Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6KsEGTbz9PMMkk6jmUDlUQHq3mE.roa
File: 6KsEGTbz9PMMkk6jmUDlUQHq3mE.roa (raw, json)
Hash identifier: Pg/w/Kwnikxy1xU35XyOx8zEyR9laj8qoYSsF2iUUCo=
Subject key identifier: E8:AB:04:19:36:F3:F4:F3:0C:92:4E:A3:99:40:E5:51:01:EA:DE:61
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01932E35120E003269EAB932AF56A4D8907A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6KsEGTbz9PMMkk6jmUDlUQHq3mE.roa
Signing time: Fri 15 Nov 2024 05:04:10 +0000
ROA not before: Fri 15 Nov 2024 05:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.89.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 18 Nov 2024 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2e:35:12:0e:00:32:69:ea:b9:32:af:56:a4:d8:90:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 15 05:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8ab041936f3f4f30c924ea39940e55101eade61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:03:31:f6:9f:6d:df:07:78:3c:67:a9:7c:
4c:c1:cc:8e:b2:19:a5:38:12:84:8b:75:cc:de:8b:
6c:07:30:a0:43:39:23:6b:86:a2:d0:9e:76:14:5d:
94:48:8a:d3:dd:18:83:07:eb:d4:b8:6c:40:fc:cd:
13:ef:2e:78:de:22:84:6d:08:bf:45:b9:d9:7b:9b:
2a:a4:41:aa:43:b0:0d:a9:ef:eb:d6:0b:53:15:7c:
8b:3b:74:06:fa:31:9e:24:5c:5e:39:1e:34:4e:27:
39:88:04:8f:b6:2e:43:3e:47:79:9f:70:f6:4a:50:
4e:54:25:d6:87:ec:9a:53:ce:01:2e:4e:4d:67:88:
35:90:12:ec:6f:bb:cd:cd:32:d1:ee:a3:dc:4a:c2:
48:5c:ea:b0:f2:b7:25:6f:c8:dc:74:b8:87:61:2b:
a6:5a:37:ea:46:b2:22:f6:fa:21:95:10:98:3c:27:
eb:cb:2b:cb:7f:a4:6b:7e:c3:20:0c:59:db:3f:5b:
d5:93:4b:86:32:a3:38:d9:2f:7a:cb:ae:19:f9:14:
43:ba:54:e9:9a:2d:b3:f2:7e:00:d4:79:e7:e9:f8:
e0:89:b4:43:ff:6d:c0:ca:22:4d:42:4c:05:fb:7e:
50:3f:4d:bd:84:90:bc:e9:61:b8:30:66:13:61:e6:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AB:04:19:36:F3:F4:F3:0C:92:4E:A3:99:40:E5:51:01:EA:DE:61
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6KsEGTbz9PMMkk6jmUDlUQHq3mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.89.0/24
194.58.155.0/24
194.85.251.0/24
194.87.17.0/24
194.87.108.0/24
194.87.169.0/24
194.87.178.0/24
194.87.224.0/24
194.135.33.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.192.1.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
09:9f:ca:e5:12:9f:75:87:76:a6:25:48:ea:fe:30:d4:59:91:
94:4b:75:f7:00:e7:5a:52:4e:37:ed:99:83:45:e4:bb:17:98:
e2:c3:8b:26:05:4f:2c:11:77:83:1f:88:64:22:38:01:dd:8e:
ac:87:fd:00:ec:f9:99:e9:7c:c5:85:27:c8:62:4c:8b:bb:15:
12:65:1b:91:86:eb:cc:6c:66:18:03:b7:4b:e0:12:04:16:ca:
79:2b:b7:66:56:58:d0:d6:68:af:91:76:d9:4f:8a:c9:5a:32:
20:02:07:f1:6c:47:fc:f5:43:34:79:ab:48:ec:c7:de:d5:01:
dc:92:16:1d:d2:a2:37:d3:c8:c3:fa:cf:d2:c3:91:c6:a6:df:
b6:d1:23:31:b5:c2:c0:41:a5:69:45:c5:ac:52:d2:02:3b:5b:
0a:a7:17:7e:a8:4d:f7:05:c0:89:7d:4f:e7:91:f7:a1:14:44:
c6:88:d1:b0:76:c6:9c:dc:5e:6d:67:0f:ae:cf:7c:55:6a:f1:
11:24:76:4c:40:44:da:e0:b9:db:e7:4a:d4:4b:0b:7e:cd:3b:
bb:34:66:80:99:31:6b:c3:b0:19:8b:e4:70:16:e4:8f:f3:4d:
d2:ee:62:5b:96:13:c7:4b:20:e6:ef:22:3d:a4:b8:e5:e0:75:
30:44:83:e5
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISAZMuNRIOADJp6rkyr1ak2JB6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQxMTE1MDUwNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGFiMDQxOTM2ZjNmNGYzMGM5MjRlYTM5OTQwZTU1MTAxZWFkZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBYDMfafbd8HeDxnqXxMwcyOshml
OBKEi3XM3otsBzCgQzkja4ai0J52FF2USIrT3RiDB+vUuGxA/M0T7y543iKEbQi/
RbnZe5sqpEGqQ7ANqe/r1gtTFXyLO3QG+jGeJFxeOR40Tic5iASPti5DPkd5n3D2
SlBOVCXWh+yaU84BLk5NZ4g1kBLsb7vNzTLR7qPcSsJIXOqw8rclb8jcdLiHYSum
WjfqRrIi9vohlRCYPCfryyvLf6RrfsMgDFnbP1vVk0uGMqM42S96y64Z+RRDulTp
mi2z8n4A1Hnn6fjgibRD/23AyiJNQkwF+35QP029hJC86WG4MGYTYeYGlQIDAQAB
o4ICdDCCAnAwHQYDVR0OBBYEFOirBBk28/TzDJJOo5lA5VEB6t5hMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNktzRUdUYno5UE1Na2s2am1VRGxVUUhxM21FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwYAQCAAEwWgMEAMF8WQME
AMI6mwMEAMJV+wMEAMJXEQMEAMJXbAMEAMJXqQMEAMJXsgMEAMJX4AMEAMKHIQME
AcOFGAMEAcOFKAMEAcOFMgMEAcOFXAMEANTAAQMEAdTBGjAUBAIAAjAOAwUDKgFX
wAMFAyoM/0AwDQYJKoZIhvcNAQELBQADggEBAAmfyuUSn3WHdqYlSOr+MNRZkZRL
dfcA51pSTjftmYNF5LsXmOLDiyYFTywRd4MfiGQiOAHdjqyH/QDs+ZnpfMWFJ8hi
TIu7FRJlG5GG68xsZhgDt0vgEgQWynkrt2ZWWNDWaK+RdtlPislaMiACB/FsR/z1
QzR5q0jsx97VAdySFh3SojfTyMP6z9LDkcam37bRIzG1wsBBpWlFxaxS0gI7Wwqn
F36oTfcFwIl9T+eR96EURMaI0bB2xpzcXm1nD67PfFVq8REkdkxARNrgudvnStRL
C37NO7s0ZoCZMWvDsBmL5HAW5I/zTdLuYluWE8dLIObvIj2kuOXgdTBEg+U=
-----END CERTIFICATE-----
Generated at Mon Nov 18 10:07:13 2024 by rpki-client on console-fra.rpki-client.org