa
File: gP6zj517_t0mE83kMuVH-QjWWHw.roa (raw, json)
Hash identifier: DUGLto2mW/cGdPRZY7pRL5kZQUy0pAvWb8tgr3NBiR4=
Subject key identifier: 80:FE:B3:8F:9D:7B:FE:DD:26:13:CD:E4:32:E5:47:F9:08:D6:58:7C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01899DC42E6553609D0445455C7B1066F7F9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gP6zj517_t0mE83kMuVH-QjWWHw.roa
Signing time: Fri 28 Jul 2023 18:30:27 +0000
ROA not before: Fri 28 Jul 2023 18:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30938
IP address blocks: 194.87.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9d:c4:2e:65:53:60:9d:04:45:45:5c:7b:10:66:f7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 28 18:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80feb38f9d7bfedd2613cde432e547f908d6587c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:b5:58:42:5a:ea:cb:40:96:83:0f:be:24:
b7:7d:eb:44:bd:49:72:64:dd:ec:0b:60:02:00:b2:
c8:2f:0b:54:71:b0:e1:71:76:89:8e:33:62:34:16:
f1:d8:92:39:64:57:64:30:62:e6:8a:ce:1b:38:20:
36:a9:5d:50:08:82:cd:19:d3:0c:e6:6b:a5:9b:07:
1b:3d:8c:af:01:e6:18:f6:45:d5:13:88:86:27:a1:
ea:43:93:99:98:62:e3:9a:52:07:e4:62:8f:87:0e:
db:5e:42:cc:14:49:34:77:47:fb:16:10:3c:79:bb:
59:88:39:7b:f4:00:8c:8a:c6:b8:71:1b:ce:88:c4:
a7:2c:8d:df:8a:c5:75:02:f5:64:01:d2:fe:af:50:
8a:2c:14:73:d2:eb:d4:7d:a8:21:a5:ee:e1:51:8e:
29:ef:ad:f9:a0:2d:44:91:c1:9f:2f:35:9e:cb:6d:
9a:b3:89:3e:f0:b7:cd:46:9c:12:ac:b1:47:7a:8b:
a6:62:7b:ec:ac:47:9d:9b:5e:69:4a:d5:49:a5:ee:
4c:23:50:a1:f5:65:50:22:0c:57:f4:f7:b5:d7:fa:
e7:b3:cd:23:a2:da:9a:e5:e8:fa:9f:5f:52:27:ba:
df:8c:b6:4f:b8:f7:1a:39:5d:b7:86:18:14:83:dd:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FE:B3:8F:9D:7B:FE:DD:26:13:CD:E4:32:E5:47:F9:08:D6:58:7C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gP6zj517_t0mE83kMuVH-QjWWHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.207.0/24
Signature Algorithm: sha256WithRSAEncryption
69:bd:37:1c:76:f0:c0:dc:a2:6d:e4:42:f3:cc:92:97:55:f1:
b1:bf:a7:17:04:0b:0f:25:41:47:16:2a:fc:47:89:ab:87:0b:
fb:bf:d2:32:2b:0b:44:69:d3:0e:a1:e3:95:be:4b:d6:d0:47:
e1:78:58:a4:79:4d:26:18:8e:de:0d:a3:8e:69:dc:06:af:77:
f4:3e:c8:0f:84:d4:6b:73:18:e4:28:3d:4b:10:40:13:13:40:
11:a1:d7:67:6e:0e:65:90:d8:96:bf:98:97:ff:ff:2b:9f:2f:
79:5e:81:c6:3f:3e:aa:88:65:18:ff:48:61:6a:91:4b:44:cb:
27:8d:12:5a:1a:dc:27:6c:1b:4f:60:a5:83:80:0b:b5:5d:26:
c2:f8:41:5f:b7:48:31:ca:a8:0a:c3:94:76:cd:dc:6e:4a:c9:
5b:ce:af:0f:41:97:7c:b9:19:f2:cf:ad:9b:58:50:03:15:6c:
54:c9:63:37:65:a6:75:54:cc:09:bc:8a:0c:4a:53:b5:cc:7b:
d2:fc:65:a0:34:ee:42:86:37:bb:b2:2a:86:7a:a9:4c:d2:c1:
49:55:62:47:59:f7:4f:b1:83:47:31:3c:b2:a5:89:f7:60:d5:
15:c0:dc:f4:85:17:3f:2e:94:95:3f:8c:c0:f3:93:cb:11:c0:
bc:b6:65:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmdxC5lU2CdBEVFXHsQZvf5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNzI4MTgzMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGZlYjM4ZjlkN2JmZWRkMjYxM2NkZTQzMmU1NDdmOTA4ZDY1ODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn+1WEJa6stAloMPviS3fetEvUly
ZN3sC2ACALLILwtUcbDhcXaJjjNiNBbx2JI5ZFdkMGLmis4bOCA2qV1QCILNGdMM
5mulmwcbPYyvAeYY9kXVE4iGJ6HqQ5OZmGLjmlIH5GKPhw7bXkLMFEk0d0f7FhA8
ebtZiDl79ACMisa4cRvOiMSnLI3fisV1AvVkAdL+r1CKLBRz0uvUfaghpe7hUY4p
7635oC1EkcGfLzWey22as4k+8LfNRpwSrLFHeoumYnvsrEedm15pStVJpe5MI1Ch
9WVQIgxX9Pe11/rns80jotqa5ej6n19SJ7rfjLZPuPcaOV23hhgUg90V6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFID+s4+de/7dJhPN5DLlR/kI1lh8MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvZ1A2emo1MTdfdDBtRTgza011VkgtUWpXV0h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlfPMA0G
CSqGSIb3DQEBCwUAA4IBAQBpvTccdvDA3KJt5ELzzJKXVfGxv6cXBAsPJUFHFir8
R4mrhwv7v9IyKwtEadMOoeOVvkvW0EfheFikeU0mGI7eDaOOadwGr3f0PsgPhNRr
cxjkKD1LEEATE0ARoddnbg5lkNiWv5iX//8rny95XoHGPz6qiGUY/0hhapFLRMsn
jRJaGtwnbBtPYKWDgAu1XSbC+EFft0gxyqgKw5R2zdxuSslbzq8PQZd8uRnyz62b
WFADFWxUyWM3ZaZ1VMwJvIoMSlO1zHvS/GWgNO5Chje7siqGeqlM0sFJVWJHWfdP
sYNHMTyypYn3YNUVwNz0hRc/LpSVP4zA85PLEcC8tmVs
-----END CERTIFICATE-----
Generated at Wed Sep 13 12:01:18 2023 by rpki-client on console-ams.rpki-client.org