Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/K63e8808tNjKlVvk6j6GEj6RSl4.roa
File: K63e8808tNjKlVvk6j6GEj6RSl4.roa (raw, json)
Hash identifier: O1iEvPPXr1xC2UHLcrp8qfIhAezxjKTOwdu5cvwL4u4=
Subject key identifier: 2B:AD:DE:F3:CD:3C:B4:D8:CA:95:5B:E4:EA:3E:86:12:3E:91:4A:5E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CD52A9B38B42855E6661391DA84F318B5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/K63e8808tNjKlVvk6j6GEj6RSl4.roa
Signing time: Thu 04 Jan 2024 15:49:48 +0000
ROA not before: Thu 04 Jan 2024 15:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 194.87.67.0/24 maxlen: 24
2a00:1c8d::/32 maxlen: 32
2a00:1c8a::/32 maxlen: 32
2a00:1c8b::/32 maxlen: 32
2a00:1c89::/32 maxlen: 32
2a00:1c8c::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 08 Jan 2024 08:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d5:2a:9b:38:b4:28:55:e6:66:13:91:da:84:f3:18:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 4 15:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2baddef3cd3cb4d8ca955be4ea3e86123e914a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:3f:43:46:8d:84:1e:c2:25:06:51:17:73:
12:c7:e1:ea:e0:16:d5:44:b2:c2:12:d1:bd:36:00:
2c:b0:ef:5a:5c:a1:53:67:07:4f:74:3d:f4:2c:bf:
b9:96:5d:08:bc:a6:ca:da:11:64:00:aa:1d:75:73:
31:d6:6b:74:13:f0:23:40:07:ce:ba:5b:ed:8a:2a:
09:70:bb:6d:52:7a:16:41:25:59:f2:a1:ea:da:35:
fa:82:51:6f:72:fe:62:ed:c2:94:e0:06:d5:db:8c:
9e:b4:38:e8:2a:c1:c4:bf:61:9b:f9:0f:96:2d:d3:
fd:e1:5f:1b:e4:50:88:1c:60:37:01:d0:f0:48:19:
78:05:48:f4:2c:a5:3a:76:3f:e6:9a:b0:49:9e:e5:
f9:5d:76:9f:be:bf:14:42:56:d8:49:95:78:ac:86:
c5:ce:c7:6d:1f:fa:e7:bb:bb:09:d4:de:2c:4a:dd:
4c:22:b4:59:14:96:a0:ae:20:07:62:32:b8:41:69:
76:bc:d5:25:c6:43:07:05:57:7d:57:3d:95:16:4a:
ea:15:8e:39:bf:e7:bc:f1:6c:23:6e:3e:ba:f1:67:
b2:00:85:be:c3:3d:b6:eb:71:f2:9a:43:9b:8b:06:
20:12:90:a8:69:43:6c:94:cd:89:ff:8c:d9:26:18:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AD:DE:F3:CD:3C:B4:D8:CA:95:5B:E4:EA:3E:86:12:3E:91:4A:5E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/K63e8808tNjKlVvk6j6GEj6RSl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.67.0/24
IPv6:
2a00:1c89::-2a00:1c8d:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5f:e1:a3:ac:ac:d6:bf:9b:8f:e8:4c:8d:fd:9d:0b:29:ce:f3:
c3:c9:80:92:ea:8a:62:86:36:35:2f:54:77:09:a6:d2:ae:02:
f3:02:10:7a:be:7f:f7:40:ab:c8:b8:df:92:4a:b6:92:48:09:
d9:01:f3:9a:7a:df:ec:a8:18:9f:ad:e6:39:78:58:69:c4:1d:
94:89:15:c2:18:bd:04:4a:9e:a3:28:56:f3:e7:3a:54:6f:0d:
8e:61:56:d1:3c:49:ab:86:a0:06:7d:16:46:26:a6:12:68:a3:
b0:77:be:db:94:1f:49:a9:0d:c5:a1:5a:8f:11:06:54:d7:66:
2d:12:ce:de:90:6d:00:81:90:57:30:b2:6d:54:73:68:6b:80:
d6:fe:73:e9:e0:7f:ca:c5:43:6f:50:06:db:56:2d:07:3d:38:
de:ec:a0:22:a2:ba:81:7c:db:71:25:fe:fd:3a:66:dc:a7:e4:
12:9b:ef:2d:65:09:67:b8:88:81:2a:06:3b:7a:12:ce:74:18:
e1:4d:10:ee:6d:84:6e:2e:86:38:a4:3d:4e:ff:a1:5f:d9:00:
a0:8f:cb:df:16:82:da:50:1b:a8:b4:00:13:35:97:b8:a8:cc:
5d:56:29:1b:d5:95:83:6f:2c:f2:a0:67:42:99:ad:6f:e2:09:
33:b5:ce:ca
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzVKps4tChV5mYTkdqE8xi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTA0MTU0OTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmFkZGVmM2NkM2NiNGQ4Y2E5NTViZTRlYTNlODYxMjNlOTE0YTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBY/Q0aNhB7CJQZRF3MSx+Hq4BbV
RLLCEtG9NgAssO9aXKFTZwdPdD30LL+5ll0IvKbK2hFkAKoddXMx1mt0E/AjQAfO
ulvtiioJcLttUnoWQSVZ8qHq2jX6glFvcv5i7cKU4AbV24yetDjoKsHEv2Gb+Q+W
LdP94V8b5FCIHGA3AdDwSBl4BUj0LKU6dj/mmrBJnuX5XXafvr8UQlbYSZV4rIbF
zsdtH/rnu7sJ1N4sSt1MIrRZFJagriAHYjK4QWl2vNUlxkMHBVd9Vz2VFkrqFY45
v+e88Wwjbj668WeyAIW+wz2263HymkObiwYgEpCoaUNslM2J/4zZJhg9kwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCut3vPNPLTYypVb5Oo+hhI+kUpeMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvSzYzZTg4MDh0TmpLbFZ2azZqNkdFajZSU2w0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAwldDMBYE
AgACMBAwDgMFACoAHIkDBQEqAByMMA0GCSqGSIb3DQEBCwUAA4IBAQBf4aOsrNa/
m4/oTI39nQspzvPDyYCS6opihjY1L1R3CabSrgLzAhB6vn/3QKvIuN+SSraSSAnZ
AfOaet/sqBifreY5eFhpxB2UiRXCGL0ESp6jKFbz5zpUbw2OYVbRPEmrhqAGfRZG
JqYSaKOwd77blB9JqQ3FoVqPEQZU12YtEs7ekG0AgZBXMLJtVHNoa4DW/nPp4H/K
xUNvUAbbVi0HPTje7KAiorqBfNtxJf79Ombcp+QSm+8tZQlnuIiBKgY7ehLOdBjh
TRDubYRuLoY4pD1O/6Ff2QCgj8vfFoLaUBuotAATNZe4qMxdVikb1ZWDbyzyoGdC
ma1v4gkztc7K
-----END CERTIFICATE-----
Generated at Mon Jan 8 12:45:25 2024 by rpki-client on console-fra.rpki-client.org