Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hXAS0zEz-M3LkSARymOVFQEjj30.roa
File: hXAS0zEz-M3LkSARymOVFQEjj30.roa (raw, json)
Hash identifier: cf3BJIjrABOKMRWLUxEtKFoKTleNu+rIWSpuwgcksWU=
Subject key identifier: 85:70:12:D3:31:33:F8:CD:CB:91:20:11:CA:63:95:15:01:23:8F:7D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188D4A1ABBC46D2A185A42B0CA824DD36DC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hXAS0zEz-M3LkSARymOVFQEjj30.roa
Signing time: Mon 19 Jun 2023 17:09:04 +0000
ROA not before: Mon 19 Jun 2023 17:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 194.87.120.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:a1:ab:bc:46:d2:a1:85:a4:2b:0c:a8:24:dd:36:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 19 17:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=857012d33133f8cdcb912011ca63951501238f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:96:a7:f1:86:4d:b1:00:6d:44:e1:12:86:
c1:e5:3e:cc:38:a7:41:59:9b:50:63:65:58:6a:4c:
d1:58:0c:72:6d:ce:c7:b3:2a:99:f9:f8:e2:61:bf:
81:e4:3e:ec:b0:d2:cc:1f:d2:31:7e:fd:4b:d6:af:
a7:65:fa:cd:88:6c:07:6a:dd:ae:75:5a:52:51:04:
64:ba:05:c7:10:47:a7:d6:d3:e3:09:28:8d:36:20:
e8:c1:45:ff:54:14:93:88:bb:d8:f3:10:a3:c7:b3:
7b:67:36:d6:24:9e:7a:d7:de:4e:3a:e8:9e:a5:3e:
1c:29:e1:ea:89:1f:ed:b9:3e:56:01:cb:27:61:ee:
f7:6d:b4:98:06:b7:fe:cb:54:0b:4b:23:e4:30:b9:
97:8d:71:fb:e9:8d:43:35:eb:c2:0a:c0:1d:a3:5d:
55:41:70:bb:f8:35:47:ff:95:6f:c3:6f:1d:b2:44:
c9:cb:88:77:aa:d9:cf:65:0a:30:9c:7d:c4:2d:67:
c7:d6:9d:e7:30:4e:b4:97:5e:4d:07:c2:4b:a6:0a:
d3:c3:94:3a:3e:cc:1e:84:f7:c9:38:fc:85:2d:50:
35:3b:95:8f:8c:7a:ea:77:46:73:95:45:e8:6c:a9:
7b:f1:8c:5b:df:4f:7b:98:24:30:43:1d:bf:e4:17:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:70:12:D3:31:33:F8:CD:CB:91:20:11:CA:63:95:15:01:23:8F:7D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hXAS0zEz-M3LkSARymOVFQEjj30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.182.0/24
193.124.94.0/24
194.87.119.0-194.87.120.255
194.87.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:5a:45:38:fe:aa:db:8f:95:98:8f:b4:de:db:ea:8a:c7:6c:
92:41:f4:23:04:2a:8f:12:65:6b:36:e4:b3:ad:36:61:3b:b9:
c6:85:9f:d1:8c:d6:9f:d4:03:a2:99:0c:3f:d2:43:0a:79:32:
12:b6:5d:f4:e3:c4:0a:40:4e:be:27:73:45:bd:0f:1a:5e:fa:
ff:d6:33:43:85:02:a8:fb:f5:54:d4:89:aa:36:2c:40:37:29:
42:bc:29:c2:11:9e:6b:42:7e:22:39:6a:5b:e1:3d:d5:6d:3c:
f1:a3:ea:60:bd:c5:cd:e7:9d:a6:9d:62:52:b7:a6:ef:0d:e7:
99:16:87:03:b2:eb:16:de:67:9a:95:10:32:60:ed:12:00:d3:
ed:5e:44:08:12:f0:74:a4:da:76:97:e9:25:66:61:d1:a4:42:
8e:a6:40:c2:19:78:21:59:25:6d:4d:3f:d2:af:f6:1d:04:8f:
e9:17:9d:39:9d:3a:86:0e:30:cb:76:30:3f:61:79:5c:3d:6b:
07:2f:1c:db:cf:88:fb:c2:24:22:8b:cf:73:c8:09:1b:12:b6:
8a:16:39:c0:88:8f:fa:58:f5:28:e1:f0:59:5e:53:cb:8f:28:
0a:0b:e0:3b:09:ae:07:b9:8b:32:4c:0c:bf:2b:7e:3b:b3:30:
25:f4:f7:80
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYjUoau8RtKhhaQrDKgk3TbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNjE5MTcwOTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTcwMTJkMzMxMzNmOGNkY2I5MTIwMTFjYTYzOTUxNTAxMjM4ZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0daWp/GGTbEAbUThEobB5T7MOKdB
WZtQY2VYakzRWAxybc7HsyqZ+fjiYb+B5D7ssNLMH9Ixfv1L1q+nZfrNiGwHat2u
dVpSUQRkugXHEEen1tPjCSiNNiDowUX/VBSTiLvY8xCjx7N7ZzbWJJ56195OOuie
pT4cKeHqiR/tuT5WAcsnYe73bbSYBrf+y1QLSyPkMLmXjXH76Y1DNevCCsAdo11V
QXC7+DVH/5Vvw28dskTJy4h3qtnPZQownH3ELWfH1p3nME60l15NB8JLpgrTw5Q6
PswehPfJOPyFLVA1O5WPjHrqd0ZzlUXobKl78Yxb3097mCQwQx2/5BeIxwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFIVwEtMxM/jNy5EgEcpjlRUBI499MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvaFhBUzB6RXotTTNMa1NBUnltT1ZGUUVqajMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAwHy2AwQA
wXxeMAwDBADCV3cDBADCV3gDBADCV7UwDQYJKoZIhvcNAQELBQADggEBAD9aRTj+
qtuPlZiPtN7b6orHbJJB9CMEKo8SZWs25LOtNmE7ucaFn9GM1p/UA6KZDD/SQwp5
MhK2XfTjxApATr4nc0W9Dxpe+v/WM0OFAqj79VTUiao2LEA3KUK8KcIRnmtCfiI5
alvhPdVtPPGj6mC9xc3nnaadYlK3pu8N55kWhwOy6xbeZ5qVEDJg7RIA0+1eRAgS
8HSk2naX6SVmYdGkQo6mQMIZeCFZJW1NP9Kv9h0Ej+kXnTmdOoYOMMt2MD9heVw9
awcvHNvPiPvCJCKLz3PICRsStooWOcCIj/pY9Sjh8FleU8uPKAoL4DsJrge5izJM
DL8rfjuzMCX094A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:03 2023 by rpki-client on console-ams.rpki-client.org