Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h9Fee6xCLOV7fed67eA9xQgmHiY.roa
File: h9Fee6xCLOV7fed67eA9xQgmHiY.roa (raw, json)
Hash identifier: 36h31C+27FSYiP112Ga3RpZSJgcOrAMDrfuWrQqWfAc=
Subject key identifier: 87:D1:5E:7B:AC:42:2C:E5:7B:7D:E7:7A:ED:E0:3D:C5:08:26:1E:26
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01892028C76529D1DE3DD1599C8F43D841D2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h9Fee6xCLOV7fed67eA9xQgmHiY.roa
Signing time: Tue 04 Jul 2023 09:08:10 +0000
ROA not before: Tue 04 Jul 2023 09:08:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 212.192.211.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:28:c7:65:29:d1:de:3d:d1:59:9c:8f:43:d8:41:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 4 09:08:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87d15e7bac422ce57b7de77aede03dc508261e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:ee:f0:09:64:17:26:84:3a:4b:21:1a:6e:
60:b1:1c:2b:b5:d5:33:e7:d4:3a:89:8f:c5:bb:2d:
d2:0a:28:0c:45:94:a5:af:3c:9b:b3:df:9f:7a:ce:
c4:51:56:69:22:ae:43:58:17:3b:ce:98:99:97:44:
0f:ff:cb:cd:5e:96:17:a6:ea:48:81:07:98:07:6f:
d9:91:b2:f5:29:ee:e0:5d:a1:82:64:28:e4:e2:0d:
7f:c6:e9:31:9c:f9:c1:6f:09:a1:e8:43:77:8a:b7:
21:de:f7:a3:96:d1:ae:75:44:ce:e5:fb:d7:36:46:
7a:d9:36:56:bd:d6:93:0c:e9:8e:4d:96:b2:28:12:
b3:e5:ff:fd:ca:32:99:ce:35:c2:2d:f0:94:52:9e:
69:55:5f:8e:4a:4d:61:6e:1f:1d:12:bd:9d:99:2b:
64:b4:14:5d:e1:cd:f1:bd:1f:95:36:ef:83:ed:b7:
13:9f:5d:e7:5d:8e:0c:32:97:5a:19:26:c8:10:25:
c6:7c:5d:c9:5c:51:bc:b1:fa:68:e5:ba:2e:63:db:
56:31:7c:fd:60:8d:87:29:97:39:e1:11:96:82:a8:
58:9f:e1:b8:0b:92:45:14:e0:a3:fb:e5:69:1d:d8:
e4:da:95:63:3f:e4:ba:04:0f:53:b1:17:3b:75:8a:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D1:5E:7B:AC:42:2C:E5:7B:7D:E7:7A:ED:E0:3D:C5:08:26:1E:26
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/h9Fee6xCLOV7fed67eA9xQgmHiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.38.0/24
212.192.211.0/24
Signature Algorithm: sha256WithRSAEncryption
17:8c:c8:0f:a2:df:6f:b6:db:76:f9:a0:ae:16:da:f6:a4:79:
5d:c9:d7:2f:24:6c:6d:b7:27:04:fb:a7:24:e9:ca:02:6e:6c:
95:7f:a6:ab:f2:44:7f:7f:25:87:6e:53:75:ac:bd:03:b2:15:
26:65:0d:84:79:57:cf:3c:de:c3:bf:b2:bd:3f:00:2d:ca:67:
82:dc:34:10:52:ac:fb:63:a0:60:f3:54:0d:18:65:7e:1a:fe:
c8:70:1e:d5:ac:0d:cc:55:86:c5:8e:db:a4:a3:29:91:09:21:
3d:f7:c8:9d:48:92:fa:eb:2c:6d:8e:ea:94:ee:9a:da:c9:69:
dc:3c:ef:a1:8e:7d:b3:77:16:ba:0f:c2:3e:80:d2:22:64:3f:
1d:ac:f4:d2:1e:d8:02:4f:5d:da:57:bd:ba:b1:a6:23:35:c3:
5a:16:1a:a4:da:41:f3:67:63:67:68:d1:2f:81:12:81:f7:ef:
3f:4e:69:24:52:76:ce:19:6a:dd:4d:c9:8f:3f:e1:02:c7:52:
d9:0a:2a:9e:52:9a:2b:0b:cb:6c:05:28:9d:f8:b9:c3:ec:c7:
cf:22:ad:57:12:5f:0a:88:bb:c3:c7:3a:84:21:2b:19:2c:21:
9f:db:1d:97:9e:91:ed:a9:4a:b0:72:13:d7:e8:ea:2f:65:95:
d9:f4:e3:be
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkgKMdlKdHePdFZnI9D2EHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNzA0MDkwODEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2QxNWU3YmFjNDIyY2U1N2I3ZGU3N2FlZGUwM2RjNTA4MjYxZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndbu8AlkFyaEOkshGm5gsRwrtdUz
59Q6iY/Fuy3SCigMRZSlrzybs9+fes7EUVZpIq5DWBc7zpiZl0QP/8vNXpYXpupI
gQeYB2/ZkbL1Ke7gXaGCZCjk4g1/xukxnPnBbwmh6EN3irch3vejltGudUTO5fvX
NkZ62TZWvdaTDOmOTZayKBKz5f/9yjKZzjXCLfCUUp5pVV+OSk1hbh8dEr2dmStk
tBRd4c3xvR+VNu+D7bcTn13nXY4MMpdaGSbIECXGfF3JXFG8sfpo5bouY9tWMXz9
YI2HKZc54RGWgqhYn+G4C5JFFOCj++VpHdjk2pVjP+S6BA9TsRc7dYr0JQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIfRXnusQizle33neu3gPcUIJh4mMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvaDlGZWU2eENMT1Y3ZmVkNjdlQTl4UWdtSGlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwjomAwQA
1MDTMA0GCSqGSIb3DQEBCwUAA4IBAQAXjMgPot9vttt2+aCuFtr2pHldydcvJGxt
tycE+6ck6coCbmyVf6ar8kR/fyWHblN1rL0DshUmZQ2EeVfPPN7Dv7K9PwAtymeC
3DQQUqz7Y6Bg81QNGGV+Gv7IcB7VrA3MVYbFjtukoymRCSE998idSJL66yxtjuqU
7prayWncPO+hjn2zdxa6D8I+gNIiZD8drPTSHtgCT13aV726saYjNcNaFhqk2kHz
Z2NnaNEvgRKB9+8/TmkkUnbOGWrdTcmPP+ECx1LZCiqeUporC8tsBSid+LnD7MfP
Iq1XEl8KiLvDxzqEISsZLCGf2x2XnpHtqUqwchPX6OovZZXZ9OO+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:03 2023 by rpki-client on console-ams.rpki-client.org