Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rVtFltf6S0FFjLZLsqhqZxxdwq8.roa
File: rVtFltf6S0FFjLZLsqhqZxxdwq8.roa (raw, json)
Hash identifier: F5ujh2OMqXKkImHhJk6j1uZ2SLc1FiSSUsgkhO6JXWk=
Subject key identifier: AD:5B:45:96:D7:FA:4B:41:45:8C:B6:4B:B2:A8:6A:67:1C:5D:C2:AF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189ABBE4131B6EB4305318D99E8D1C8AFD3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rVtFltf6S0FFjLZLsqhqZxxdwq8.roa
Signing time: Mon 31 Jul 2023 11:38:39 +0000
ROA not before: Mon 31 Jul 2023 11:38:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 194.87.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Aug 2023 11:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:be:41:31:b6:eb:43:05:31:8d:99:e8:d1:c8:af:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 31 11:38:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad5b4596d7fa4b41458cb64bb2a86a671c5dc2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:64:26:1c:0d:08:f5:27:c1:fe:3d:70:99:a5:
a9:5f:f2:29:e7:4b:39:a6:d9:e4:33:6f:3f:ea:18:
59:0a:21:66:ae:10:60:4b:68:51:e5:f5:ac:21:64:
4f:62:4c:ea:0e:47:3e:dd:2f:2f:78:6b:94:c1:6b:
d1:db:af:f6:c7:f8:82:25:60:72:69:a5:74:21:b3:
54:41:cf:5b:20:f6:bb:f1:a2:c9:bc:a3:df:76:62:
a3:30:90:a2:be:93:f7:b3:2d:0a:75:b0:8e:b1:2b:
ff:fe:d9:6e:30:8b:24:ff:67:04:9b:f6:8d:82:13:
5d:92:b7:0f:aa:a5:b3:4e:05:bd:04:3e:df:f8:3b:
aa:55:da:34:57:a0:d8:9c:06:f1:1e:90:ce:dd:1e:
29:85:94:02:e0:0a:e4:73:29:52:00:c6:3b:b6:52:
16:0c:86:90:e2:b7:af:a0:3a:d0:36:15:5d:fe:a0:
03:57:09:55:6b:fc:42:eb:7e:c2:70:ab:74:0a:ac:
0e:92:0b:0a:38:72:bf:85:6c:f4:27:a1:95:7e:9e:
6b:c7:3c:ca:c8:67:98:98:8c:04:ca:c1:ba:a7:7f:
9b:e1:f6:63:85:6c:8e:e2:28:5e:6e:de:e2:8b:02:
ff:35:bc:48:c0:89:67:f6:06:eb:a1:84:3c:07:9f:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5B:45:96:D7:FA:4B:41:45:8C:B6:4B:B2:A8:6A:67:1C:5D:C2:AF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rVtFltf6S0FFjLZLsqhqZxxdwq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.182.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5b:32:b9:02:20:bb:5a:d7:f1:18:ed:f3:11:97:d9:fd:d6:
b9:1f:1f:1a:72:11:cd:6a:0f:15:97:86:22:b4:05:47:6e:4e:
f2:b4:1d:49:ea:38:b4:df:b3:97:69:51:36:1e:33:04:90:99:
57:fc:e2:9a:0e:f6:7f:09:0e:71:08:f0:9a:06:a4:42:bc:ba:
1f:5b:07:36:63:12:09:c3:e8:96:01:6b:e1:ef:28:f8:40:78:
3c:cd:24:90:d4:92:30:e2:b0:08:e4:90:44:70:54:35:49:99:
52:72:9c:4d:46:13:22:77:63:f6:f0:f2:f0:43:19:e6:a8:05:
f9:55:fd:8e:ec:29:7c:69:34:b4:aa:cd:2a:f6:d8:b8:b9:82:
9e:5e:e9:ca:dc:fe:4b:7c:8a:06:84:17:14:ae:a7:75:fd:97:
80:c7:8a:22:11:54:46:23:01:92:13:1d:de:32:f1:bb:d7:d0:
0d:6b:db:64:cd:00:b2:d5:6e:5a:f7:5d:1c:6b:43:c8:52:fb:
f6:f9:a2:42:d5:90:d2:82:eb:f0:80:c1:a6:3d:55:4d:8c:26:
28:3d:f2:82:d5:5e:b8:9e:bd:14:fd:3c:04:d3:15:d2:10:b3:
6e:80:90:72:25:9f:fe:af:7c:9b:6a:bd:2a:09:7f:8c:aa:9a:
95:e8:0a:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmrvkExtutDBTGNmejRyK/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNzMxMTEzODM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDViNDU5NmQ3ZmE0YjQxNDU4Y2I2NGJiMmE4NmE2NzFjNWRjMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGQmHA0I9SfB/j1wmaWpX/Ip50s5
ptnkM28/6hhZCiFmrhBgS2hR5fWsIWRPYkzqDkc+3S8veGuUwWvR26/2x/iCJWBy
aaV0IbNUQc9bIPa78aLJvKPfdmKjMJCivpP3sy0KdbCOsSv//tluMIsk/2cEm/aN
ghNdkrcPqqWzTgW9BD7f+DuqVdo0V6DYnAbxHpDO3R4phZQC4ArkcylSAMY7tlIW
DIaQ4revoDrQNhVd/qADVwlVa/xC637CcKt0CqwOkgsKOHK/hWz0J6GVfp5rxzzK
yGeYmIwEysG6p3+b4fZjhWyO4ihebt7iiwL/NbxIwIln9gbroYQ8B5/+WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK1bRZbX+ktBRYy2S7KoamccXcKvMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvclZ0Rmx0ZjZTMEZGakxaTHNxaHFaeHhkd3E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwle2MA0G
CSqGSIb3DQEBCwUAA4IBAQB1WzK5AiC7WtfxGO3zEZfZ/da5Hx8achHNag8Vl4Yi
tAVHbk7ytB1J6ji037OXaVE2HjMEkJlX/OKaDvZ/CQ5xCPCaBqRCvLofWwc2YxIJ
w+iWAWvh7yj4QHg8zSSQ1JIw4rAI5JBEcFQ1SZlScpxNRhMid2P28PLwQxnmqAX5
Vf2O7Cl8aTS0qs0q9ti4uYKeXunK3P5LfIoGhBcUrqd1/ZeAx4oiEVRGIwGSEx3e
MvG719ANa9tkzQCy1W5a910ca0PIUvv2+aJC1ZDSguvwgMGmPVVNjCYoPfKC1V64
nr0U/TwE0xXSELNugJByJZ/+r3ybar0qCX+MqpqV6AqS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:27 2024 by rpki-client on console-fra.rpki-client.org