Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/9KLf_owHt_gZmEIDq-vOO2HB1mA.roa
File: 9KLf_owHt_gZmEIDq-vOO2HB1mA.roa (raw, json)
Hash identifier: edG59M8spb26906/PaHqpzVmGimnwK2vghzVzu0ZI+k=
Subject key identifier: F4:A2:DF:FE:8C:07:B7:F8:19:98:42:03:AB:EB:CE:3B:61:C1:D6:60
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 018B29225585607DED6B3477A46CE0A0D8EF
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/9KLf_owHt_gZmEIDq-vOO2HB1mA.roa
Signing time: Fri 13 Oct 2023 13:03:17 +0000
ROA not before: Fri 13 Oct 2023 13:03:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47223
IP address blocks: 94.240.63.0/24 maxlen: 24
94.240.62.0/23 maxlen: 23
91.106.26.0/23 maxlen: 23
91.106.30.0/23 maxlen: 23
94.240.1.0/24 maxlen: 24
94.240.0.0/24 maxlen: 24
94.240.23.0/24 maxlen: 24
185.139.16.0/22 maxlen: 22
94.240.32.0/21 maxlen: 21
94.240.40.0/24 maxlen: 24
94.240.42.0/24 maxlen: 24
94.240.44.0/22 maxlen: 22
94.240.46.0/24 maxlen: 24
94.240.48.0/22 maxlen: 22
94.240.48.0/24 maxlen: 24
91.106.24.0/23 maxlen: 23
194.152.46.0/23 maxlen: 23
2a01:6e80::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 26 Oct 2023 10:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:22:55:85:60:7d:ed:6b:34:77:a4:6c:e0:a0:d8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Oct 13 13:03:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4a2dffe8c07b7f819984203abebce3b61c1d660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:12:0b:90:5d:f9:ef:aa:c9:9f:5c:66:d6:
aa:a0:87:e3:5d:74:d5:e3:67:be:14:3c:da:4a:fd:
0d:f2:a9:dc:f5:df:40:05:e0:f9:04:bf:9a:10:49:
90:71:ba:ea:50:e7:64:e5:9d:3e:e0:90:f0:e0:cf:
d4:ac:6e:e0:42:7a:89:ee:f1:ac:dd:83:c6:6f:e7:
d3:4c:17:32:98:b0:7b:2f:b1:1f:bc:d6:f8:82:2f:
af:87:03:6f:b1:9c:9b:5d:98:38:1a:01:7a:5e:20:
1f:a7:6d:14:bc:91:d9:89:ab:08:3f:ec:7f:cd:ad:
d3:c4:d0:f3:b7:8f:09:fa:a3:19:bc:22:b3:42:bc:
4a:81:d1:60:6c:d5:c7:c1:40:1b:a0:d8:ac:b5:6d:
a6:15:69:75:2e:42:bb:71:96:f4:be:99:ed:23:3f:
69:d0:3a:0d:4a:15:f7:e2:be:d9:46:e9:1e:8f:6f:
43:d9:d2:c0:25:c3:cc:58:a2:22:21:54:b3:35:3e:
66:94:e0:b2:a1:ad:2d:72:b7:e6:4f:7e:94:3c:6a:
7b:19:62:e5:0e:6f:48:a5:0e:c8:71:f0:df:78:11:
a7:d9:25:ad:a9:f1:f3:21:d6:0e:5c:ea:84:50:9e:
3e:6b:be:58:07:bb:0d:1c:43:5e:17:51:25:f3:92:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A2:DF:FE:8C:07:B7:F8:19:98:42:03:AB:EB:CE:3B:61:C1:D6:60
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/9KLf_owHt_gZmEIDq-vOO2HB1mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.24.0/22
91.106.30.0/23
94.240.0.0/23
94.240.23.0/24
