Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/OGnUc7WCjVyK9rUZfzllU64aXlA.roa
File: OGnUc7WCjVyK9rUZfzllU64aXlA.roa (raw, json)
Hash identifier: aRUylCfrdboFO7NQ+nMZpW/pn6gXIRu1daFU1EObiKY=
Subject key identifier: 38:69:D4:73:B5:82:8D:5C:8A:F6:B5:19:7F:39:65:53:AE:1A:5E:50
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 0186494F21B507215A51CDB0049F3489A603
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/OGnUc7WCjVyK9rUZfzllU64aXlA.roa
Signing time: Mon 13 Feb 2023 05:46:08 +0000
ROA not before: Mon 13 Feb 2023 05:46:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35392
IP address blocks: 94.188.142.0/24 maxlen: 24
94.188.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:4f:21:b5:07:21:5a:51:cd:b0:04:9f:34:89:a6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Feb 13 05:46:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3869d473b5828d5c8af6b5197f396553ae1a5e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:ec:55:79:8c:8f:fb:5f:c1:ca:5a:96:fc:
c5:69:f7:fb:07:34:d4:dc:f0:a5:19:2a:aa:71:3b:
88:e0:3f:7b:07:6c:02:70:b8:06:b7:1c:5c:08:03:
f0:0e:02:57:e6:d8:b1:0b:6d:2b:03:d8:14:3d:a2:
15:a0:0c:b9:42:ca:e9:da:11:e9:b7:ec:f7:33:22:
b9:79:1e:93:1c:54:b0:ba:b9:46:37:bc:bd:39:75:
a8:42:b6:e2:be:35:ca:b3:ad:ae:1f:ea:2e:cf:67:
5e:77:f1:53:9d:9d:63:a0:72:eb:2d:99:e1:ea:b2:
ec:db:d2:3b:5e:72:63:53:91:6b:96:50:0e:50:2e:
25:23:96:56:ba:36:91:c1:b0:59:64:9a:ee:a3:31:
a2:55:48:ef:f7:fe:f7:26:02:59:ab:ce:3c:70:f1:
95:1f:2e:ff:aa:b4:31:f6:c8:14:6c:bc:d8:e5:23:
94:46:77:82:a1:e6:46:d6:24:e7:aa:ef:06:22:cc:
de:8c:b9:df:8f:36:ab:c9:75:26:bf:38:ed:07:fa:
97:03:1b:7b:c9:8d:71:1b:62:48:27:a5:73:8e:df:
e0:d6:2b:25:95:55:b1:73:b4:ec:0b:ad:1b:f9:c3:
51:d9:f0:9d:96:9c:c2:c8:00:7a:e5:1b:83:a9:26:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:69:D4:73:B5:82:8D:5C:8A:F6:B5:19:7F:39:65:53:AE:1A:5E:50
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/OGnUc7WCjVyK9rUZfzllU64aXlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.142.0/24
94.188.198.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ce:b8:16:4d:4f:4c:30:79:c6:3f:32:31:47:1d:3c:00:f1:
53:34:a2:59:d6:42:2a:1c:f5:59:e7:e1:24:62:d1:d9:14:0b:
16:63:7c:61:a7:dd:86:c5:15:3c:ee:be:f9:b4:78:e6:bd:5b:
b2:7f:70:b7:44:29:75:83:3b:6e:27:c5:30:2b:7a:52:2f:6f:
e4:a9:18:93:d8:d1:ab:23:2e:10:87:2b:32:ed:c6:ee:b6:80:
df:37:80:93:9f:3e:0a:f2:92:9e:52:ea:09:2b:98:9f:0c:85:
28:02:a7:99:cf:e8:df:5b:f6:9f:8a:5d:a9:01:0c:c9:6b:47:
4e:5f:ec:b6:84:b3:3a:20:06:23:39:30:de:5f:29:c3:9f:f7:
e2:d7:04:7b:16:10:4d:b1:80:e4:f8:e2:56:a8:ad:2d:ae:22:
74:ca:cf:8d:d4:99:1e:de:88:af:5f:c2:5d:41:12:7c:43:35:
b5:e1:3b:96:4b:a1:22:1e:48:d9:26:8f:49:7c:1a:70:b1:b4:
29:d8:5b:2d:d8:33:dd:0b:5b:a3:5d:33:f1:f3:c3:45:0b:69:
aa:c9:23:79:08:c2:d1:60:02:ba:b8:fb:c3:0f:01:42:cd:a4:
f1:72:a1:18:0d:08:00:6f:e6:db:ce:8d:88:f2:72:f1:ab:33:
31:1f:97:96
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZJTyG1ByFaUc2wBJ80iaYDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5
YTBkODYwHhcNMjMwMjEzMDU0NjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODY5ZDQ3M2I1ODI4ZDVjOGFmNmI1MTk3ZjM5NjU1M2FlMWE1ZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdrsVXmMj/tfwcpalvzFaff7BzTU
3PClGSqqcTuI4D97B2wCcLgGtxxcCAPwDgJX5tixC20rA9gUPaIVoAy5Qsrp2hHp
t+z3MyK5eR6THFSwurlGN7y9OXWoQrbivjXKs62uH+ouz2ded/FTnZ1joHLrLZnh
6rLs29I7XnJjU5FrllAOUC4lI5ZWujaRwbBZZJruozGiVUjv9/73JgJZq848cPGV
Hy7/qrQx9sgUbLzY5SOURneCoeZG1iTnqu8GIszejLnfjzaryXUmvzjtB/qXAxt7
yY1xG2JIJ6Vzjt/g1isllVWxc7TsC60b+cNR2fCdlpzCyAB65RuDqSZgUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDhp1HO1go1civa1GX85ZVOuGl5QMB8GA1UdIwQY
MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt
NDIxZTZiYzdlMmU4LzEvT0duVWM3V0NqVnlLOXJVWmZ6bGxVNjRhWGxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4
LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXryOAwQA
XrzGMA0GCSqGSIb3DQEBCwUAA4IBAQCuzrgWTU9MMHnGPzIxRx08APFTNKJZ1kIq
HPVZ5+EkYtHZFAsWY3xhp92GxRU87r75tHjmvVuyf3C3RCl1gztuJ8UwK3pSL2/k
qRiT2NGrIy4Qhysy7cbutoDfN4CTnz4K8pKeUuoJK5ifDIUoAqeZz+jfW/afil2p
AQzJa0dOX+y2hLM6IAYjOTDeXynDn/fi1wR7FhBNsYDk+OJWqK0triJ0ys+N1Jke
3oivX8JdQRJ8QzW14TuWS6EiHkjZJo9JfBpwsbQp2Fst2DPdC1ujXTPx88NFC2mq
ySN5CMLRYAK6uPvDDwFCzaTxcqEYDQgAb+bbzo2I8nLxqzMxH5eW
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:38 2024 by rpki-client on console-ams.rpki-client.org