Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9DCycHd5v8U_uDarDMhMH-Ie1XA.roa
File: 9DCycHd5v8U_uDarDMhMH-Ie1XA.roa (raw, json)
Hash identifier: q7padgjnu57stCxbsFcSs8EZuhKid4nj7moPwQCx5PI=
Subject key identifier: F4:30:B2:70:77:79:BF:C5:3F:B8:36:AB:0C:C8:4C:1F:E2:1E:D5:70
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D6A5C1633E067F73AC9F1E8BEFF40C620
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9DCycHd5v8U_uDarDMhMH-Ie1XA.roa
Signing time: Fri 02 Feb 2024 15:07:16 +0000
ROA not before: Fri 02 Feb 2024 15:07:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15731
IP address blocks: 192.124.178.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.114.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.179.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.84.0/23 maxlen: 23
212.192.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 05:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:5c:16:33:e0:67:f7:3a:c9:f1:e8:be:ff:40:c6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 2 15:07:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f430b2707779bfc53fb836ab0cc84c1fe21ed570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:69:f3:4c:b3:f0:78:25:94:db:08:44:4c:
80:e9:bf:2b:97:04:8f:49:66:c6:cf:2b:77:0a:13:
ba:e6:55:86:1c:52:5d:fe:03:94:d3:a5:c3:e4:7b:
f5:9a:ec:a1:69:f6:36:6e:a3:a0:a6:ef:5f:5f:3a:
bc:c1:aa:81:8e:6d:d9:93:89:0f:69:11:f5:f4:49:
6a:78:cf:d6:6d:36:24:e2:9b:1c:73:fa:35:ce:1a:
ff:96:d2:d7:3e:7b:e3:d2:40:b9:5e:7c:cc:ae:f3:
dd:c6:1f:f4:45:38:92:fb:9a:f7:2d:4c:6e:38:a6:
a1:96:46:71:5e:63:02:27:ae:e2:e1:1c:be:b3:30:
be:e1:6f:f2:7f:21:14:28:e0:47:0d:a4:83:90:cf:
bd:78:d3:e9:97:01:04:9e:40:c5:0d:e5:92:1d:13:
84:47:f3:7c:80:44:b2:e4:24:df:98:c2:b3:40:c2:
0f:f6:aa:49:a4:84:da:68:6a:71:4f:bb:41:25:f8:
62:0d:e7:f2:82:e8:96:07:c2:51:80:dd:26:2c:a1:
23:5b:52:dd:88:11:fd:31:7c:45:9b:98:0b:71:b6:
fb:23:00:5f:3f:6f:6e:c7:9b:f4:98:66:8c:72:65:
d7:5e:a7:c2:6d:bd:ee:9b:0c:6f:ec:03:ee:db:ce:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:30:B2:70:77:79:BF:C5:3F:B8:36:AB:0C:C8:4C:1F:E2:1E:D5:70
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9DCycHd5v8U_uDarDMhMH-Ie1XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.179.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.37.0/24
195.133.40.0/23
195.133.84.0/23
212.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a2:50:78:e3:b9:f5:6d:31:39:c4:c2:72:df:b6:58:e4:08:
e9:94:1b:53:5a:45:7f:1f:1c:90:f6:8a:60:27:d7:b3:bd:a8:
81:bf:0a:0c:88:60:71:14:0b:d5:08:ae:81:b1:4e:2f:c4:f8:
8d:34:7c:d2:c1:8d:58:c4:a2:df:e1:c3:bd:9e:48:b6:bc:84:
37:dd:03:0d:fa:31:78:69:1a:ed:ec:7b:2b:b2:ed:c1:0d:cd:
54:f8:42:95:60:d4:74:9a:c3:0d:9e:0d:97:1b:68:ce:a1:42:
8e:95:38:be:d0:7c:7c:ba:c9:40:a0:4a:e8:fa:78:a9:98:6b:
55:73:21:77:f9:5e:ec:a4:f1:a4:56:28:78:2e:9c:8b:91:2b:
2c:5e:46:a6:47:ac:e0:51:46:fc:f5:7e:43:7d:7d:ed:7b:cf:
88:c4:5d:9a:14:3a:6e:e4:1a:75:e5:d6:2e:b9:1d:32:47:eb:
1f:2c:80:46:5f:d8:f0:93:a0:66:1b:d5:ea:c9:ac:b6:b6:6a:
34:f0:a0:0f:20:81:6e:c8:a1:e2:ae:57:4b:f2:c5:42:50:d1:
c1:2c:b9:74:a2:4e:fb:47:61:3c:2f:3a:e1:8f:46:27:47:79:
c8:4a:7b:d5:f2:2c:27:15:bc:be:8b:a9:a7:07:38:47:a8:0c:
eb:7b:e2:b2
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAY1qXBYz4Gf3Osnx6L7/QMYgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMjAyMTUwNzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDMwYjI3MDc3NzliZmM1M2ZiODM2YWIwY2M4NGMxZmUyMWVkNTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLFp80yz8HgllNsIREyA6b8rlwSP
SWbGzyt3ChO65lWGHFJd/gOU06XD5Hv1muyhafY2bqOgpu9fXzq8waqBjm3Zk4kP
aRH19ElqeM/WbTYk4pscc/o1zhr/ltLXPnvj0kC5XnzMrvPdxh/0RTiS+5r3LUxu
OKahlkZxXmMCJ67i4Ry+szC+4W/yfyEUKOBHDaSDkM+9eNPplwEEnkDFDeWSHROE
R/N8gESy5CTfmMKzQMIP9qpJpITaaGpxT7tBJfhiDefyguiWB8JRgN0mLKEjW1Ld
iBH9MXxFm5gLcbb7IwBfP29ux5v0mGaMcmXXXqfCbb3umwxv7APu285jwwIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFPQwsnB3eb/FP7g2qwzITB/iHtVwMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvOURDeWNIZDV2OFVfdURhckRNaE1ILUllMVhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBqwQCAAEwgaQDBADA
fLIDBADAfL0DBADBfBADBADBfFADBADBfIUDBADCOi8DBADCVwEwDAMEAMJXCwME
AMJXDAMEAMJXEgMEAMJXFQMEAMJXHgMEAMJXOAMEAMJXbAMEAcJXcgMEAMJXegME
AMJXfAMEAMJXgwMEAcJXhgMEAMJXswMEAcM6OgMEAcM6PgMEAMOFAAMEAMOFJQME
AcOFKAMEAcOFVAMEANTA3jANBgkqhkiG9w0BAQsFAAOCAQEAFaJQeOO59W0xOcTC
ct+2WOQI6ZQbU1pFfx8ckPaKYCfXs72ogb8KDIhgcRQL1QiugbFOL8T4jTR80sGN
WMSi3+HDvZ5ItryEN90DDfoxeGka7ex7K7LtwQ3NVPhClWDUdJrDDZ4NlxtozqFC
jpU4vtB8fLrJQKBK6Pp4qZhrVXMhd/le7KTxpFYoeC6ci5ErLF5Gpkes4FFG/PV+
Q3197XvPiMRdmhQ6buQadeXWLrkdMkfrHyyARl/Y8JOgZhvV6smstrZqNPCgDyCB
bsih4q5XS/LFQlDRwSy5dKJO+0dhPC864Y9GJ0d5yEp71fIsJxW8vouppwc4R6gM
63visg==
-----END CERTIFICATE-----
Generated at Sun Feb 4 06:08:46 2024 by rpki-client on console-fra.rpki-client.org