94.240.32.0-94.240.40.255
94.240.42.0/24
94.240.44.0-94.240.51.255
94.240.62.0/23
185.139.16.0/22
194.152.46.0/23
IPv6:
2a01:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
46:10:9c:7f:01:f6:d1:cd:34:30:16:0f:1e:44:81:70:5b:cb:
4b:ff:2e:37:d5:f6:aa:e3:54:5a:29:c4:48:25:19:7f:70:eb:
5d:36:ae:65:24:7e:fb:3f:1e:70:0f:23:1a:45:e7:a2:24:eb:
2f:b4:25:a7:1a:35:37:fe:41:e2:01:1e:9d:a1:63:60:06:7e:
8b:db:81:25:e1:ea:6a:50:7f:69:80:71:b5:c7:cb:53:cc:cb:
a3:cb:91:bb:a7:d7:e5:3a:a7:cf:4b:9d:3d:2a:a4:7e:d6:3c:
83:59:c3:d2:28:c7:f0:df:21:87:70:8a:f0:b6:1a:79:90:0b:
d7:8e:be:81:d1:da:8b:54:8e:af:8c:37:21:19:08:93:06:7c:
89:50:35:dc:1c:7b:c1:ce:64:c4:95:46:34:9c:b7:13:2e:27:
73:58:54:44:59:41:bf:2c:eb:48:2a:23:8b:c4:ee:f7:16:6b:
f2:d2:e1:30:09:e4:58:bf:0f:ce:09:2b:47:70:fa:19:e6:fa:
73:8b:6b:b8:f2:bc:d2:de:63:f4:62:79:f1:e2:80:99:e1:55:
f0:9f:ce:ad:d4:90:f1:8e:e7:21:1e:e5:f3:94:d9:cd:50:63:
2f:23:d5:56:14:ab:5d:c3:30:71:c3:b2:27:2f:8b:c4:a8:d2:
65:82:1a:fc
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISAYspIlWFYH3tazR3pGzgoNjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl
NTQ2YTQwHhcNMjMxMDEzMTMwMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGEyZGZmZThjMDdiN2Y4MTk5ODQyMDNhYmViY2UzYjYxYzFkNjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFISC5Bd+e+qyZ9cZtaqoIfjXXTV
42e+FDzaSv0N8qnc9d9ABeD5BL+aEEmQcbrqUOdk5Z0+4JDw4M/UrG7gQnqJ7vGs
3YPGb+fTTBcymLB7L7EfvNb4gi+vhwNvsZybXZg4GgF6XiAfp20UvJHZiasIP+x/
za3TxNDzt48J+qMZvCKzQrxKgdFgbNXHwUAboNistW2mFWl1LkK7cZb0vpntIz9p
0DoNShX34r7ZRukej29D2dLAJcPMWKIiIVSzNT5mlOCyoa0tcrfmT36UPGp7GWLl
Dm9IpQ7IcfDfeBGn2SWtqfHzIdYOXOqEUJ4+a75YB7sNHENeF1El85JedQIDAQAB
o4ICXjCCAlowHQYDVR0OBBYEFPSi3/6MB7f4GZhCA6vrzjthwdZgMB8GA1UdIwQY
MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt
MjMwNDllNGQyZjEyLzEvOUtMZl9vd0h0X2dabUVJRHEtdk9PMkhCMW1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy
LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBSBAIAATBMAwQCW2oYAwQB
W2oeAwQBXvAAAwQAXvAXMAwDBAVe8CADBABe8CgDBABe8CowDAMEAl7wLAMEAl7w
MAMEAV7wPgMEArmLEAMEAcKYLjANBAIAAjAHAwUAKgFugDANBgkqhkiG9w0BAQsF
AAOCAQEARhCcfwH20c00MBYPHkSBcFvLS/8uN9X2quNUWinESCUZf3DrXTauZSR+
+z8ecA8jGkXnoiTrL7Qlpxo1N/5B4gEenaFjYAZ+i9uBJeHqalB/aYBxtcfLU8zL
o8uRu6fX5Tqnz0udPSqkftY8g1nD0ijH8N8hh3CK8LYaeZAL146+gdHai1SOr4w3
IRkIkwZ8iVA13Bx7wc5kxJVGNJy3Ey4nc1hURFlBvyzrSCoji8Tu9xZr8tLhMAnk
WL8PzgkrR3D6Geb6c4truPK80t5j9GJ58eKAmeFV8J/OrdSQ8Y7nIR7l85TZzVBj
LyPVVhSrXcMwccOyJy+LxKjSZYIa/A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:18 2024 by rpki-client on console-fra.rpki-client.org