Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xiMQRzCFxrjtJONbzudWxR7b8MA.roa
File: xiMQRzCFxrjtJONbzudWxR7b8MA.roa (raw, json)
Hash identifier: Gb7jAPPiignhpoK/m5B54I881snAmZ869d7ysSQ6HS8=
Subject key identifier: C6:23:10:47:30:85:C6:B8:ED:24:E3:5B:CE:E7:56:C5:1E:DB:F0:C0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189DFDC87423F2E7551C2A8F3C4D757356E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xiMQRzCFxrjtJONbzudWxR7b8MA.roa
Signing time: Thu 10 Aug 2023 14:31:58 +0000
ROA not before: Thu 10 Aug 2023 14:31:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 195.133.78.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
194.87.20.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:dc:87:42:3f:2e:75:51:c2:a8:f3:c4:d7:57:35:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 10 14:31:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c62310473085c6b8ed24e35bcee756c51edbf0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:66:4d:a3:6d:93:db:9a:b4:8f:15:2b:f7:
f0:27:76:03:87:26:e4:39:ff:14:40:ab:14:68:56:
e6:fd:a8:4d:16:42:9a:c0:3c:c8:77:e7:14:4f:36:
3c:5b:0b:d8:66:69:94:dc:06:aa:90:d5:44:c5:74:
40:1f:f6:06:fd:ad:1b:9c:48:e3:7a:ec:00:54:dd:
c8:b1:47:00:75:f2:aa:c8:7f:e9:a5:75:00:37:d1:
68:71:f3:2d:cd:67:11:eb:c0:a3:ea:e3:b5:84:cc:
5d:d8:fa:5e:b2:c4:21:fd:f2:1c:db:fa:4c:5f:be:
f2:8a:4c:06:1c:ec:be:bf:43:13:d1:77:be:63:ee:
09:10:ca:90:aa:f8:b9:ff:2e:5e:a1:3d:22:58:bb:
1f:3e:ee:48:70:d9:2f:87:9a:1f:b0:e6:56:b5:b3:
58:34:03:15:9e:2a:46:2d:9f:e3:81:90:07:4a:57:
ff:4b:78:c6:4b:a0:72:37:03:4e:7c:6f:24:f8:ca:
4e:92:98:bb:4a:29:31:f4:b6:16:0b:d9:2b:d7:99:
27:f7:fa:9a:10:f9:62:00:dd:53:a4:76:b1:71:99:
7e:d6:89:70:07:21:ec:89:09:51:94:3d:54:28:a3:
94:d6:69:b7:45:76:2a:89:e2:e9:10:92:12:76:b9:
04:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:23:10:47:30:85:C6:B8:ED:24:E3:5B:CE:E7:56:C5:1E:DB:F0:C0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xiMQRzCFxrjtJONbzudWxR7b8MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.20.0/24
194.135.105.0/24
195.58.34.0/24
195.58.58.0/24
195.133.35.0/24
195.133.78.0/23
Signature Algorithm: sha256WithRSAEncryption
07:f6:d7:ff:a9:66:0d:7d:bd:f1:33:70:73:eb:7f:40:59:e5:
53:59:df:62:3a:69:57:9e:f2:16:8c:80:c0:cf:75:29:da:10:
d2:1d:e7:e7:c7:c3:33:71:90:4f:e1:be:c2:0f:53:9e:8e:4c:
34:d1:8a:6d:c7:75:60:e7:f6:e1:4b:01:29:33:e3:57:b7:8d:
c8:73:ba:cb:9b:79:78:80:5e:f6:43:ec:9e:b4:2a:b1:28:4b:
01:06:eb:de:ad:5c:7a:bc:77:0e:5d:7d:0e:c0:92:fa:8f:d1:
ad:4b:4f:df:6a:14:d6:7d:3b:11:1c:ad:f7:1b:e5:83:eb:47:
a0:07:e0:48:03:09:b3:ee:15:6b:53:96:e5:89:68:73:e1:8d:
f5:33:44:ef:3a:0a:82:77:10:1e:b8:1c:1b:a6:e2:d3:57:8c:
cc:f5:ae:c0:c8:aa:c0:ad:6f:1a:45:34:85:dc:c3:88:a0:c5:
4e:5a:c9:6c:80:95:d0:cb:ae:76:ea:88:4a:91:26:c9:95:3b:
86:35:8a:96:80:fe:51:76:06:6c:e9:00:5d:f4:68:b7:74:1e:
1c:4e:44:14:c6:cb:81:16:f5:5f:49:5e:ea:25:9d:e6:44:31:
be:6f:87:ca:02:56:d6:86:4f:f6:8b:83:6a:15:84:da:68:3c:
f0:bb:f5:1a
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYnf3IdCPy51UcKo88TXVzVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwODEwMTQzMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjIzMTA0NzMwODVjNmI4ZWQyNGUzNWJjZWU3NTZjNTFlZGJmMGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJBmTaNtk9uatI8VK/fwJ3YDhybk
Of8UQKsUaFbm/ahNFkKawDzId+cUTzY8WwvYZmmU3AaqkNVExXRAH/YG/a0bnEjj
euwAVN3IsUcAdfKqyH/ppXUAN9FocfMtzWcR68Cj6uO1hMxd2PpessQh/fIc2/pM
X77yikwGHOy+v0MT0Xe+Y+4JEMqQqvi5/y5eoT0iWLsfPu5IcNkvh5ofsOZWtbNY
NAMVnipGLZ/jgZAHSlf/S3jGS6ByNwNOfG8k+MpOkpi7Sikx9LYWC9kr15kn9/qa
EPliAN1TpHaxcZl+1olwByHsiQlRlD1UKKOU1mm3RXYqieLpEJISdrkEwQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFMYjEEcwhca47STjW87nVsUe2/DAMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEveGlNUVJ6Q0Z4cmp0Sk9OYnp1ZFd4UjdiOE1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwlcUAwQA
wodpAwQAwzoiAwQAwzo6AwQAw4UjAwQBw4VOMA0GCSqGSIb3DQEBCwUAA4IBAQAH
9tf/qWYNfb3xM3Bz639AWeVTWd9iOmlXnvIWjIDAz3Up2hDSHefnx8MzcZBP4b7C
D1Oejkw00Yptx3Vg5/bhSwEpM+NXt43Ic7rLm3l4gF72Q+yetCqxKEsBBuverVx6
vHcOXX0OwJL6j9GtS0/fahTWfTsRHK33G+WD60egB+BIAwmz7hVrU5bliWhz4Y31
M0TvOgqCdxAeuBwbpuLTV4zM9a7AyKrArW8aRTSF3MOIoMVOWslsgJXQy6526ohK
kSbJlTuGNYqWgP5RdgZs6QBd9Gi3dB4cTkQUxsuBFvVfSV7qJZ3mRDG+b4fKAlbW
hk/2i4NqFYTaaDzwu/Ua
-----END CERTIFICATE-----
Generated at Fri Aug 18 06:16:23 2023 by rpki-client on console-ams.rpki-client.org