Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BB9Of4jKzOduSWuEeQm1IRLWCp8.roa
File: BB9Of4jKzOduSWuEeQm1IRLWCp8.roa (raw, json)
Hash identifier: nFBfddAGTMvbaboq9SYsC5s9UubL2LX2S1WBNz4yaTc=
Subject key identifier: 04:1F:4E:7F:88:CA:CC:E7:6E:49:6B:84:79:09:B5:21:12:D6:0A:9F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D77ED9915C8088609277FB05CB1862CA7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BB9Of4jKzOduSWuEeQm1IRLWCp8.roa
Signing time: Mon 05 Feb 2024 06:21:16 +0000
ROA not before: Mon 05 Feb 2024 06:21:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
195.133.2.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 09:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:77:ed:99:15:c8:08:86:09:27:7f:b0:5c:b1:86:2c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 5 06:21:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=041f4e7f88cacce76e496b847909b52112d60a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:4f:80:1a:b9:ce:b0:65:b1:34:0e:66:c8:
61:71:28:17:57:1a:de:a4:6e:9f:66:0e:20:bf:90:
d4:84:e2:16:6d:37:fb:46:45:22:04:dd:31:85:bc:
c3:3d:e0:8e:ec:12:2d:87:b9:95:99:bf:0e:cd:7c:
c2:ee:95:18:38:b2:31:0b:59:26:88:2a:71:a8:c1:
bb:c5:1e:33:7e:f9:9f:fb:75:49:7d:d5:b9:81:8f:
bc:7d:33:6f:67:9c:17:7d:73:3d:50:00:1b:34:06:
d6:56:b6:52:de:85:81:43:6c:00:9d:66:1a:e0:9a:
5f:9e:01:5c:b3:9a:64:78:90:b4:bd:85:74:ad:98:
81:db:f2:e4:59:a7:87:e7:a6:a7:c3:4d:2c:5f:43:
81:01:bd:ce:09:09:8c:82:29:a1:a8:10:6b:4d:f0:
db:32:d9:d0:d9:4c:a9:81:de:1f:b6:06:03:79:46:
64:c5:29:ba:2b:1c:6b:ca:4a:30:83:d1:a2:f7:e1:
84:32:2a:89:6b:36:ca:2e:0d:49:eb:50:bb:02:8f:
75:17:b5:2f:50:f7:53:78:88:29:51:73:82:1a:9f:
a9:8a:f4:85:4d:1e:d2:d7:c6:fe:3d:c6:5c:8d:d9:
df:76:67:f6:86:a0:1c:1f:d9:74:b0:85:a1:c7:6c:
6f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1F:4E:7F:88:CA:CC:E7:6E:49:6B:84:79:09:B5:21:12:D6:0A:9F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/BB9Of4jKzOduSWuEeQm1IRLWCp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.5.0/24
193.124.7.0/24
193.124.95.0/24
193.124.200.0/24
193.124.202.0/24
193.124.207.0/24
194.58.42.0/24
194.87.22.0/24
194.87.32.0/24
194.87.81.0/24
194.87.149.0/24
194.87.170.0/24
194.87.172.0/24
194.87.201.0/24
194.135.18.0/24
195.58.54.0/24
195.58.60.0/24
195.133.2.0/24
195.133.25.0/24
195.133.72.0/24
195.133.85.0/24
195.133.192.0/24
212.192.1.0/24
212.193.13.0/24
