Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iu2HWHJMSrol93kpn5aUgnf9N2Y.roa
File: iu2HWHJMSrol93kpn5aUgnf9N2Y.roa (raw, json)
Hash identifier: 7Lwr5zEPrhbBRHzIgnzoONmin6QNxxHRA3AjmOJ2lKQ=
Subject key identifier: 8A:ED:87:58:72:4C:4A:BA:25:F7:79:29:9F:96:94:82:77:FD:37:66
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01887D922E924AD9391F6CE6278826D8E905
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iu2HWHJMSrol93kpn5aUgnf9N2Y.roa
Signing time: Fri 02 Jun 2023 19:25:12 +0000
ROA not before: Fri 02 Jun 2023 19:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.27.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:92:2e:92:4a:d9:39:1f:6c:e6:27:88:26:d8:e9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 2 19:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8aed8758724c4aba25f779299f96948277fd3766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bb:0b:03:82:41:21:e2:e0:fe:42:e6:d5:b0:
f8:56:80:78:fc:36:9a:5d:1b:6f:b6:ca:db:6b:4a:
12:e3:0e:f2:48:af:bc:9e:81:0a:a9:47:64:56:cb:
8b:73:0c:36:00:7c:3d:ac:3e:41:35:11:72:d3:f3:
5d:17:19:c5:80:06:99:ea:09:cb:8c:91:a0:6f:3b:
08:8f:48:33:5b:26:2f:3b:43:69:e4:b2:1a:04:cc:
e3:3a:65:4d:e7:c6:d3:a7:30:62:74:4c:3e:6d:8a:
f3:d3:05:fd:5d:df:f1:6c:28:04:49:7e:4a:73:04:
89:fa:e4:63:ab:13:4c:4d:2e:61:ad:a4:12:5b:a3:
fa:3e:ef:50:d4:c9:76:a7:5d:6c:cb:a7:eb:68:9c:
1f:5b:71:0a:26:6b:cb:f5:12:56:8a:ed:31:f0:55:
d0:6a:e1:78:53:6c:15:9b:88:01:2d:f2:19:9b:ee:
7f:54:28:d0:d7:f0:71:0f:f1:61:9c:cc:12:85:5e:
c6:ce:16:41:74:6a:4d:78:33:b7:ba:74:30:b9:12:
c3:9a:a4:25:e1:ea:d1:50:ca:76:ea:f3:f0:61:80:
dd:c4:9a:14:11:90:a9:97:90:3e:5a:d5:fc:6f:1f:
52:ad:26:bf:98:cf:0a:05:d3:4f:d6:df:7d:b5:82:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:ED:87:58:72:4C:4A:BA:25:F7:79:29:9F:96:94:82:77:FD:37:66
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iu2HWHJMSrol93kpn5aUgnf9N2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
194.58.45.0-194.58.47.255
194.87.27.0/24
194.87.136.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
195.58.56.0/21
195.133.55.0/24
195.133.195.0/24
212.192.0.0/23
212.193.0.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fc:8c:76:a4:28:ba:18:c1:b7:e2:c0:e3:2a:dc:8c:2d:d0:
8c:08:b0:c4:f9:3d:78:7c:55:c5:3e:4a:6f:7d:61:7a:26:c7:
5b:a6:75:7b:00:13:35:a6:c3:7a:6f:d8:42:b4:15:a4:9d:a3:
fe:a6:0e:3a:37:c8:b0:d8:b3:83:c9:fa:92:cc:25:4f:19:6e:
72:fa:95:65:f8:14:c7:82:02:df:64:3e:fb:50:10:17:89:22:
fe:10:30:9c:37:a5:b5:ee:35:ce:22:82:a0:95:b7:15:e3:1b:
5b:1b:1f:68:ac:c7:48:2e:cf:07:7f:34:68:7f:e9:5a:e9:f6:
4c:83:e5:b5:fc:a0:88:a1:e3:09:95:62:fe:c9:a8:56:dc:52:
26:94:ad:74:9f:ac:f2:e6:58:ba:6c:19:93:74:c0:ce:f7:7f:
cc:6b:4d:ca:ab:be:14:7a:77:0f:63:81:2b:06:00:0e:46:14:
60:63:c6:db:76:67:87:9c:0c:a1:a9:a6:fc:92:8a:9c:e2:bc:
07:ff:19:65:73:2f:5e:82:bb:cc:e4:ef:a6:22:8b:39:8a:1d:
2c:96:a1:f5:44:8f:12:51:78:e9:69:02:46:84:0f:a0:66:e9:
b8:22:95:8b:3a:d9:9c:ee:79:01:f8:be:b1:81:81:3d:1f:e0:
1c:7f:47:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAYh9ki6SStk5H2zmJ4gm2OkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNjAyMTkyNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWVkODc1ODcyNGM0YWJhMjVmNzc5Mjk5Zjk2OTQ4Mjc3ZmQzNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLsLA4JBIeLg/kLm1bD4VoB4/Daa
XRtvtsrba0oS4w7ySK+8noEKqUdkVsuLcww2AHw9rD5BNRFy0/NdFxnFgAaZ6gnL
jJGgbzsIj0gzWyYvO0Np5LIaBMzjOmVN58bTpzBidEw+bYrz0wX9Xd/xbCgESX5K
cwSJ+uRjqxNMTS5hraQSW6P6Pu9Q1Ml2p11sy6fraJwfW3EKJmvL9RJWiu0x8FXQ
auF4U2wVm4gBLfIZm+5/VCjQ1/BxD/FhnMwShV7GzhZBdGpNeDO3unQwuRLDmqQl
4erRUMp26vPwYYDdxJoUEZCpl5A+WtX8bx9SrSa/mM8KBdNP1t99tYIxdQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFIrth1hyTEq6Jfd5KZ+WlIJ3/TdmMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvaXUySFdISk1Tcm9sOTNrcG41YVVnbmY5TjJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAwXzLMAwD
BADCOi0DBATCOiADBADCVxsDBADCV4gDBADCV8YDBAHCV9ADBAHCV94DBAPDOjgD
BADDhTcDBADDhcMDBAHUwAADBADUwQAwDQYJKoZIhvcNAQELBQADggEBAJL8jHak
KLoYwbfiwOMq3Iwt0IwIsMT5PXh8VcU+Sm99YXomx1umdXsAEzWmw3pv2EK0FaSd
o/6mDjo3yLDYs4PJ+pLMJU8ZbnL6lWX4FMeCAt9kPvtQEBeJIv4QMJw3pbXuNc4i
gqCVtxXjG1sbH2isx0guzwd/NGh/6Vrp9kyD5bX8oIih4wmVYv7JqFbcUiaUrXSf
rPLmWLpsGZN0wM73f8xrTcqrvhR6dw9jgSsGAA5GFGBjxtt2Z4ecDKGppvySipzi
vAf/GWVzL16Cu8zk76YiizmKHSyWofVEjxJReOlpAkaED6Bm6bgilYs62ZzueQH4
vrGBgT0f4Bx/R4k=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:09 2023 by rpki-client on console-fra.rpki-client.org