Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mOVoSTqN-bGgfIAlePVwmdm52hc.roa
File: mOVoSTqN-bGgfIAlePVwmdm52hc.roa (raw, json)
Hash identifier: UGJLwoSu3NSI0gMf+VpQGzXf6qYSUEfyhczbdI40ZQE=
Subject key identifier: 98:E5:68:49:3A:8D:F9:B1:A0:7C:80:25:78:F5:70:99:D9:B9:DA:17
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187524F8261CEE5A56F8269163874B63452
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mOVoSTqN-bGgfIAlePVwmdm52hc.roa
Signing time: Wed 05 Apr 2023 16:45:55 +0000
ROA not before: Wed 05 Apr 2023 16:45:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210352
IP address blocks: 194.87.218.0/24 maxlen: 24
194.87.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:4f:82:61:ce:e5:a5:6f:82:69:16:38:74:b6:34:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 5 16:45:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98e568493a8df9b1a07c802578f57099d9b9da17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:4c:30:4c:4a:da:fd:97:ad:9b:04:3a:6b:
26:91:a8:1e:0a:f7:bb:6c:ca:ed:0a:19:82:1e:25:
b4:4e:25:cd:f7:cb:ca:44:d3:11:3c:bc:b2:92:79:
05:ce:fc:41:b0:6c:1b:37:4b:24:1e:34:fd:61:f4:
6b:d4:93:b0:9a:a3:91:67:f7:96:84:1e:f2:51:45:
03:f7:cd:e8:ea:b6:75:db:91:38:4b:6e:e2:41:25:
b4:ee:04:db:55:b0:dd:9f:0d:c6:c2:fd:c5:38:23:
c0:6d:ef:75:e3:69:ef:a1:4c:58:08:5f:fe:11:06:
54:68:46:50:1b:30:87:99:a7:30:78:93:d4:76:0f:
91:fc:75:f5:78:0e:45:19:83:24:ee:02:f9:22:11:
09:ed:e6:b9:00:00:9d:5d:1c:f0:c9:fc:24:91:45:
c6:8a:e7:3d:ee:89:64:74:ed:59:d5:90:7f:69:7d:
2d:71:74:bb:c0:3b:87:39:a0:47:bb:04:bc:ae:90:
06:45:17:c5:b8:e1:23:66:ce:98:30:a5:c8:74:d7:
7c:4f:8e:aa:b4:c6:44:83:5a:3d:23:11:f3:39:d0:
44:ed:e3:15:31:52:f8:6e:5c:75:96:09:c8:85:06:
be:2f:ea:f5:46:93:43:51:09:47:c0:35:96:be:c1:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E5:68:49:3A:8D:F9:B1:A0:7C:80:25:78:F5:70:99:D9:B9:DA:17
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mOVoSTqN-bGgfIAlePVwmdm52hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.71.0/24
194.87.218.0/24
Signature Algorithm: sha256WithRSAEncryption
14:49:34:eb:5f:d8:60:02:23:14:a5:b6:5f:ca:9a:1a:99:17:
67:0b:21:f1:ac:8a:2f:ad:b2:63:64:a0:1a:14:f3:09:23:5c:
97:0f:3e:28:58:a3:39:64:a6:c3:5d:c3:de:04:f9:b3:a2:5d:
24:c3:7f:3e:c3:86:8b:ae:2b:23:0a:6e:61:09:7c:36:47:7c:
bd:bb:1e:a8:2e:af:fd:7c:cb:dc:5a:8c:36:86:97:c2:25:bf:
2a:4d:28:14:52:72:eb:1d:27:a2:10:57:e3:21:db:cb:d1:5c:
1e:7b:3f:9c:f3:a5:10:3c:90:00:f0:be:4e:45:08:4f:9e:db:
2d:7e:1c:6e:82:86:ba:91:80:89:f8:79:84:85:6f:4e:05:72:
01:37:db:2f:fd:e5:a5:05:16:24:51:d3:87:84:1b:25:0a:5e:
8a:a5:4d:ec:a4:4d:55:a2:01:35:73:c4:a3:88:b9:2e:6c:96:
52:9a:4d:a2:89:0e:3c:f1:95:ab:3e:60:7d:97:60:0e:95:0d:
78:15:3a:dd:d2:14:15:ba:3f:aa:18:83:77:82:b3:99:3e:6b:
47:c2:a5:d6:e8:7c:e2:db:d1:6d:b8:ad:a3:a3:1f:c7:c9:03:
1e:1a:e4:97:ab:bf:41:fb:09:88:96:54:a1:1a:b1:96:76:cb:
20:d6:a7:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdST4JhzuWlb4JpFjh0tjRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDA1MTY0NTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGU1Njg0OTNhOGRmOWIxYTA3YzgwMjU3OGY1NzA5OWQ5YjlkYTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyJMMExK2v2XrZsEOmsmkageCve7
bMrtChmCHiW0TiXN98vKRNMRPLyyknkFzvxBsGwbN0skHjT9YfRr1JOwmqORZ/eW
hB7yUUUD983o6rZ125E4S27iQSW07gTbVbDdnw3Gwv3FOCPAbe9142nvoUxYCF/+
EQZUaEZQGzCHmacweJPUdg+R/HX1eA5FGYMk7gL5IhEJ7ea5AACdXRzwyfwkkUXG
iuc97olkdO1Z1ZB/aX0tcXS7wDuHOaBHuwS8rpAGRRfFuOEjZs6YMKXIdNd8T46q
tMZEg1o9IxHzOdBE7eMVMVL4blx1lgnIhQa+L+r1RpNDUQlHwDWWvsEoKQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJjlaEk6jfmxoHyAJXj1cJnZudoXMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvbU9Wb1NUcU4tYkdnZklBbGVQVndtZG01MmhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwldHAwQA
wlfaMA0GCSqGSIb3DQEBCwUAA4IBAQAUSTTrX9hgAiMUpbZfypoamRdnCyHxrIov
rbJjZKAaFPMJI1yXDz4oWKM5ZKbDXcPeBPmzol0kw38+w4aLrisjCm5hCXw2R3y9
ux6oLq/9fMvcWow2hpfCJb8qTSgUUnLrHSeiEFfjIdvL0Vweez+c86UQPJAA8L5O
RQhPntstfhxugoa6kYCJ+HmEhW9OBXIBN9sv/eWlBRYkUdOHhBslCl6KpU3spE1V
ogE1c8SjiLkubJZSmk2iiQ488ZWrPmB9l2AOlQ14FTrd0hQVuj+qGIN3grOZPmtH
wqXW6Hzi29FtuK2jox/HyQMeGuSXq79B+wmIllShGrGWdssg1qfx
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:10 2023 by rpki-client on console-fra.rpki-client.org