Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mZkw-H4t_wNYGv5oFDnVvq4Y23Y.roa
File: mZkw-H4t_wNYGv5oFDnVvq4Y23Y.roa (raw, json)
Hash identifier: Uulon03fH/uYPOvzmhKerelQYRuFbM7MA1HoFLCutPQ=
Subject key identifier: 99:99:30:F8:7E:2D:FF:03:58:1A:FE:68:14:39:D5:BE:AE:18:DB:76
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018973BDD0663C30444822AC04988B6CBEDB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mZkw-H4t_wNYGv5oFDnVvq4Y23Y.roa
Signing time: Thu 20 Jul 2023 14:39:26 +0000
ROA not before: Thu 20 Jul 2023 14:39:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 146943
IP address blocks: 194.87.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Oct 2023 07:35:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:bd:d0:66:3c:30:44:48:22:ac:04:98:8b:6c:be:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 20 14:39:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=999930f87e2dff03581afe681439d5beae18db76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:fd:d0:6c:99:d3:90:8d:94:4c:2c:81:c5:
67:2a:ae:a2:79:e4:2c:12:da:58:0b:76:e8:be:86:
1d:f9:5b:74:a8:50:1c:f0:6c:31:76:e1:66:58:51:
5e:bc:c7:3a:a5:c7:5c:e7:64:89:83:02:45:fd:4e:
0f:84:7e:a4:99:b2:6d:c6:33:fc:52:24:bd:23:99:
a2:2f:e0:78:57:db:0d:1c:01:0c:c5:4c:d5:bb:f8:
59:cf:92:b5:9d:ab:96:98:de:3f:b5:8d:83:70:3e:
f7:4d:a3:91:9d:20:7e:ca:44:fd:20:14:a1:f3:06:
0b:6e:32:f8:25:5a:2f:7d:1a:a2:a0:30:d1:6c:bc:
fe:b5:05:bb:4f:81:1e:4b:db:04:c0:ba:8e:e0:4c:
86:f3:16:51:51:ce:d2:1d:69:02:a4:78:74:5a:59:
dc:6b:4a:8a:01:8b:ea:79:a5:75:e2:fc:b5:fe:90:
86:7e:0d:b1:7b:48:ef:84:01:83:4b:66:4a:cf:44:
2a:6b:c8:9c:b7:66:5d:e9:b7:12:9d:a2:cb:45:e1:
b5:c7:da:28:d9:3d:4d:79:b6:2b:6e:bd:5a:15:90:
14:02:a7:b7:ba:1b:a9:7c:7a:25:49:0b:65:3d:59:
05:9a:65:b2:81:c5:b2:9c:9b:73:f5:6b:d9:6b:67:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:99:30:F8:7E:2D:FF:03:58:1A:FE:68:14:39:D5:BE:AE:18:DB:76
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mZkw-H4t_wNYGv5oFDnVvq4Y23Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ad:26:94:6c:29:f8:9d:e7:48:37:7a:52:80:4d:fb:ec:43:
bb:a9:27:53:6b:95:6a:e6:81:80:77:7b:51:52:2c:65:b0:96:
82:47:60:d2:a0:30:c4:c8:f4:06:5a:d2:8f:61:dd:03:1d:5d:
f8:75:0a:39:59:99:86:91:9a:f7:33:f9:a9:3e:3d:09:a5:cf:
58:38:6b:49:19:cb:92:87:a0:8c:b4:ab:9d:cf:4a:d8:40:7b:
2a:ed:69:40:fc:f6:0e:9d:71:ea:39:4f:1c:e9:65:1f:f0:1f:
2a:c2:14:22:e7:80:ec:e7:01:56:bb:b0:7a:12:15:68:16:18:
30:eb:f9:28:bc:59:47:5c:d1:be:53:f5:cb:c1:a2:fa:c1:82:
f7:d4:8e:42:0f:78:13:4a:30:32:9c:58:70:9e:f9:03:4b:96:
34:0b:36:36:f2:c6:be:4a:a5:67:32:84:ef:e4:0b:1a:8b:28:
d2:1d:28:90:df:c1:da:fb:a4:91:a8:97:27:7c:2c:05:dd:ce:
5c:09:14:a7:15:8b:38:28:9e:2d:cd:ad:85:96:09:e7:0d:ed:
a7:f4:5e:7f:a7:e2:d9:9c:fe:f8:77:9a:44:5a:9e:49:df:31:
88:84:fe:43:c0:41:44:6c:1f:ea:ba:4c:3d:58:69:14:3e:86:
d3:7d:dd:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlzvdBmPDBESCKsBJiLbL7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNzIwMTQzOTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTk5MzBmODdlMmRmZjAzNTgxYWZlNjgxNDM5ZDViZWFlMThkYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnor90GyZ05CNlEwsgcVnKq6ieeQs
EtpYC3bovoYd+Vt0qFAc8GwxduFmWFFevMc6pcdc52SJgwJF/U4PhH6kmbJtxjP8
UiS9I5miL+B4V9sNHAEMxUzVu/hZz5K1nauWmN4/tY2DcD73TaORnSB+ykT9IBSh
8wYLbjL4JVovfRqioDDRbLz+tQW7T4EeS9sEwLqO4EyG8xZRUc7SHWkCpHh0Wlnc
a0qKAYvqeaV14vy1/pCGfg2xe0jvhAGDS2ZKz0Qqa8ict2Zd6bcSnaLLReG1x9oo
2T1NebYrbr1aFZAUAqe3uhupfHolSQtlPVkFmmWygcWynJtz9WvZa2eIawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJmZMPh+Lf8DWBr+aBQ51b6uGNt2MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvbVprdy1INHRfd05ZR3Y1b0ZEblZ2cTRZMjNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlfMMA0G
CSqGSIb3DQEBCwUAA4IBAQCTrSaUbCn4nedIN3pSgE377EO7qSdTa5Vq5oGAd3tR
UixlsJaCR2DSoDDEyPQGWtKPYd0DHV34dQo5WZmGkZr3M/mpPj0Jpc9YOGtJGcuS
h6CMtKudz0rYQHsq7WlA/PYOnXHqOU8c6WUf8B8qwhQi54Ds5wFWu7B6EhVoFhgw
6/kovFlHXNG+U/XLwaL6wYL31I5CD3gTSjAynFhwnvkDS5Y0CzY28sa+SqVnMoTv
5AsaiyjSHSiQ38Ha+6SRqJcnfCwF3c5cCRSnFYs4KJ4tza2FlgnnDe2n9F5/p+LZ
nP74d5pEWp5J3zGIhP5DwEFEbB/qukw9WGkUPobTfd18
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:26 2024 by rpki-client on console-fra.rpki-client.org