Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/b35S-F9sFhvmV4OYfYFDF3pCdRM.roa
File: b35S-F9sFhvmV4OYfYFDF3pCdRM.roa (raw, json)
Hash identifier: et1WcVKSIHBgLvzkVY/2hQXxcafpQ/FSkcH9q50v0U4=
Subject key identifier: 6F:7E:52:F8:5F:6C:16:1B:E6:57:83:98:7D:81:43:17:7A:42:75:13
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 01856C9CE43920F86CCC1BD93E0D3B66B462
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/b35S-F9sFhvmV4OYfYFDF3pCdRM.roa
Signing time: Sun 01 Jan 2023 09:14:59 +0000
ROA not before: Sun 01 Jan 2023 09:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48136
IP address blocks: 95.131.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:e4:39:20:f8:6c:cc:1b:d9:3e:0d:3b:66:b4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 09:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f7e52f85f6c161be65783987d8143177a427513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:4f:dd:e0:68:56:07:e4:2b:fd:62:bc:b1:
a2:51:54:2e:fd:63:b2:46:ee:70:7c:7f:59:bb:14:
36:f4:a8:8a:42:b9:45:18:81:d3:1e:19:66:ec:ab:
0e:b2:4f:96:a9:4d:4c:64:3c:5c:c1:fe:bd:b4:b7:
cb:45:9a:63:6c:9f:fd:cb:b2:1c:5e:8d:35:96:8a:
74:43:15:05:fe:7b:99:84:ea:af:bb:01:f9:19:eb:
fa:0a:65:51:3a:c6:6e:8a:26:8d:7d:86:2b:9b:56:
89:93:1a:5e:ac:0a:f0:e0:98:12:26:b4:7b:39:72:
35:2b:66:35:76:bf:54:3e:f1:a2:a5:d9:fb:8c:a2:
8d:62:8b:a8:24:d6:68:4a:72:6b:76:2a:b5:98:af:
04:37:37:f1:6c:f5:74:5a:0d:80:07:77:3e:c1:1a:
7f:2e:56:82:31:56:6f:32:be:55:20:8a:fb:38:b3:
4d:d2:37:24:97:38:c0:c3:f9:37:e6:ec:0e:b3:c8:
22:e1:ed:d0:39:a5:2d:bd:06:97:a8:c9:b8:85:8a:
38:f2:0f:7e:f5:39:5d:e1:b2:c9:c5:f3:ae:71:50:
04:e4:cf:90:a1:e2:e4:af:00:3b:d2:94:77:91:e7:
3d:36:c0:03:a1:b6:3f:68:2f:bc:73:15:5b:a6:81:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7E:52:F8:5F:6C:16:1B:E6:57:83:98:7D:81:43:17:7A:42:75:13
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/b35S-F9sFhvmV4OYfYFDF3pCdRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:31:36:f2:3b:05:47:b0:10:71:ae:a5:20:bf:3d:62:2a:07:
77:d2:c4:b1:24:68:b2:12:6d:af:ac:67:43:f6:dd:bf:77:b9:
d3:14:de:a7:80:d3:bf:15:2d:9e:fa:21:f5:ab:b4:87:0c:b6:
1a:69:e7:92:50:d5:1f:3b:9f:8b:cf:df:b5:17:e3:17:4f:cb:
69:c1:4e:c8:78:4b:ed:37:0d:71:31:18:88:c2:8f:32:69:36:
fa:76:74:cc:b1:45:9d:cd:68:eb:77:7a:86:c9:7d:c1:01:5f:
ae:eb:67:a7:a4:55:22:84:64:5b:1c:3d:10:6c:0b:c1:cb:b0:
5e:59:48:c6:27:81:79:40:2b:7c:d6:d1:97:eb:3f:eb:69:c5:
99:2c:92:fd:24:2a:58:46:ff:6f:69:bd:51:a9:0f:6a:bc:b5:
e3:fc:40:4e:77:cf:67:91:fa:ef:ac:0c:ac:27:73:94:98:36:
c6:c1:87:3c:82:c5:10:cb:db:e6:eb:2d:88:ef:6b:f0:ce:8c:
3f:d6:2d:e8:8d:05:9a:60:cc:55:de:fa:cb:7e:17:de:4a:e9:
5e:69:5d:ac:6f:76:53:47:5e:c7:8a:f2:a8:a0:c9:5f:53:23:
48:d5:36:40:d6:40:02:6a:56:78:c7:e9:59:f3:be:94:08:b1:
63:4f:45:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsnOQ5IPhszBvZPg07ZrRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3
MzlkMjEwHhcNMjMwMTAxMDkxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjdlNTJmODVmNmMxNjFiZTY1NzgzOTg3ZDgxNDMxNzdhNDI3NTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIdP3eBoVgfkK/1ivLGiUVQu/WOy
Ru5wfH9ZuxQ29KiKQrlFGIHTHhlm7KsOsk+WqU1MZDxcwf69tLfLRZpjbJ/9y7Ic
Xo01lop0QxUF/nuZhOqvuwH5Gev6CmVROsZuiiaNfYYrm1aJkxperArw4JgSJrR7
OXI1K2Y1dr9UPvGipdn7jKKNYouoJNZoSnJrdiq1mK8ENzfxbPV0Wg2AB3c+wRp/
LlaCMVZvMr5VIIr7OLNN0jcklzjAw/k35uwOs8gi4e3QOaUtvQaXqMm4hYo48g9+
9Tld4bLJxfOucVAE5M+QoeLkrwA70pR3kec9NsADobY/aC+8cxVbpoEBfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG9+UvhfbBYb5leDmH2BQxd6QnUTMB8GA1UdIwQY
MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt
MWY5MjQ0OTVmY2RkLzEvYjM1Uy1GOXNGaHZtVjRPWWZZRkRGM3BDZFJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk
LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4MgMA0G
CSqGSIb3DQEBCwUAA4IBAQAfMTbyOwVHsBBxrqUgvz1iKgd30sSxJGiyEm2vrGdD
9t2/d7nTFN6ngNO/FS2e+iH1q7SHDLYaaeeSUNUfO5+Lz9+1F+MXT8tpwU7IeEvt
Nw1xMRiIwo8yaTb6dnTMsUWdzWjrd3qGyX3BAV+u62enpFUihGRbHD0QbAvBy7Be
WUjGJ4F5QCt81tGX6z/racWZLJL9JCpYRv9vab1RqQ9qvLXj/EBOd89nkfrvrAys
J3OUmDbGwYc8gsUQy9vm6y2I72vwzow/1i3ojQWaYMxV3vrLfhfeSuleaV2sb3ZT
R17HivKooMlfUyNI1TZA1kACalZ4x+lZ876UCLFjT0V7
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:20 2024 by rpki-client on console-fra.rpki-client.org