Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wAFtXeLcJ8dD5Y9l_irdaImMXw4.roa
File: wAFtXeLcJ8dD5Y9l_irdaImMXw4.roa (raw, json)
Hash identifier: flJ4eODt++0tqIfPCa+w6qQj2ZvAXAGiYdHLS+SpKxM=
Subject key identifier: C0:01:6D:5D:E2:DC:27:C7:43:E5:8F:65:FE:2A:DD:68:89:8C:5F:0E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01865E4AABD7B5142EE9EA79B5CF6A9A6A94
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wAFtXeLcJ8dD5Y9l_irdaImMXw4.roa
Signing time: Fri 17 Feb 2023 07:33:17 +0000
ROA not before: Fri 17 Feb 2023 07:33:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 195.133.73.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 09:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:4a:ab:d7:b5:14:2e:e9:ea:79:b5:cf:6a:9a:6a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 17 07:33:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0016d5de2dc27c743e58f65fe2add68898c5f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ba:88:1b:1b:44:4f:1b:90:59:a4:e2:bd:ba:
0b:19:b3:c8:1d:c5:e7:2a:eb:14:78:67:ea:ad:e9:
38:ac:04:d2:54:08:4c:70:d7:c7:8c:80:1b:1f:d4:
72:0e:6c:bd:44:a2:88:c0:d1:83:65:85:95:6e:94:
b8:2c:4f:c1:f7:2b:e7:43:9c:9d:2b:5b:ce:5e:c2:
bc:e5:3d:ff:db:3b:40:15:c5:52:e9:ad:d5:31:8c:
82:0d:d3:8e:25:f7:bf:1e:c7:63:b5:80:55:ee:ce:
cd:e1:6e:6f:9b:cd:b6:40:d7:1d:74:2e:58:f3:20:
fa:57:91:1e:6f:85:4b:41:28:20:f6:39:a4:cd:8c:
ea:fa:61:6b:12:fe:9c:ee:6d:c5:57:59:d1:81:7a:
94:6d:6e:b3:61:30:1f:b3:9b:42:d4:61:8e:ae:13:
7a:36:d1:df:7e:1f:2d:9d:f5:92:77:7a:13:ff:61:
61:a0:ad:e3:ce:ff:49:3d:b7:50:7e:ee:ef:33:61:
91:8f:3d:04:0d:ff:75:ba:1d:45:09:d1:d1:92:ee:
60:93:9c:a9:c3:08:58:29:21:7b:5a:31:f1:97:37:
8b:46:1c:80:37:db:2b:8c:9a:44:e2:cf:f8:04:3e:
66:44:8d:9a:a1:97:5c:2c:bf:c8:0e:a9:9c:12:0b:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:01:6D:5D:E2:DC:27:C7:43:E5:8F:65:FE:2A:DD:68:89:8C:5F:0E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wAFtXeLcJ8dD5Y9l_irdaImMXw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.162.0/24
195.58.63.0/24
195.133.73.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e7:d6:c5:0c:c8:4b:5d:3f:d7:00:00:ff:71:5f:66:66:be:
b4:54:f8:31:05:c6:27:7b:39:54:dc:36:c5:c1:2d:a3:24:a0:
ee:24:c7:92:97:17:50:51:36:a5:b5:05:2f:24:91:6d:d2:90:
ca:1f:77:18:d8:25:64:42:44:8d:11:76:0b:60:0d:cc:9b:3f:
b3:3d:fe:b4:8a:64:86:7f:a4:eb:0d:3d:bd:bf:49:1e:36:15:
e7:02:00:1d:7e:34:53:25:db:28:81:e7:6b:53:ce:ec:07:8b:
3b:c7:e7:9f:da:46:ca:4f:c6:aa:69:a5:e9:be:4b:4a:ba:f4:
21:6a:ed:2f:29:05:8a:17:f5:cc:4f:5c:64:c2:b5:e6:2a:34:
01:e8:71:aa:e2:6d:6e:86:04:a7:27:60:10:e2:67:e9:9f:08:
be:11:f6:0b:2a:63:13:df:44:a6:f2:65:65:7e:3a:2d:a2:eb:
ee:2e:61:6b:ca:88:66:ee:0c:41:1a:46:a9:5b:77:84:6e:1c:
24:ca:3a:7c:57:fc:24:60:ab:6c:d9:d1:9c:19:17:05:2d:70:
fd:09:fb:67:a3:89:e2:7d:d1:77:8f:b8:c5:ef:91:28:46:fa:
71:a1:83:fc:bb:6f:5e:ac:38:25:7c:1d:46:73:49:87:e4:95:
97:41:27:df
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYZeSqvXtRQu6ep5tc9qmmqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMjE3MDczMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDAxNmQ1ZGUyZGMyN2M3NDNlNThmNjVmZTJhZGQ2ODg5OGM1ZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrqIGxtETxuQWaTivboLGbPIHcXn
KusUeGfqrek4rATSVAhMcNfHjIAbH9RyDmy9RKKIwNGDZYWVbpS4LE/B9yvnQ5yd
K1vOXsK85T3/2ztAFcVS6a3VMYyCDdOOJfe/HsdjtYBV7s7N4W5vm822QNcddC5Y
8yD6V5Eeb4VLQSgg9jmkzYzq+mFrEv6c7m3FV1nRgXqUbW6zYTAfs5tC1GGOrhN6
NtHffh8tnfWSd3oT/2FhoK3jzv9JPbdQfu7vM2GRjz0EDf91uh1FCdHRku5gk5yp
wwhYKSF7WjHxlzeLRhyAN9srjJpE4s/4BD5mRI2aoZdcLL/IDqmcEgsIdQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMABbV3i3CfHQ+WPZf4q3WiJjF8OMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvd0FGdFhlTGNKOGRENVk5bF9pcmRhSW1NWHc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwleiAwQA
wzo/AwQAw4VJMA0GCSqGSIb3DQEBCwUAA4IBAQBg59bFDMhLXT/XAAD/cV9mZr60
VPgxBcYnezlU3DbFwS2jJKDuJMeSlxdQUTaltQUvJJFt0pDKH3cY2CVkQkSNEXYL
YA3Mmz+zPf60imSGf6TrDT29v0keNhXnAgAdfjRTJdsogedrU87sB4s7x+ef2kbK
T8aqaaXpvktKuvQhau0vKQWKF/XMT1xkwrXmKjQB6HGq4m1uhgSnJ2AQ4mfpnwi+
EfYLKmMT30Sm8mVlfjotouvuLmFryohm7gxBGkapW3eEbhwkyjp8V/wkYKts2dGc
GRcFLXD9Cftno4nifdF3j7jF75EoRvpxoYP8u29erDglfB1Gc0mH5JWXQSff
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:29 2024 by rpki-client on console-fra.rpki-client.org