Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8EMzKAOfhUhn8XSItk95zW6hAY8.roa
File: 8EMzKAOfhUhn8XSItk95zW6hAY8.roa (raw, json)
Hash identifier: VflQK8Eg6npX6b2rOfebv9AIk1eEURXyJq6I/3mQw3w=
Subject key identifier: F0:43:33:28:03:9F:85:48:67:F1:74:88:B6:4F:79:CD:6E:A1:01:8F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191D4F26BCBA7D919C4A2C56F377840CFE7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8EMzKAOfhUhn8XSItk95zW6hAY8.roa
Signing time: Mon 09 Sep 2024 04:02:22 +0000
ROA not before: Mon 09 Sep 2024 04:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.58.155.0/24 maxlen: 24
194.87.29.0/24 maxlen: 24
194.87.58.0/23 maxlen: 23
194.87.169.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 11 Sep 2024 10:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d4:f2:6b:cb:a7:d9:19:c4:a2:c5:6f:37:78:40:cf:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 9 04:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0433328039f854867f17488b64f79cd6ea1018f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:90:f5:cc:72:6a:70:5e:ff:42:ae:b5:6c:
84:5a:aa:3b:b1:e3:34:57:08:ab:fe:ee:73:76:00:
73:3a:21:f3:ef:69:75:e6:20:be:af:b5:3e:1d:69:
6d:c2:98:98:9b:09:a1:95:9f:4a:0a:78:f0:4d:08:
4e:07:d3:94:cc:60:e4:ef:ca:45:88:01:70:d4:83:
d6:9f:a8:47:ba:b9:e8:ec:7e:62:25:59:a7:bb:3d:
12:16:5f:36:b2:d0:e5:67:51:14:17:68:23:7e:2f:
6a:24:94:5d:df:12:82:72:8f:f4:4d:42:4b:d6:01:
94:45:54:e4:71:b4:54:75:6b:c0:af:a9:d0:c7:2d:
92:ce:f5:36:a0:28:67:95:c1:55:88:e6:81:15:7a:
90:34:cd:2b:57:82:93:00:c9:72:ce:dd:fe:2a:18:
00:e1:6e:1c:d3:6c:d8:24:32:19:42:bc:37:7e:bd:
1b:75:3b:bf:0a:ae:86:72:29:7d:d5:bf:61:70:34:
c9:26:22:0d:d6:92:77:f4:90:a7:bc:02:2d:01:5c:
2c:ac:e4:e0:cb:b3:1c:0f:37:7f:b9:1f:a5:ac:43:
8a:d0:bf:09:be:c4:b6:10:4c:eb:02:3a:51:92:9c:
a7:6b:5c:ab:c6:1b:b6:3e:15:55:1e:be:4f:20:b3:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:43:33:28:03:9F:85:48:67:F1:74:88:B6:4F:79:CD:6E:A1:01:8F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8EMzKAOfhUhn8XSItk95zW6hAY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.155.0/24
194.87.29.0/24
194.87.58.0/23
194.87.169.0/24
195.133.24.0/23
195.133.50.0/23
195.133.92.0/23
212.192.1.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
60:01:f2:ae:f6:cb:41:fa:e5:01:e1:e8:2a:07:d8:50:9b:b4:
a9:be:1a:ef:79:3a:99:19:a7:b3:74:40:0d:34:ad:c4:00:fe:
46:96:29:c7:8f:bd:c1:06:66:d8:01:31:71:86:d1:31:21:41:
4e:aa:ee:73:e7:d1:8f:6a:c2:16:5d:ce:17:90:f4:d0:d1:a5:
00:c0:43:01:69:26:9f:30:22:c1:52:41:26:45:1a:6d:6d:c2:
bd:8c:40:29:4a:c1:88:ae:6c:cd:2c:6a:a3:63:11:0a:cd:c2:
d9:d9:4e:ef:3d:49:0b:23:ba:22:71:dc:d6:e5:b6:62:0c:1d:
08:3e:b7:fa:d7:37:a4:0d:93:8a:dd:8f:3b:37:b8:1b:10:ea:
e8:e7:31:33:9e:b7:9c:fd:d1:3e:ec:58:04:e4:75:1d:5c:dd:
56:6a:bb:99:c3:24:86:e3:84:85:ed:cd:fc:59:61:df:79:ef:
b8:17:95:18:3b:cc:c6:84:81:13:d2:c7:dc:65:43:66:e1:c4:
86:ac:a8:9e:d3:13:c5:a5:3a:3b:69:b5:d9:12:28:21:46:11:
f9:e1:cd:10:81:84:74:a2:51:59:44:07:3e:37:f9:8b:d7:40:
53:f1:a3:03:29:21:e6:fe:d8:86:20:ce:d4:66:83:db:e8:d6:
44:ec:8a:e9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZHU8mvLp9kZxKLFbzd4QM/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwOTA5MDQwMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDQzMzMyODAzOWY4NTQ4NjdmMTc0ODhiNjRmNzljZDZlYTEwMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzCQ9cxyanBe/0KutWyEWqo7seM0
Vwir/u5zdgBzOiHz72l15iC+r7U+HWltwpiYmwmhlZ9KCnjwTQhOB9OUzGDk78pF
iAFw1IPWn6hHurno7H5iJVmnuz0SFl82stDlZ1EUF2gjfi9qJJRd3xKCco/0TUJL
1gGURVTkcbRUdWvAr6nQxy2SzvU2oChnlcFViOaBFXqQNM0rV4KTAMlyzt3+KhgA
4W4c02zYJDIZQrw3fr0bdTu/Cq6Gcil91b9hcDTJJiIN1pJ39JCnvAItAVwsrOTg
y7McDzd/uR+lrEOK0L8JvsS2EEzrAjpRkpyna1yrxhu2PhVVHr5PILPqJwIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFPBDMygDn4VIZ/F0iLZPec1uoQGPMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvOEVNektBT2ZoVWhuOFhTSXRrOTV6VzZoQVk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA8BAIAATA2AwQAwjqbAwQA
wlcdAwQBwlc6AwQAwlepAwQBw4UYAwQBw4UyAwQBw4VcAwQA1MABAwQB1MEaMBQE
AgACMA4DBQMqAVfAAwUDKgz/QDANBgkqhkiG9w0BAQsFAAOCAQEAYAHyrvbLQfrl
AeHoKgfYUJu0qb4a73k6mRmns3RADTStxAD+RpYpx4+9wQZm2AExcYbRMSFBTqru
c+fRj2rCFl3OF5D00NGlAMBDAWkmnzAiwVJBJkUabW3CvYxAKUrBiK5szSxqo2MR
Cs3C2dlO7z1JCyO6InHc1uW2YgwdCD63+tc3pA2Tit2POze4GxDq6OcxM563nP3R
PuxYBOR1HVzdVmq7mcMkhuOEhe3N/Flh33nvuBeVGDvMxoSBE9LH3GVDZuHEhqyo
ntMTxaU6O2m12RIoIUYR+eHNEIGEdKJRWUQHPjf5i9dAU/GjAykh5v7YhiDO1GaD
2+jWROyK6Q==
-----END CERTIFICATE-----
Generated at Wed Sep 11 11:53:38 2024 by rpki-client on console-fra.rpki-client.org