Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iaw8AtqdSbH5kiPS5fAF8lJkvvo.roa
File: iaw8AtqdSbH5kiPS5fAF8lJkvvo.roa (raw, json)
Hash identifier: Vt5HgZXqt/DP0XYR70/8JqjIwwO7pBCd61Sl3k2qox0=
Subject key identifier: 89:AC:3C:02:DA:9D:49:B1:F9:92:23:D2:E5:F0:05:F2:52:64:BE:FA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01860134E15D1CBD69C58DDB592A07F30A39
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iaw8AtqdSbH5kiPS5fAF8lJkvvo.roa
Signing time: Mon 30 Jan 2023 05:44:48 +0000
ROA not before: Mon 30 Jan 2023 05:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.87.119.0/24 maxlen: 24
193.124.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Feb 2023 14:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:01:34:e1:5d:1c:bd:69:c5:8d:db:59:2a:07:f3:0a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 30 05:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89ac3c02da9d49b1f99223d2e5f005f25264befa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:8e:31:f8:c6:96:62:cb:e6:0c:07:c5:d7:
ca:c2:65:31:5b:58:ba:f9:07:51:f5:ff:41:27:8f:
7a:33:c2:ce:f9:52:ca:fd:0e:ac:3c:cc:e8:bb:f0:
8f:42:1e:97:3c:97:b7:20:f2:da:9e:f8:92:80:f2:
b2:7e:65:d7:e9:40:06:46:b4:37:68:27:93:79:12:
db:77:36:c0:e9:1d:c6:ea:13:2e:db:7a:32:b1:e5:
f3:e4:80:0a:93:24:d9:a5:5e:f8:30:fd:6b:e2:94:
e1:2d:6e:80:8c:07:99:35:68:ae:41:79:d7:18:eb:
f7:23:1c:b3:c9:a2:47:91:70:6c:5e:f6:9b:11:99:
e1:b1:d8:8b:9e:b5:c6:f0:2a:94:ad:16:1c:78:cf:
9c:93:76:4f:7d:41:7b:8b:c4:16:e9:ee:e9:d2:23:
61:ae:6c:60:76:f6:08:8c:5a:c1:59:63:a4:bf:9d:
02:3e:fc:b5:ca:ab:31:e8:01:31:68:38:3b:e7:d2:
28:03:06:41:50:09:79:4b:67:fa:c1:63:9a:e9:19:
a0:0b:43:f3:19:6a:ad:50:bc:25:56:80:5f:27:22:
4b:8d:b9:2b:ed:cb:b9:ce:95:0b:77:c6:f0:46:8a:
26:2d:ef:e4:b0:6b:dc:ac:0c:53:8e:34:71:b3:eb:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AC:3C:02:DA:9D:49:B1:F9:92:23:D2:E5:F0:05:F2:52:64:BE:FA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iaw8AtqdSbH5kiPS5fAF8lJkvvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.33.0/24
194.87.119.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a0:80:09:c6:59:81:22:56:5e:ef:ff:f8:ed:fc:00:e3:13:
8f:21:0f:35:a2:8f:bd:5d:ca:5c:23:f6:ee:3b:c4:e5:17:01:
f6:02:db:85:68:f4:ad:eb:30:5c:c7:ad:94:1b:fe:7e:fa:dd:
61:b4:ac:8e:7c:95:e2:37:fb:5f:aa:12:4e:14:c1:2f:81:db:
c8:ca:09:35:26:11:23:14:a7:b2:46:e3:7c:bf:d5:77:bf:ac:
8f:18:fa:4b:f9:18:cd:d8:8f:13:06:72:aa:51:b3:13:4b:46:
30:55:b3:85:36:fd:96:f6:3e:f6:5e:be:2a:71:bc:2a:5f:83:
6e:45:17:57:f2:06:f9:5a:8d:96:84:35:a5:e7:cf:b3:bf:58:
00:22:8f:42:ce:e9:08:18:ee:40:bb:28:28:f0:cc:4e:e6:54:
d5:26:c6:00:f6:42:11:22:d8:8c:b8:62:77:24:41:c8:bc:bb:
8a:14:cb:b8:2c:21:8a:67:1e:f0:82:7f:8b:f0:ab:7a:a5:e8:
77:99:7b:e2:54:f2:a2:18:87:87:14:2b:22:ab:61:a3:5e:b9:
a5:a4:87:dd:c9:71:48:22:9d:7d:8a:76:32:7e:f2:80:6f:f5:
e1:ce:1c:b2:1a:a5:1b:26:59:9d:d3:b5:e2:69:f9:21:3d:65:
ce:7a:fa:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYYBNOFdHL1pxY3bWSoH8wo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTMwMDU0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWFjM2MwMmRhOWQ0OWIxZjk5MjIzZDJlNWYwMDVmMjUyNjRiZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxICOMfjGlmLL5gwHxdfKwmUxW1i6
+QdR9f9BJ496M8LO+VLK/Q6sPMzou/CPQh6XPJe3IPLanviSgPKyfmXX6UAGRrQ3
aCeTeRLbdzbA6R3G6hMu23oyseXz5IAKkyTZpV74MP1r4pThLW6AjAeZNWiuQXnX
GOv3IxyzyaJHkXBsXvabEZnhsdiLnrXG8CqUrRYceM+ck3ZPfUF7i8QW6e7p0iNh
rmxgdvYIjFrBWWOkv50CPvy1yqsx6AExaDg759IoAwZBUAl5S2f6wWOa6RmgC0Pz
GWqtULwlVoBfJyJLjbkr7cu5zpULd8bwRoomLe/ksGvcrAxTjjRxs+vpJQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFImsPALanUmx+ZIj0uXwBfJSZL76MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvaWF3OEF0cWRTYkg1a2lQUzVmQUY4bEprdnZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwXwhAwQA
wld3MA0GCSqGSIb3DQEBCwUAA4IBAQBgoIAJxlmBIlZe7//47fwA4xOPIQ81oo+9
XcpcI/buO8TlFwH2AtuFaPSt6zBcx62UG/5++t1htKyOfJXiN/tfqhJOFMEvgdvI
ygk1JhEjFKeyRuN8v9V3v6yPGPpL+RjN2I8TBnKqUbMTS0YwVbOFNv2W9j72Xr4q
cbwqX4NuRRdX8gb5Wo2WhDWl58+zv1gAIo9CzukIGO5Auygo8MxO5lTVJsYA9kIR
ItiMuGJ3JEHIvLuKFMu4LCGKZx7wgn+L8Kt6peh3mXviVPKiGIeHFCsiq2GjXrml
pIfdyXFIIp19inYyfvKAb/XhzhyyGqUbJlmd07XiafkhPWXOevre
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:24 2024 by rpki-client on console-fra.rpki-client.org