Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ri9HSDffT2drWmlSG-hU4SIPhMY.roa
File: ri9HSDffT2drWmlSG-hU4SIPhMY.roa (raw, json)
Hash identifier: RGi4C3KBMMAkpXSEkbfxp9ZjV5xzl/0B8/qyXblzcB4=
Subject key identifier: AE:2F:47:48:37:DF:4F:67:6B:5A:69:52:1B:E8:54:E1:22:0F:84:C6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018757D3F9DC81CD1B9F84466FB703C0EB24
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ri9HSDffT2drWmlSG-hU4SIPhMY.roa
Signing time: Thu 06 Apr 2023 18:28:42 +0000
ROA not before: Thu 06 Apr 2023 18:28:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202984
IP address blocks: 195.133.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:d3:f9:dc:81:cd:1b:9f:84:46:6f:b7:03:c0:eb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 18:28:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae2f474837df4f676b5a69521be854e1220f84c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:38:d5:d7:ef:af:0f:5b:51:d8:11:c8:f9:
dd:56:3a:e3:23:7f:3c:9e:09:14:b0:2c:8d:72:04:
93:e7:d4:37:16:c6:69:2c:85:76:05:b9:75:28:e0:
f5:52:07:4a:71:bf:1c:db:25:cb:f0:e8:ac:1b:cc:
26:89:0b:75:06:24:be:57:99:85:8e:9f:6a:cb:76:
86:39:8c:3f:ad:97:c7:c8:09:8a:0d:69:ec:a3:9f:
95:53:61:06:48:15:3b:20:f6:1d:cd:e5:23:1e:1b:
79:25:c9:9c:c4:71:36:4f:8b:48:d4:cf:a5:15:2e:
5b:17:02:01:6b:44:f5:64:63:0f:1e:82:8a:ab:3b:
aa:2a:07:0d:ff:44:16:79:3f:06:c8:29:cc:2c:b6:
c7:ef:1d:0a:6b:47:15:d8:f2:a7:63:9d:cd:88:de:
8a:af:fd:58:9d:f0:80:83:8c:a3:ea:58:da:8b:00:
c8:ea:b2:80:68:92:be:2b:2e:06:1b:52:2c:e2:b1:
69:47:bc:0e:52:0e:26:07:d8:a5:a1:ef:9b:b8:1a:
b6:ea:66:ff:40:95:a0:c2:6c:08:b4:d5:2f:8c:aa:
e9:0d:fc:3d:23:da:96:28:b3:88:74:95:0b:c1:d3:
8c:91:f5:d8:7c:c9:eb:7f:e6:6c:64:93:50:87:63:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2F:47:48:37:DF:4F:67:6B:5A:69:52:1B:E8:54:E1:22:0F:84:C6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ri9HSDffT2drWmlSG-hU4SIPhMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.60.0/22
Signature Algorithm: sha256WithRSAEncryption
06:35:e7:ec:2f:3c:61:d4:db:19:46:28:2a:38:d4:2e:30:2d:
f9:dd:5c:9d:4e:de:88:79:88:cf:50:6b:31:af:6f:a7:6c:af:
b5:8a:bd:d8:d4:e6:ad:f7:44:b2:74:86:3c:fb:ec:b3:c7:c1:
9c:fd:a4:fa:75:34:bb:d2:2b:fc:e5:44:83:bc:29:09:06:b8:
06:4e:52:3d:ce:f6:87:6c:1e:c9:52:ec:10:06:03:58:c3:ee:
04:35:5d:8f:e7:71:e5:ac:a3:41:78:ca:d1:94:4b:91:08:3e:
cc:bb:64:d9:42:4e:03:b4:76:36:f0:33:2d:0c:71:7a:0f:52:
01:1f:b4:06:04:ba:4b:8e:17:8f:a9:e4:ae:c3:18:32:77:72:
a1:64:5a:72:37:1f:9f:69:c3:cd:6c:6f:7a:43:1f:a8:32:2b:
4d:5b:d6:4d:ac:43:1a:bc:3d:71:ba:a5:ba:08:c7:c4:4b:a3:
e1:f0:80:7f:f2:d4:bb:eb:6c:93:e4:8d:70:f8:4a:9e:b7:a7:
eb:3c:fc:27:0e:91:6a:33:ce:4f:94:ae:3f:37:73:4e:5a:c6:
9b:23:37:4e:78:66:3f:42:1c:f7:02:9a:11:11:cd:4f:38:08:
8f:d0:6e:5a:96:45:f1:3d:85:9f:d2:60:ee:bb:0c:e5:2d:a3:
20:24:a4:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdX0/ncgc0bn4RGb7cDwOskMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDA2MTgyODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTJmNDc0ODM3ZGY0ZjY3NmI1YTY5NTIxYmU4NTRlMTIyMGY4NGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsY41dfvrw9bUdgRyPndVjrjI388
ngkUsCyNcgST59Q3FsZpLIV2Bbl1KOD1UgdKcb8c2yXL8OisG8wmiQt1BiS+V5mF
jp9qy3aGOYw/rZfHyAmKDWnso5+VU2EGSBU7IPYdzeUjHht5JcmcxHE2T4tI1M+l
FS5bFwIBa0T1ZGMPHoKKqzuqKgcN/0QWeT8GyCnMLLbH7x0Ka0cV2PKnY53NiN6K
r/1YnfCAg4yj6ljaiwDI6rKAaJK+Ky4GG1Is4rFpR7wOUg4mB9iloe+buBq26mb/
QJWgwmwItNUvjKrpDfw9I9qWKLOIdJULwdOMkfXYfMnrf+ZsZJNQh2Mb+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK4vR0g3309na1ppUhvoVOEiD4TGMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvcmk5SFNEZmZUMmRyV21sU0ctaFU0U0lQaE1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw4U8MA0G
CSqGSIb3DQEBCwUAA4IBAQAGNefsLzxh1NsZRigqONQuMC353VydTt6IeYjPUGsx
r2+nbK+1ir3Y1Oat90SydIY8++yzx8Gc/aT6dTS70iv85USDvCkJBrgGTlI9zvaH
bB7JUuwQBgNYw+4ENV2P53HlrKNBeMrRlEuRCD7Mu2TZQk4DtHY28DMtDHF6D1IB
H7QGBLpLjhePqeSuwxgyd3KhZFpyNx+facPNbG96Qx+oMitNW9ZNrEMavD1xuqW6
CMfES6Ph8IB/8tS762yT5I1w+Eqet6frPPwnDpFqM85PlK4/N3NOWsabIzdOeGY/
Qhz3ApoREc1POAiP0G5alkXxPYWf0mDuuwzlLaMgJKR0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:28 2024 by rpki-client on console-fra.rpki-client.org