Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k7FHqspNSxdLBkxd6vHp7iJ4eGs.roa
File: k7FHqspNSxdLBkxd6vHp7iJ4eGs.roa (raw, json)
Hash identifier: mipZi2vZG5W5dglWZobcX8hcO0JtmgETd/CkK74X/8U=
Subject key identifier: 93:B1:47:AA:CA:4D:4B:17:4B:06:4C:5D:EA:F1:E9:EE:22:78:78:6B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018571CB3B4A1E2A347A817E4E315CABDF08
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k7FHqspNSxdLBkxd6vHp7iJ4eGs.roa
Signing time: Mon 02 Jan 2023 09:23:42 +0000
ROA not before: Mon 02 Jan 2023 09:23:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 195.133.73.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cb:3b:4a:1e:2a:34:7a:81:7e:4e:31:5c:ab:df:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 09:23:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93b147aaca4d4b174b064c5deaf1e9ee2278786b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:54:b8:26:04:9d:0e:2e:7f:5d:d0:96:f1:
f7:dd:9a:b6:62:d8:dd:50:cd:92:e7:14:49:28:e6:
72:e5:84:4c:df:35:0f:2a:5f:7c:18:44:9a:81:8d:
94:6c:79:6a:99:d5:89:ed:ed:bb:8a:2a:90:2f:80:
9d:df:e3:fb:f0:39:04:e4:fa:25:77:9f:9b:9c:31:
25:15:62:e3:cb:0b:2b:52:34:19:d1:4f:2e:73:fb:
18:f8:97:ea:12:d9:6c:ee:c5:92:3d:ee:40:56:47:
ef:07:27:7c:bd:e6:12:86:b7:48:ca:67:01:22:5c:
a5:69:c1:c2:69:ec:82:7f:01:7e:0e:06:cb:42:f6:
4c:43:50:90:98:87:08:19:17:ca:8a:e1:d8:da:10:
1d:39:d8:16:55:67:a1:d8:63:68:51:ab:05:07:eb:
28:bf:6f:10:45:1b:11:c1:1a:aa:7e:fa:c1:8e:30:
36:6f:0d:d1:d0:a0:18:8c:7e:00:56:20:13:84:98:
5e:f5:60:f4:0f:38:ac:5a:f9:90:d8:b0:b8:66:5f:
65:5d:94:a6:e3:0d:7e:bc:12:b2:ae:a1:23:2b:0b:
3d:b5:2e:8a:14:db:c6:49:5d:85:9f:a1:19:c6:2d:
da:af:f9:e0:ab:a9:32:59:2f:a0:ee:04:24:ae:c5:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B1:47:AA:CA:4D:4B:17:4B:06:4C:5D:EA:F1:E9:EE:22:78:78:6B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k7FHqspNSxdLBkxd6vHp7iJ4eGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
194.87.37.0/24
194.87.162.0/24
195.58.63.0/24
195.133.73.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:0a:2a:57:6b:bc:af:df:33:dc:fc:37:65:ff:dc:ec:80:1b:
2e:c3:cf:55:3b:f9:50:d4:93:44:3e:f8:24:6c:e5:b3:15:21:
e9:a7:f7:d1:6d:92:8d:6e:35:9f:2d:dc:ea:c7:bf:3b:2c:cd:
01:38:6e:c1:ce:d3:3e:94:61:d1:67:50:25:61:e3:85:82:f3:
b6:93:55:b9:d2:10:15:7f:54:5d:66:3f:e5:fd:c1:13:30:b1:
d0:75:2c:80:19:11:05:12:35:f6:03:50:b7:82:17:f0:9c:92:
fe:43:8d:18:a4:73:59:d1:18:71:c6:9e:b6:6e:c7:12:e3:aa:
8d:00:7c:86:f2:bb:57:70:c1:df:3f:eb:7f:bc:ed:ee:74:ba:
53:aa:81:9f:8c:9c:d8:35:f7:49:6f:df:8c:65:d8:12:96:8c:
d0:8e:0d:c2:17:32:56:a9:93:c9:fb:8d:9f:03:46:72:e2:5d:
a1:88:46:71:ff:49:85:e4:c3:c6:3f:08:9c:4b:c8:2f:37:44:
2a:d3:04:d8:f4:da:48:13:7d:bf:f3:80:27:ba:6f:14:eb:36:
a5:75:fb:f9:5f:7e:19:c6:7c:fd:8a:c4:42:ee:58:8d:43:98:
d0:ea:63:31:01:d4:eb:65:be:aa:d9:8d:d0:06:a0:42:0d:18:
b2:05:a2:83
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVxyztKHio0eoF+TjFcq98IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTAyMDkyMzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2IxNDdhYWNhNGQ0YjE3NGIwNjRjNWRlYWYxZTllZTIyNzg3ODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEVUuCYEnQ4uf13QlvH33Zq2Ytjd
UM2S5xRJKOZy5YRM3zUPKl98GESagY2UbHlqmdWJ7e27iiqQL4Cd3+P78DkE5Pol
d5+bnDElFWLjywsrUjQZ0U8uc/sY+JfqEtls7sWSPe5AVkfvByd8veYShrdIymcB
IlylacHCaeyCfwF+DgbLQvZMQ1CQmIcIGRfKiuHY2hAdOdgWVWeh2GNoUasFB+so
v28QRRsRwRqqfvrBjjA2bw3R0KAYjH4AViAThJhe9WD0DzisWvmQ2LC4Zl9lXZSm
4w1+vBKyrqEjKws9tS6KFNvGSV2Fn6EZxi3ar/ngq6kyWS+g7gQkrsWJzwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJOxR6rKTUsXSwZMXerx6e4ieHhrMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvazdGSHFzcE5TeGRMQmt4ZDZ2SHA3aUo0ZUdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwXwvAwQA
wlclAwQAwleiAwQAwzo/AwQAw4VJMA0GCSqGSIb3DQEBCwUAA4IBAQBtCipXa7yv
3zPc/Ddl/9zsgBsuw89VO/lQ1JNEPvgkbOWzFSHpp/fRbZKNbjWfLdzqx787LM0B
OG7BztM+lGHRZ1AlYeOFgvO2k1W50hAVf1RdZj/l/cETMLHQdSyAGREFEjX2A1C3
ghfwnJL+Q40YpHNZ0Rhxxp62bscS46qNAHyG8rtXcMHfP+t/vO3udLpTqoGfjJzY
NfdJb9+MZdgSlozQjg3CFzJWqZPJ+42fA0Zy4l2hiEZx/0mF5MPGPwicS8gvN0Qq
0wTY9NpIE32/84Anum8U6zaldfv5X34Zxnz9isRC7liNQ5jQ6mMxAdTrZb6q2Y3Q
BqBCDRiyBaKD
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-ams.rpki-client.org