Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9B0JOV-wDhqsaK5_z0ZVuV1Psdc.roa
File: 9B0JOV-wDhqsaK5_z0ZVuV1Psdc.roa (raw, json)
Hash identifier: h8IdqbTVVQsSzgfXCmf/DicCdgnt0SjJwgbOYKwCKqE=
Subject key identifier: F4:1D:09:39:5F:B0:0E:1A:AC:68:AE:7F:CF:46:55:B9:5D:4F:B1:D7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DA61CCD81512871A046F2AA22960EBED2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9B0JOV-wDhqsaK5_z0ZVuV1Psdc.roa
Signing time: Wed 14 Feb 2024 05:35:21 +0000
ROA not before: Wed 14 Feb 2024 05:35:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 194.135.30.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.133.40.0/22 maxlen: 22
212.192.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 04:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:1c:cd:81:51:28:71:a0:46:f2:aa:22:96:0e:be:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 14 05:35:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f41d09395fb00e1aac68ae7fcf4655b95d4fb1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:d8:2f:7e:86:f7:40:3c:00:08:2c:59:29:
34:57:01:85:c7:69:ca:ff:26:3a:65:58:e0:18:1c:
59:c0:a2:83:f6:a4:a3:0b:a8:89:f9:22:40:43:c8:
f3:b8:9e:e6:03:34:a5:d0:19:9f:63:7a:12:14:27:
81:a3:9d:31:a6:91:94:d8:cc:eb:2b:e1:15:8b:3c:
1a:74:b9:cc:ab:39:d8:06:bd:16:eb:ec:37:a4:a0:
7c:7e:90:93:c1:6d:7c:6f:14:5d:f0:81:32:fd:44:
37:10:47:76:3d:3d:32:57:86:91:9d:7c:9e:76:09:
3b:77:4a:35:61:e6:04:23:24:1f:6e:0f:62:d9:eb:
d2:bc:6c:53:bd:f7:0a:2b:89:12:31:08:29:70:31:
73:6a:e3:aa:e0:d4:94:2e:0f:b0:0c:5e:62:43:46:
b1:35:40:b3:7b:f0:d5:a2:cd:c9:4f:25:d9:8b:2c:
17:26:ae:1e:54:a6:8e:bc:af:93:6f:35:2f:e5:b8:
2e:3b:e5:a5:c2:9b:3e:50:5e:79:aa:27:fe:06:2b:
64:08:5d:8c:d2:64:bd:af:5b:b2:9a:fa:13:fa:4b:
a5:46:fe:af:8a:5e:c3:8b:d4:22:fd:ec:dd:88:b3:
f1:66:5f:09:c8:e5:1d:e5:78:c4:39:e4:bd:ac:de:
35:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:09:39:5F:B0:0E:1A:AC:68:AE:7F:CF:46:55:B9:5D:4F:B1:D7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9B0JOV-wDhqsaK5_z0ZVuV1Psdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.30.0/24
195.58.35.0/24
195.133.40.0/22
212.192.254.0/24
Signature Algorithm: sha256WithRSAEncryption
76:cc:b1:3b:e2:96:17:12:4e:fa:73:61:dd:ec:f0:43:d7:a0:
ff:49:7c:69:51:6b:9f:57:54:71:7e:0d:48:51:c6:d7:52:a5:
00:65:75:45:03:da:81:5f:73:b7:28:db:8d:96:eb:dc:d5:7b:
a2:62:51:74:bb:d2:68:c2:05:ac:0c:60:92:63:de:26:d2:c9:
84:6a:13:2e:4f:86:b0:31:ef:24:87:1d:2b:ca:16:31:6a:f0:
39:f4:92:86:a2:da:9f:ec:6c:b3:05:a0:be:8b:7d:a5:7a:2d:
be:28:1d:52:52:78:f0:c6:17:18:e8:47:10:c6:58:9d:57:af:
9b:33:8e:03:ce:e8:f5:53:03:41:6b:ba:34:48:71:f0:8a:00:
80:9d:16:47:8c:ad:ee:9c:f7:15:67:fa:98:e6:68:c3:58:1b:
83:7d:66:31:bb:c2:4b:05:49:6c:ea:62:a0:95:2f:eb:05:19:
83:65:90:4b:73:7a:81:a9:77:c3:8a:e0:a0:54:c3:93:f7:47:
37:2a:82:21:b5:be:4d:6b:33:c2:89:6c:ac:ca:c2:a6:66:f1:
2b:de:f4:97:7a:d1:48:56:72:04:9b:69:8d:1e:e0:0a:72:67:
a7:a6:ec:06:a9:3e:d7:49:7a:0b:6d:cb:86:56:96:b1:a7:1a:
85:60:3d:9d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY2mHM2BUShxoEbyqiKWDr7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMjE0MDUzNTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDFkMDkzOTVmYjAwZTFhYWM2OGFlN2ZjZjQ2NTViOTVkNGZiMWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMHYL36G90A8AAgsWSk0VwGFx2nK
/yY6ZVjgGBxZwKKD9qSjC6iJ+SJAQ8jzuJ7mAzSl0BmfY3oSFCeBo50xppGU2Mzr
K+EVizwadLnMqznYBr0W6+w3pKB8fpCTwW18bxRd8IEy/UQ3EEd2PT0yV4aRnXye
dgk7d0o1YeYEIyQfbg9i2evSvGxTvfcKK4kSMQgpcDFzauOq4NSULg+wDF5iQ0ax
NUCze/DVos3JTyXZiywXJq4eVKaOvK+TbzUv5bguO+Wlwps+UF55qif+BitkCF2M
0mS9r1uymvoT+kulRv6vil7Di9Qi/ezdiLPxZl8JyOUd5XjEOeS9rN41zQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPQdCTlfsA4arGiuf89GVbldT7HXMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvOUIwSk9WLXdEaHFzYUs1X3owWlZ1VjFQc2RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwoceAwQA
wzojAwQCw4UoAwQA1MD+MA0GCSqGSIb3DQEBCwUAA4IBAQB2zLE74pYXEk76c2Hd
7PBD16D/SXxpUWufV1Rxfg1IUcbXUqUAZXVFA9qBX3O3KNuNluvc1XuiYlF0u9Jo
wgWsDGCSY94m0smEahMuT4awMe8khx0ryhYxavA59JKGotqf7GyzBaC+i32lei2+
KB1SUnjwxhcY6EcQxlidV6+bM44Dzuj1UwNBa7o0SHHwigCAnRZHjK3unPcVZ/qY
5mjDWBuDfWYxu8JLBUls6mKglS/rBRmDZZBLc3qBqXfDiuCgVMOT90c3KoIhtb5N
azPCiWysysKmZvEr3vSXetFIVnIEm2mNHuAKcmenpuwGqT7XSXoLbcuGVpaxpxqF
YD2d
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:07 2024 by rpki-client on console-fra.rpki-client.org