Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NdViiZ7v6Fmukmq5f_fB20gD9vA.roa
File: NdViiZ7v6Fmukmq5f_fB20gD9vA.roa (raw, json)
Hash identifier: dLJSFB2yQ+GzZvbhXp1Xj2wxMhYP/YQyx30pxG8/WDo=
Subject key identifier: 35:D5:62:89:9E:EF:E8:59:AE:92:6A:B9:7F:F7:C1:DB:48:03:F6:F0
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAEB463B286DE82AB2E68FA1BEB0D1
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NdViiZ7v6Fmukmq5f_fB20gD9vA.roa
Signing time: Sun 01 Jan 2023 10:05:15 +0000
ROA not before: Sun 01 Jan 2023 10:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 192.121.17.0/24 maxlen: 24
192.121.16.0/24 maxlen: 24
193.235.147.0/24 maxlen: 24
192.121.163.0/24 maxlen: 24
192.121.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:eb:46:3b:28:6d:e8:2a:b2:e6:8f:a1:be:b0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35d562899eefe859ae926ab97ff7c1db4803f6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:c7:48:08:55:66:1f:49:d5:02:a6:0b:fe:
f8:1c:e1:84:f4:17:e2:e5:d0:d6:bf:be:d9:7c:80:
d9:8f:4e:a5:5b:92:a3:16:85:f1:e3:92:f1:53:54:
4c:3a:94:3c:cf:16:32:ee:1f:f6:5e:f1:50:1e:00:
14:3a:f0:d2:7c:79:dd:b3:07:d7:1a:2b:70:89:53:
15:68:ae:90:aa:69:e5:ee:f5:51:fe:e1:3a:0b:ee:
db:76:da:7c:45:00:bf:e3:ce:79:37:d0:cd:59:10:
c5:c7:fd:a8:80:3c:b8:0f:de:24:51:75:4f:e9:fb:
91:c3:85:d7:79:58:91:be:f0:f5:ee:c9:8c:38:c5:
e4:10:c2:8c:4f:14:e0:ab:81:1c:0b:3b:1f:7b:01:
0a:96:e6:af:fa:4a:cd:7b:ea:b6:28:0c:9e:47:fa:
25:08:b7:f4:d3:24:cc:ef:a0:13:08:22:8a:6c:e6:
26:c7:3a:30:bc:bd:92:5c:7c:61:1b:40:7f:45:21:
d2:c4:18:7a:61:21:64:77:d5:9c:b8:79:a7:b2:4d:
dd:ab:25:52:89:04:a7:32:a4:01:2f:70:35:ba:de:
39:d5:2c:5e:31:74:8d:18:da:d6:f9:6d:87:b4:11:
4f:9c:cc:81:af:a5:24:22:ca:e8:26:c4:fa:83:30:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D5:62:89:9E:EF:E8:59:AE:92:6A:B9:7F:F7:C1:DB:48:03:F6:F0
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/NdViiZ7v6Fmukmq5f_fB20gD9vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.16.0/23
192.121.162.0/23
193.235.147.0/24
Signature Algorithm: sha256WithRSAEncryption
71:28:33:73:16:b6:03:f9:1f:a5:1d:e0:b9:5a:6e:79:70:9e:
12:39:5c:6c:98:22:f6:51:98:82:42:52:9d:c2:6f:9d:30:81:
ed:f2:b1:b1:88:dc:a9:e5:d0:2d:ec:e7:da:4a:60:63:c9:e9:
54:b7:0f:3c:87:df:e7:a8:1f:f9:84:36:75:e9:97:06:40:b6:
b3:f4:29:84:1e:eb:6c:72:ae:24:d0:67:87:b6:95:ef:77:e3:
41:a5:69:c2:a3:16:43:32:09:6f:11:12:5c:6f:41:8c:c3:cb:
d8:75:b7:fc:97:74:3c:c9:a9:23:3a:cd:2c:14:01:a5:d4:76:
b6:9b:e1:91:d3:1f:d5:48:ab:3d:50:24:db:9e:f9:7d:c8:8f:
4b:08:8d:15:cf:d5:b7:33:48:a7:7f:7a:3d:bd:71:46:31:6f:
a7:3a:71:e5:f7:6d:ed:29:79:28:c4:d5:84:3f:d6:69:e0:a3:
37:11:81:54:d3:bd:dc:48:e9:68:62:cd:90:86:32:f5:70:c4:
de:f6:0b:e8:10:a1:55:85:ac:74:b9:a1:53:60:fd:66:20:95:
01:22:0e:87:da:fb:99:65:9d:75:d1:f2:2a:2a:de:4b:f9:1b:
37:12:6d:5f:35:5e:64:3c:11:60:39:08:16:0f:83:54:ab:28:
29:10:18:bd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVsyutGOyht6Cqy5o+hvrDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWQ1NjI4OTllZWZlODU5YWU5MjZhYjk3ZmY3YzFkYjQ4MDNmNmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusTHSAhVZh9J1QKmC/74HOGE9Bfi
5dDWv77ZfIDZj06lW5KjFoXx45LxU1RMOpQ8zxYy7h/2XvFQHgAUOvDSfHndswfX
GitwiVMVaK6Qqmnl7vVR/uE6C+7bdtp8RQC/4855N9DNWRDFx/2ogDy4D94kUXVP
6fuRw4XXeViRvvD17smMOMXkEMKMTxTgq4EcCzsfewEKluav+krNe+q2KAyeR/ol
CLf00yTM76ATCCKKbOYmxzowvL2SXHxhG0B/RSHSxBh6YSFkd9WcuHmnsk3dqyVS
iQSnMqQBL3A1ut451SxeMXSNGNrW+W2HtBFPnMyBr6UkIsroJsT6gzCZ3QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDXVYome7+hZrpJquX/3wdtIA/bwMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvTmRWaWlaN3Y2Rm11a21xNWZfZkIyMGdEOXZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwHkQAwQB
wHmiAwQAweuTMA0GCSqGSIb3DQEBCwUAA4IBAQBxKDNzFrYD+R+lHeC5Wm55cJ4S
OVxsmCL2UZiCQlKdwm+dMIHt8rGxiNyp5dAt7OfaSmBjyelUtw88h9/nqB/5hDZ1
6ZcGQLaz9CmEHutscq4k0GeHtpXvd+NBpWnCoxZDMglvERJcb0GMw8vYdbf8l3Q8
yakjOs0sFAGl1Ha2m+GR0x/VSKs9UCTbnvl9yI9LCI0Vz9W3M0inf3o9vXFGMW+n
OnHl923tKXkoxNWEP9Zp4KM3EYFU073cSOloYs2QhjL1cMTe9gvoEKFVhax0uaFT
YP1mIJUBIg6H2vuZZZ110fIqKt5L+Rs3Em1fNV5kPBFgOQgWD4NUqygpEBi9
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org