Signature Algorithm: sha256WithRSAEncryption
75:73:96:41:62:19:cb:ec:72:ce:4c:b0:46:67:ba:d5:a5:5e:
a7:10:12:6d:49:35:39:2c:6f:d7:59:9f:17:84:5b:b9:42:ae:
e0:2f:5d:b0:66:49:32:d4:b3:d2:55:75:67:6d:7d:c9:e5:21:
71:e9:af:fa:e3:9c:62:fe:19:69:a0:9d:23:ac:45:b4:43:d6:
9f:f4:23:92:31:c4:b9:e9:0b:5b:45:f8:8e:dc:8b:34:2a:4f:
3e:11:86:6a:98:0b:2d:7b:1d:4f:59:82:be:c1:5a:b9:20:a5:
79:33:c5:dd:ac:10:86:5c:46:58:e0:8c:17:2b:54:c5:2a:33:
5a:61:a7:de:e8:34:ca:67:6e:21:16:3e:9b:7c:3b:aa:e2:ab:
74:63:02:3d:64:d7:07:a1:e0:e0:7d:28:4d:fd:30:35:c4:6f:
37:8c:ae:a5:81:4e:39:52:c8:f7:e8:dd:bc:ad:c0:6a:bf:c4:
db:4d:49:5b:23:ce:a9:9c:9a:83:a3:c3:ee:80:bb:1d:f3:0e:
fc:73:d0:39:c2:71:98:ed:49:74:9c:6f:4a:bd:17:5f:fa:09:
96:dd:b4:0b:d2:46:fe:e2:16:08:5b:4a:d0:d7:53:83:ba:ea:
38:bc:e9:6f:8a:67:2a:ae:c5:3a:b9:95:93:3f:66:41:d2:10:
75:e6:91:52
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAY137ZkVyAiGCSd/sFyxhiynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMjA1MDYyMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDFmNGU3Zjg4Y2FjY2U3NmU0OTZiODQ3OTA5YjUyMTEyZDYwYTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8BPgBq5zrBlsTQOZshhcSgXVxre
pG6fZg4gv5DUhOIWbTf7RkUiBN0xhbzDPeCO7BIth7mVmb8OzXzC7pUYOLIxC1km
iCpxqMG7xR4zfvmf+3VJfdW5gY+8fTNvZ5wXfXM9UAAbNAbWVrZS3oWBQ2wAnWYa
4JpfngFcs5pkeJC0vYV0rZiB2/LkWaeH56anw00sX0OBAb3OCQmMgimhqBBrTfDb
MtnQ2Uypgd4ftgYDeUZkxSm6Kxxrykowg9Gi9+GEMiqJazbKLg1J61C7Ao91F7Uv
UPdTeIgpUXOCGp+pivSFTR7S18b+PcZcjdnfdmf2hqAcH9l0sIWhx2xv1QIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFAQfTn+IysznbklrhHkJtSES1gqfMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvQkI5T2Y0akt6T2R1U1d1RWVRbTFJUkxXQ3A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBADB
fAUDBADBfAcDBADBfF8DBADBfMgDBADBfMoDBADBfM8DBADCOioDBADCVxYDBADC
VyADBADCV1EDBADCV5UDBADCV6oDBADCV6wDBADCV8kDBADChxIDBADDOjYDBADD
OjwDBADDhQIDBADDhRkDBADDhUgDBADDhVUDBADDhcADBADUwAEDBADUwQ0wDQYJ
KoZIhvcNAQELBQADggEBAHVzlkFiGcvscs5MsEZnutWlXqcQEm1JNTksb9dZnxeE
W7lCruAvXbBmSTLUs9JVdWdtfcnlIXHpr/rjnGL+GWmgnSOsRbRD1p/0I5IxxLnp
C1tF+I7cizQqTz4RhmqYCy17HU9Zgr7BWrkgpXkzxd2sEIZcRljgjBcrVMUqM1ph
p97oNMpnbiEWPpt8O6riq3RjAj1k1weh4OB9KE39MDXEbzeMrqWBTjlSyPfo3byt
wGq/xNtNSVsjzqmcmoOjw+6Aux3zDvxz0DnCcZjtSXScb0q9F1/6CZbdtAvSRv7i
FghbStDXU4O66ji86W+KZyquxTq5lZM/ZkHSEHXmkVI=
-----END CERTIFICATE-----
Generated at Mon Feb 5 14:32:32 2024 by rpki-client on console-fra.rpki-client.org