Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hkLJ7mO8Aajy8eOG6a_z6ke6qXM.roa
File: hkLJ7mO8Aajy8eOG6a_z6ke6qXM.roa (raw, json)
Hash identifier: JWnrh8zqt0oht4jH/WDWIwDo7Q1rRn6TcoEc1E2TWik=
Subject key identifier: 86:42:C9:EE:63:BC:01:A8:F2:F1:E3:86:E9:AF:F3:EA:47:BA:A9:73
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66ECF7DED3B0F57683C6AD95E8AA1F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hkLJ7mO8Aajy8eOG6a_z6ke6qXM.roa
Signing time: Sun 01 Jan 2023 22:14:54 +0000
ROA not before: Sun 01 Jan 2023 22:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.135.119.0/24 maxlen: 24
212.192.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:ec:f7:de:d3:b0:f5:76:83:c6:ad:95:e8:aa:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8642c9ee63bc01a8f2f1e386e9aff3ea47baa973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bc:65:60:53:f8:f6:34:af:1c:3f:ef:ab:20:
be:36:3b:7f:5a:4b:bd:65:e5:3c:27:72:89:e6:99:
58:9a:f0:56:85:1a:86:72:7b:41:29:00:d9:42:12:
f1:ea:69:98:b2:01:88:ca:23:7b:31:f3:43:7f:17:
76:cb:f9:6d:0f:f4:e4:41:54:e9:84:87:6b:4b:6c:
d9:ef:d0:36:56:bb:c2:8c:62:d2:88:b4:a1:aa:97:
17:25:1d:fd:33:7b:46:2e:0e:96:dc:73:6d:d7:fc:
c9:e1:e3:9c:64:48:31:cf:af:40:f0:a7:0c:15:d9:
0f:d7:37:e7:56:ce:82:a8:52:75:2b:27:0f:78:6b:
56:20:c3:de:11:66:f8:7d:72:ae:30:63:35:00:af:
a5:4c:f7:24:77:ca:3a:41:87:8e:99:10:c1:47:c2:
4e:f0:f2:fc:68:d0:c1:ec:87:f9:7d:cf:71:fa:72:
1a:fc:b4:12:2b:f1:ab:08:f3:42:3c:30:5c:d4:90:
f4:15:30:20:4b:b0:7f:81:09:97:ee:7a:ef:db:61:
79:d6:18:ff:6e:22:b7:e8:01:d9:a2:f7:d1:50:3c:
ec:d3:ad:0a:0e:13:0f:8b:37:56:14:0c:6f:96:6b:
6d:1a:12:fc:44:a4:b2:06:69:8b:af:fb:20:2e:c3:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:42:C9:EE:63:BC:01:A8:F2:F1:E3:86:E9:AF:F3:EA:47:BA:A9:73
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hkLJ7mO8Aajy8eOG6a_z6ke6qXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.119.0/24
212.192.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:df:f1:12:0f:7c:cd:42:10:07:d5:1b:63:b1:df:6a:17:44:
d6:be:eb:ec:8a:bf:a8:ca:eb:38:c2:4d:5e:19:4b:73:7a:fd:
25:f6:9a:6f:4d:d3:06:9a:02:1e:79:62:e3:75:99:20:4c:1e:
8e:a8:68:b1:21:59:7d:02:a3:de:c0:81:75:4a:88:3c:4f:71:
01:98:c4:b3:9a:1a:d7:65:4b:41:c3:51:24:18:27:27:35:a7:
9e:d4:63:f9:7a:46:e6:10:08:47:c4:9d:96:0e:a5:c5:56:01:
f5:53:d7:8b:57:3c:4b:42:c3:d2:f6:6b:98:d1:5f:d7:75:2e:
96:06:59:6b:c4:8f:1e:bd:ed:69:d2:0f:56:47:13:f6:93:36:
0a:07:51:c3:57:3d:49:70:df:28:c3:36:2e:01:5a:1b:07:98:
08:e5:ec:1e:a4:cc:44:09:b8:21:5f:b6:93:41:74:08:9b:e7:
0a:13:9b:1f:23:42:34:c9:c1:f7:47:bd:74:ed:02:b2:03:3f:
d6:b5:08:de:81:c4:f1:34:35:2c:26:70:10:21:e5:3e:8e:05:
bd:b9:13:71:3b:66:23:82:32:f6:6b:87:d7:6a:16:35:0d:44:
72:c6:ff:ae:d6:8f:39:96:24:e1:d0:bb:be:8c:13:e3:3f:de:
5f:ce:56:8b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvZuz33tOw9XaDxq2V6KofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTAxMjIxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjQyYzllZTYzYmMwMWE4ZjJmMWUzODZlOWFmZjNlYTQ3YmFhOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67xlYFP49jSvHD/vqyC+Njt/Wku9
ZeU8J3KJ5plYmvBWhRqGcntBKQDZQhLx6mmYsgGIyiN7MfNDfxd2y/ltD/TkQVTp
hIdrS2zZ79A2VrvCjGLSiLShqpcXJR39M3tGLg6W3HNt1/zJ4eOcZEgxz69A8KcM
FdkP1zfnVs6CqFJ1KycPeGtWIMPeEWb4fXKuMGM1AK+lTPckd8o6QYeOmRDBR8JO
8PL8aNDB7If5fc9x+nIa/LQSK/GrCPNCPDBc1JD0FTAgS7B/gQmX7nrv22F51hj/
biK36AHZovfRUDzs060KDhMPizdWFAxvlmttGhL8RKSyBmmLr/sgLsNomQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIZCye5jvAGo8vHjhumv8+pHuqlzMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvaGtMSjdtTzhBYWp5OGVPRzZhX3o2a2U2cVhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwod3AwQA
1MDdMA0GCSqGSIb3DQEBCwUAA4IBAQAb3/ESD3zNQhAH1Rtjsd9qF0TWvuvsir+o
yus4wk1eGUtzev0l9ppvTdMGmgIeeWLjdZkgTB6OqGixIVl9AqPewIF1Sog8T3EB
mMSzmhrXZUtBw1EkGCcnNaee1GP5ekbmEAhHxJ2WDqXFVgH1U9eLVzxLQsPS9muY
0V/XdS6WBllrxI8eve1p0g9WRxP2kzYKB1HDVz1JcN8owzYuAVobB5gI5ewepMxE
CbghX7aTQXQIm+cKE5sfI0I0ycH3R7107QKyAz/WtQjegcTxNDUsJnAQIeU+jgW9
uRNxO2YjgjL2a4fXahY1DURyxv+u1o85liTh0Lu+jBPjP95fzlaL
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:03 2023 by rpki-client on console-ams.rpki-client.org