Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/RjETRIiM69bSZca0laOtWowRZBw.roa
File: RjETRIiM69bSZca0laOtWowRZBw.roa (raw, json)
Hash identifier: VIYusBJxG9QjEqS9hxlZbMqFa+DNhEJ/7pIiB2oh2Zo=
Subject key identifier: 46:31:13:44:88:8C:EB:D6:D2:65:C6:B4:95:A3:AD:5A:8C:11:64:1C
Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial: 01856D660FDC957C91A0603766EA25B96219
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/RjETRIiM69bSZca0laOtWowRZBw.roa
Signing time: Sun 01 Jan 2023 12:54:43 +0000
ROA not before: Sun 01 Jan 2023 12:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35547
IP address blocks: 188.119.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:0f:dc:95:7c:91:a0:60:37:66:ea:25:b9:62:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Validity
Not Before: Jan 1 12:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46311344888cebd6d265c6b495a3ad5a8c11641c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:38:74:96:e1:f8:e8:c3:68:1d:c9:41:37:
66:54:57:9b:98:05:f0:07:92:2e:d9:2c:85:50:88:
b4:4f:b5:79:a2:88:db:51:8a:bf:c5:a4:a3:47:d3:
74:2b:09:19:cb:9f:ab:85:4b:38:52:ce:ce:38:4f:
b2:1b:8d:6c:e4:20:a5:77:66:91:47:dc:0d:3b:64:
8f:e0:ab:ee:01:b7:e0:7f:d5:e1:ed:ae:66:54:d3:
29:c3:78:2e:b4:55:bb:52:b2:c5:07:62:67:fd:3b:
e8:20:15:91:85:0f:56:7e:59:53:19:1d:a7:82:d1:
90:d4:36:13:fe:1c:ce:c3:0e:b6:a6:98:f6:c0:fa:
bd:89:55:c4:63:51:55:90:b6:56:15:c5:3e:9a:ab:
46:54:2f:fe:c2:51:8b:a3:52:2e:46:eb:c9:2b:ae:
6c:97:88:ff:83:7f:23:15:e5:24:55:02:c5:79:46:
b2:fe:75:4a:0e:19:fb:0d:c9:ea:a1:12:86:33:96:
83:aa:f9:d3:58:8f:90:94:1b:7d:d2:f1:0e:ff:5f:
9d:75:0f:79:9e:f2:a0:3b:7d:88:f1:5e:23:4b:86:
0d:83:69:03:8a:b7:8d:42:6c:d2:49:32:17:36:cd:
eb:a1:82:70:38:0d:0b:3d:af:99:3a:bf:3b:ef:04:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:31:13:44:88:8C:EB:D6:D2:65:C6:B4:95:A3:AD:5A:8C:11:64:1C
X509v3 Authority Key Identifier:
keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/RjETRIiM69bSZca0laOtWowRZBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e1:27:b2:fd:24:29:94:61:01:32:f0:18:74:35:d4:18:2e:
79:07:40:34:cf:2e:0a:89:8f:5b:b7:21:77:5a:91:11:66:d7:
de:4c:5f:ba:03:b2:d6:cc:c8:be:e7:89:9d:0e:a2:51:ff:75:
be:25:63:54:d3:29:24:f3:3a:ba:a3:92:73:14:b0:e0:d9:04:
d1:2d:86:87:18:27:f2:17:5e:bd:88:ff:c7:19:61:17:cd:72:
4a:c0:48:65:c6:d9:97:e2:9e:99:4c:49:01:16:03:6f:4b:11:
18:b9:36:ac:1d:17:88:aa:f8:8c:b1:33:d5:81:5b:9f:a8:d0:
a1:ed:ef:1c:25:34:5a:e4:28:2b:bf:fa:12:d5:f8:d7:92:88:
de:81:04:88:e8:44:bf:84:3a:c5:a0:59:3c:85:16:0a:1f:df:
ba:b5:5e:e3:34:fd:65:7d:76:f7:3d:d6:ef:b8:dd:5e:02:87:
c9:47:7b:a6:50:47:e2:c4:3d:46:d6:33:95:24:b0:91:f2:f5:
b3:ad:13:55:95:46:7e:de:dc:64:5a:f8:b2:2d:65:3d:66:7f:
d0:fb:cd:de:86:8c:ed:1a:42:8b:af:b1:c6:92:ef:83:1e:c7:
3e:11:61:c2:22:1e:31:a9:8d:76:2f:6d:a3:54:8f:ac:f5:ef:
68:4d:b3:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtZg/clXyRoGA3ZuoluWIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3
MWJlZjQwHhcNMjMwMTAxMTI1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjMxMTM0NDg4OGNlYmQ2ZDI2NWM2YjQ5NWEzYWQ1YThjMTE2NDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4M4dJbh+OjDaB3JQTdmVFebmAXw
B5Iu2SyFUIi0T7V5oojbUYq/xaSjR9N0KwkZy5+rhUs4Us7OOE+yG41s5CCld2aR
R9wNO2SP4KvuAbfgf9Xh7a5mVNMpw3gutFW7UrLFB2Jn/TvoIBWRhQ9WfllTGR2n
gtGQ1DYT/hzOww62ppj2wPq9iVXEY1FVkLZWFcU+mqtGVC/+wlGLo1IuRuvJK65s
l4j/g38jFeUkVQLFeUay/nVKDhn7DcnqoRKGM5aDqvnTWI+QlBt90vEO/1+ddQ95
nvKgO32I8V4jS4YNg2kDireNQmzSSTIXNs3roYJwOA0LPa+ZOr877wT2KwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEYxE0SIjOvW0mXGtJWjrVqMEWQcMB8GA1UdIwQY
MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt
ZTQyYTU4MDY0YTYzLzEvUmpFVFJJaU02OWJTWmNhMGxhT3RXb3dSWkJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz
LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHcjMA0G
CSqGSIb3DQEBCwUAA4IBAQB84Sey/SQplGEBMvAYdDXUGC55B0A0zy4KiY9btyF3
WpERZtfeTF+6A7LWzMi+54mdDqJR/3W+JWNU0ykk8zq6o5JzFLDg2QTRLYaHGCfy
F169iP/HGWEXzXJKwEhlxtmX4p6ZTEkBFgNvSxEYuTasHReIqviMsTPVgVufqNCh
7e8cJTRa5Cgrv/oS1fjXkojegQSI6ES/hDrFoFk8hRYKH9+6tV7jNP1lfXb3Pdbv
uN1eAofJR3umUEfixD1G1jOVJLCR8vWzrRNVlUZ+3txkWviyLWU9Zn/Q+83ehozt
GkKLr7HGku+DHsc+EWHCIh4xqY12L22jVI+s9e9oTbNA
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:29 2024 by rpki-client on console-fra.rpki-client.org