Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-YNBv1oVtuG_9UBQm5WO9uEuHc8.roa
File: 1-YNBv1oVtuG_9UBQm5WO9uEuHc8.roa (raw, json)
Hash identifier: 77GWHLmA16Mu0DwAcff21QnLQF6d58QOW/1MhuF1b5I=
Subject key identifier: F9:83:41:BF:5A:15:B6:E1:BF:F5:40:50:9B:95:8E:F6:E1:2E:1D:CF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C1FB542EBED435C72EBDB9A41515A2B5A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-YNBv1oVtuG_9UBQm5WO9uEuHc8.roa
Signing time: Thu 30 Nov 2023 10:10:22 +0000
ROA not before: Thu 30 Nov 2023 10:10:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 194.87.201.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.150.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
194.87.89.0/24 maxlen: 24
194.87.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:b5:42:eb:ed:43:5c:72:eb:db:9a:41:51:5a:2b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 30 10:10:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f98341bf5a15b6e1bff540509b958ef6e12e1dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:69:7a:60:d3:1a:5c:2f:ce:c1:18:f0:7d:
4c:1f:7c:cf:05:2d:71:13:4f:39:a0:48:2c:bb:55:
8b:8d:db:b0:58:dc:cf:ca:c6:4e:66:2b:ed:f5:40:
96:4b:00:8a:1f:2d:95:ce:13:7b:7f:ad:4a:15:94:
1e:00:6e:32:c1:7e:31:48:a0:93:2d:b8:f7:d0:c1:
94:6a:57:ab:a3:51:ad:bb:fc:8b:da:f7:1f:a0:12:
87:cd:c5:52:8a:4e:29:33:a5:e8:d9:6e:a1:55:2d:
a0:74:72:c7:69:17:6d:76:8e:83:eb:a4:85:b0:cd:
0a:42:27:7c:c5:76:24:26:54:42:2b:55:2c:75:01:
7a:33:a7:02:d9:dc:c1:1c:68:8e:01:23:5f:97:11:
ec:84:dc:05:b3:00:dc:fb:8b:52:05:cb:a7:36:fa:
3c:02:35:c1:aa:cf:c6:78:97:21:ea:e5:04:ba:80:
7a:3f:04:88:5f:89:36:18:3b:25:4a:33:61:2f:78:
3e:d9:1a:b1:c0:7f:a3:c6:ed:dd:58:de:21:6b:ca:
cd:a4:83:72:21:86:13:a4:6d:25:76:fd:89:6c:4f:
3b:f4:68:97:b2:03:a3:ef:0e:33:37:11:75:dc:c5:
c0:2e:ae:77:fc:4e:df:8f:0d:ba:e9:18:52:b2:90:
fe:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:83:41:BF:5A:15:B6:E1:BF:F5:40:50:9B:95:8E:F6:E1:2E:1D:CF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-YNBv1oVtuG_9UBQm5WO9uEuHc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.95.0/24
194.87.88.0/23
194.87.128.0/24
194.87.150.0/23
194.87.185.0/24
194.87.201.0/24
194.87.245.0/24
195.58.60.0/24
195.133.72.0/24
195.133.192.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b7:b1:d8:fd:08:18:75:53:5b:a8:83:ba:7b:7f:59:8e:dc:
ac:f0:5b:ce:92:18:38:07:d9:40:76:59:5a:c1:f8:b0:02:e0:
4e:33:e9:59:2f:61:15:1f:02:0d:33:10:bb:15:a6:2f:d7:fd:
98:c6:a2:18:ed:f0:3f:c1:6a:da:e4:39:b7:43:d3:5b:d9:0c:
88:a9:7c:11:fd:0e:78:e4:3e:48:f6:79:ae:f3:c7:a5:ab:90:
45:e7:b4:34:d1:f8:48:0e:75:3b:0e:03:a6:25:c0:f5:5c:ea:
95:77:65:aa:f2:ef:9b:b1:4a:87:9e:7a:90:37:05:48:fd:af:
e5:4f:1f:7c:8c:dd:4c:06:89:1f:e7:c2:20:f2:1b:05:d7:52:
64:38:4c:6c:2c:d4:8b:10:68:f0:21:6b:11:39:5e:eb:d2:4c:
50:69:b3:bd:85:36:de:bb:07:2d:bf:8f:f0:f2:e7:22:ad:98:
84:27:56:97:0e:85:9c:d7:ab:de:e5:d2:51:b9:6b:73:99:5a:
d9:2b:c8:33:14:7f:6d:58:75:4f:16:ff:d5:85:e1:39:ef:5b:
e7:cc:21:33:61:5c:d5:ff:35:a4:f8:7d:72:f3:20:29:fd:0d:
13:8b:82:73:d2:80:80:9f:ce:ad:b1:2f:64:71:05:60:fb:2d:
91:50:37:b9
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAYwftULr7UNccuvbmkFRWitaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMTMwMTAxMDIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTgzNDFiZjVhMTViNmUxYmZmNTQwNTA5Yjk1OGVmNmUxMmUxZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb1pemDTGlwvzsEY8H1MH3zPBS1x
E085oEgsu1WLjduwWNzPysZOZivt9UCWSwCKHy2VzhN7f61KFZQeAG4ywX4xSKCT
Lbj30MGUalero1Gtu/yL2vcfoBKHzcVSik4pM6Xo2W6hVS2gdHLHaRdtdo6D66SF
sM0KQid8xXYkJlRCK1UsdQF6M6cC2dzBHGiOASNflxHshNwFswDc+4tSBcunNvo8
AjXBqs/GeJch6uUEuoB6PwSIX4k2GDslSjNhL3g+2RqxwH+jxu3dWN4ha8rNpINy
IYYTpG0ldv2JbE879GiXsgOj7w4zNxF13MXALq53/E7fjw266RhSspD+NwIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFPmDQb9aFbbhv/VAUJuVjvbhLh3PMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMS1ZTkJ2MW9WdHVHXzlVQlFtNVdPOXVFdUhjOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0
My8xL05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBVBggrBgEFBQcBBwEB/wRGMEQwQgQCAAEwPAMEAMF8XwME
AcJXWAMEAMJXgAMEAcJXlgMEAMJXuQMEAMJXyQMEAMJX9QMEAMM6PAMEAMOFSAME
AMOFwDANBgkqhkiG9w0BAQsFAAOCAQEAWLex2P0IGHVTW6iDunt/WY7crPBbzpIY
OAfZQHZZWsH4sALgTjPpWS9hFR8CDTMQuxWmL9f9mMaiGO3wP8Fq2uQ5t0PTW9kM
iKl8Ef0OeOQ+SPZ5rvPHpauQRee0NNH4SA51Ow4DpiXA9VzqlXdlqvLvm7FKh556
kDcFSP2v5U8ffIzdTAaJH+fCIPIbBddSZDhMbCzUixBo8CFrETle69JMUGmzvYU2
3rsHLb+P8PLnIq2YhCdWlw6FnNer3uXSUblrc5la2SvIMxR/bVh1Txb/1YXhOe9b
58whM2Fc1f81pPh9cvMgKf0NE4uCc9KAgJ/OrbEvZHEFYPstkVA3uQ==
-----END CERTIFICATE-----
Generated at Tue Dec 19 05:05:10 2023 by rpki-client on console-ams.rpki-client.org