Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pQbwtMiJ18oEpfye0HROvSPIreA.roa
File: pQbwtMiJ18oEpfye0HROvSPIreA.roa (raw, json)
Hash identifier: /7+HxeRpp5kow8h5F2F/X+F3TtICnpT8fYxrqwTCvCc=
Subject key identifier: A5:06:F0:B4:C8:89:D7:CA:04:A5:FC:9E:D0:74:4E:BD:23:C8:AD:E0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A2E581690190BC5E68A0D63F70B21F044
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pQbwtMiJ18oEpfye0HROvSPIreA.roa
Signing time: Fri 25 Aug 2023 20:17:19 +0000
ROA not before: Fri 25 Aug 2023 20:17:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208287
IP address blocks: 212.193.31.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 20:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2e:58:16:90:19:0b:c5:e6:8a:0d:63:f7:0b:21:f0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 25 20:17:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a506f0b4c889d7ca04a5fc9ed0744ebd23c8ade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:e7:e7:90:97:fc:99:a3:f1:40:e8:d6:e5:
d3:7c:ff:c4:a0:2c:ed:9a:47:5f:e1:1f:03:c7:8a:
c0:18:3f:13:43:e8:1a:ff:0d:66:11:51:9a:f1:8b:
97:5a:65:39:ca:b4:d4:49:09:7a:13:47:0d:45:b5:
47:68:81:3a:bc:d8:25:8f:6f:82:89:30:33:e0:9b:
c5:3d:8e:2f:b9:2d:a9:ab:51:b1:01:f7:ba:d8:58:
8b:1a:09:b9:01:8d:9c:74:e0:9e:f5:d3:42:7a:04:
c8:2c:ba:b1:31:e0:eb:aa:e7:18:ad:6d:40:17:d8:
50:a8:e0:f0:26:d6:ee:44:e2:f9:a0:ff:0c:ce:81:
3a:35:80:fd:a6:63:87:14:00:10:9b:76:27:6f:7b:
b3:70:94:1d:6f:9e:c5:e4:3b:46:50:09:23:e7:45:
7c:68:2c:8f:d7:3f:60:ca:5b:01:67:25:29:cb:3f:
a9:f2:e7:79:5f:eb:7e:13:11:ee:86:6d:7b:9a:aa:
0a:33:a6:7d:5d:15:73:0f:58:aa:e1:bf:9a:f1:ed:
ac:31:ba:4c:87:51:de:8f:8d:3a:e5:6b:7e:b8:1a:
78:2c:47:ba:b7:ad:34:cf:cc:24:6d:af:e1:48:df:
56:74:03:ae:7f:0c:b4:ec:45:db:91:a0:da:86:4d:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:06:F0:B4:C8:89:D7:CA:04:A5:FC:9E:D0:74:4E:BD:23:C8:AD:E0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pQbwtMiJ18oEpfye0HROvSPIreA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.138.0/24
194.87.161.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:09:b5:3f:05:43:a3:8f:87:5b:bf:68:34:95:fd:9a:a8:14:
7c:43:e3:79:46:36:67:49:44:1d:73:62:3e:a5:bb:d6:c8:c1:
b7:0f:14:38:09:58:da:8c:2b:cd:b1:16:54:25:28:db:6a:76:
98:ef:2d:0b:5b:7f:e2:13:ee:23:9a:2e:93:7e:6c:cd:0a:92:
20:f1:c4:08:e1:8b:4f:07:48:42:c0:30:85:29:1a:fd:92:f1:
01:1f:44:6b:2e:73:a5:65:9f:ae:b7:d2:ae:f7:d7:74:75:64:
4c:8a:8b:49:11:c7:63:bd:15:63:a9:40:bf:1a:bb:53:a3:77:
8c:51:47:69:73:b3:41:8f:b1:c0:d9:dc:0e:f1:2b:43:5d:02:
0a:be:43:ba:02:98:a1:19:cb:2e:82:8e:55:c3:ad:9b:28:13:
a1:22:51:d6:18:2f:c6:7e:6b:1e:8f:db:dd:1b:9f:f2:f7:87:
f2:e2:83:43:73:5b:fd:22:68:cc:b8:e3:5f:30:76:f8:a2:62:
31:78:36:c8:79:3e:d4:ee:f8:eb:1a:06:7d:ad:09:ce:41:35:
9e:6c:9a:70:18:34:8b:86:1a:41:3f:af:a0:01:8d:70:3d:99:
ce:51:dc:e5:25:13:8e:0e:6c:c3:e5:4e:40:c6:ca:66:76:ab:
94:84:8c:d9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYouWBaQGQvF5ooNY/cLIfBEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwODI1MjAxNzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTA2ZjBiNGM4ODlkN2NhMDRhNWZjOWVkMDc0NGViZDIzYzhhZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmarn55CX/Jmj8UDo1uXTfP/EoCzt
mkdf4R8Dx4rAGD8TQ+ga/w1mEVGa8YuXWmU5yrTUSQl6E0cNRbVHaIE6vNglj2+C
iTAz4JvFPY4vuS2pq1GxAfe62FiLGgm5AY2cdOCe9dNCegTILLqxMeDrqucYrW1A
F9hQqODwJtbuROL5oP8MzoE6NYD9pmOHFAAQm3Ynb3uzcJQdb57F5DtGUAkj50V8
aCyP1z9gylsBZyUpyz+p8ud5X+t+ExHuhm17mqoKM6Z9XRVzD1iq4b+a8e2sMbpM
h1Hej4065Wt+uBp4LEe6t600z8wkba/hSN9WdAOufwy07EXbkaDahk2YzQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKUG8LTIidfKBKX8ntB0Tr0jyK3gMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvcFFid3RNaUoxOG9FcGZ5ZTBIUk92U1BJcmVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwleKAwQA
wlehAwQA1MEfMA0GCSqGSIb3DQEBCwUAA4IBAQANCbU/BUOjj4dbv2g0lf2aqBR8
Q+N5RjZnSUQdc2I+pbvWyMG3DxQ4CVjajCvNsRZUJSjbanaY7y0LW3/iE+4jmi6T
fmzNCpIg8cQI4YtPB0hCwDCFKRr9kvEBH0RrLnOlZZ+ut9Ku99d0dWRMiotJEcdj
vRVjqUC/GrtTo3eMUUdpc7NBj7HA2dwO8StDXQIKvkO6ApihGcsugo5Vw62bKBOh
IlHWGC/Gfmsej9vdG5/y94fy4oNDc1v9ImjMuONfMHb4omIxeDbIeT7U7vjrGgZ9
rQnOQTWebJpwGDSLhhpBP6+gAY1wPZnOUdzlJROODmzD5U5AxspmdquUhIzZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:46 2024 by rpki-client on console-ams.rpki-client.org