Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oAoyKPC2GW4owvbriRu_s_IH9CY.roa
File: oAoyKPC2GW4owvbriRu_s_IH9CY.roa (raw, json)
Hash identifier: D8sIxpf28ZMpQi0pPAYi/VglNnfy+pXBenXt8KHCNQk=
Subject key identifier: A0:0A:32:28:F0:B6:19:6E:28:C2:F6:EB:89:1B:BF:B3:F2:07:F4:26
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AEC919BF196DCBBAD1BC2E2CCFA6DFBE2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oAoyKPC2GW4owvbriRu_s_IH9CY.roa
Signing time: Sun 01 Oct 2023 18:48:00 +0000
ROA not before: Sun 01 Oct 2023 18:48:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203172
IP address blocks: 194.87.223.0/24 maxlen: 24
194.87.20.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 08 Nov 2023 07:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ec:91:9b:f1:96:dc:bb:ad:1b:c2:e2:cc:fa:6d:fb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 1 18:48:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a00a3228f0b6196e28c2f6eb891bbfb3f207f426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:bd:f4:9c:64:22:bf:80:01:05:87:7e:b4:
cf:4b:d1:3b:2d:df:4f:a2:00:17:43:9a:cb:92:4b:
9e:9e:32:f6:da:98:72:48:45:14:5f:e6:ec:67:33:
ae:38:cb:0a:a2:da:1f:4d:09:02:ff:ca:85:62:9e:
44:a7:d4:cd:87:bb:86:fb:1c:0f:c1:77:8a:76:4b:
65:fb:8f:42:81:2e:1d:3a:2c:9d:6e:5d:f5:21:17:
20:11:1b:34:7d:db:eb:52:74:2d:b8:a7:b5:bc:72:
2e:6c:7d:e1:0d:8b:e2:7a:10:da:9f:8e:bd:52:65:
4c:1c:f7:86:38:34:b9:a8:60:0b:9f:a8:83:b6:f9:
a1:f9:31:4a:ea:0d:9a:eb:43:f5:66:49:bd:e3:58:
cc:40:fd:f8:c8:98:bf:a7:5c:13:cb:89:65:e2:4b:
19:75:b2:53:45:2e:8c:0c:2a:35:18:7c:59:ed:c6:
e9:fd:4c:b1:f6:9a:cd:a2:4a:2a:41:e2:f5:cd:87:
0d:6d:46:a8:cc:24:25:9f:14:97:35:b4:49:b8:6a:
4d:89:8f:57:f3:d4:02:70:98:d1:6e:18:ae:b7:38:
51:cc:bf:51:6a:5e:3f:d1:39:7f:dd:32:4f:18:88:
c9:a3:81:57:b4:82:db:b4:80:d4:0c:66:b5:fd:40:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:32:28:F0:B6:19:6E:28:C2:F6:EB:89:1B:BF:B3:F2:07:F4:26
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oAoyKPC2GW4owvbriRu_s_IH9CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.20.0/23
194.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:78:53:e0:71:56:3e:c3:de:c9:7e:a3:14:5c:b4:49:f4:30:
f9:a3:09:84:59:5b:6b:80:25:52:33:74:32:40:1c:8d:21:44:
f9:76:96:3e:c2:97:50:17:9b:ca:32:ce:0c:06:f0:da:35:12:
f8:ac:ef:b3:22:ca:6d:52:55:89:78:fe:6e:40:b5:f7:a1:cc:
6a:b6:91:1b:59:ef:9d:5f:e5:f7:7e:85:aa:4d:6a:c0:11:ed:
20:0e:bb:23:c5:ea:0d:be:c0:6d:58:c6:61:c3:cd:b4:4e:22:
95:b7:e7:d5:de:7a:e3:e5:03:95:d5:e7:4b:94:0c:cf:36:6d:
08:0a:e7:23:0d:21:dc:6b:4e:f6:eb:88:ca:a6:a2:d8:0f:1f:
96:63:95:37:ad:f7:10:a9:d3:f3:df:77:4c:52:2b:3a:37:8c:
42:3b:1a:60:fd:f0:7d:88:99:c2:a5:50:66:ad:72:ad:19:79:
15:4e:68:7f:3b:78:b1:00:9f:9d:b1:b7:e4:57:e1:0b:82:ae:
fa:a1:7f:57:bd:3f:52:84:94:b3:3d:c0:fa:7b:1c:5d:aa:8b:
ed:4f:63:be:dd:b3:4a:d2:51:1f:c6:16:b2:b2:d2:12:ab:8a:
86:d0:45:11:95:23:52:d6:41:5d:d1:86:08:d7:53:10:2d:a0:
6a:fe:c6:19
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYrskZvxlty7rRvC4sz6bfviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMDAxMTg0ODAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDBhMzIyOGYwYjYxOTZlMjhjMmY2ZWI4OTFiYmZiM2YyMDdmNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRm99JxkIr+AAQWHfrTPS9E7Ld9P
ogAXQ5rLkkuenjL22phySEUUX+bsZzOuOMsKotofTQkC/8qFYp5Ep9TNh7uG+xwP
wXeKdktl+49CgS4dOiydbl31IRcgERs0fdvrUnQtuKe1vHIubH3hDYviehDan469
UmVMHPeGODS5qGALn6iDtvmh+TFK6g2a60P1Zkm941jMQP34yJi/p1wTy4ll4ksZ
dbJTRS6MDCo1GHxZ7cbp/Uyx9prNokoqQeL1zYcNbUaozCQlnxSXNbRJuGpNiY9X
89QCcJjRbhiutzhRzL9Ral4/0Tl/3TJPGIjJo4FXtILbtIDUDGa1/UA8JwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKAKMijwthluKML264kbv7PyB/QmMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvb0FveUtQQzJHVzRvd3ZicmlSdV9zX0lIOUNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwlcUAwQA
wlffMA0GCSqGSIb3DQEBCwUAA4IBAQCPeFPgcVY+w97JfqMUXLRJ9DD5owmEWVtr
gCVSM3QyQByNIUT5dpY+wpdQF5vKMs4MBvDaNRL4rO+zIsptUlWJeP5uQLX3ocxq
tpEbWe+dX+X3foWqTWrAEe0gDrsjxeoNvsBtWMZhw820TiKVt+fV3nrj5QOV1edL
lAzPNm0ICucjDSHca07264jKpqLYDx+WY5U3rfcQqdPz33dMUis6N4xCOxpg/fB9
iJnCpVBmrXKtGXkVTmh/O3ixAJ+dsbfkV+ELgq76oX9XvT9ShJSzPcD6exxdqovt
T2O+3bNK0lEfxhaystISq4qG0EURlSNS1kFd0YYI11MQLaBq/sYZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:26 2024 by rpki-client on console-fra.rpki-client.org