Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KOwahlj-1ZvJCKpne6lMbcGl-Rw.roa
File: KOwahlj-1ZvJCKpne6lMbcGl-Rw.roa (raw, json)
Hash identifier: oy3fmB5kgsqmJZ/x4k8ZcPvUQmwWKSlwZL+SX3frLrk=
Subject key identifier: 28:EC:1A:86:58:FE:D5:9B:C9:08:AA:67:7B:A9:4C:6D:C1:A5:F9:1C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191C6911604F0E3480307BBBDA531623652
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KOwahlj-1ZvJCKpne6lMbcGl-Rw.roa
Signing time: Fri 06 Sep 2024 09:01:22 +0000
ROA not before: Fri 06 Sep 2024 09:01:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 192.124.172.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.58.0/23 maxlen: 23
194.87.169.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
212.193.25.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 06 Sep 2024 20:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:91:16:04:f0:e3:48:03:07:bb:bd:a5:31:62:36:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 6 09:01:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28ec1a8658fed59bc908aa677ba94c6dc1a5f91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:cc:2c:e7:04:c1:78:b5:04:4a:ef:6f:12:
39:7a:1c:a9:3c:05:52:cd:2c:83:a7:5c:f1:11:db:
49:6f:17:4d:8f:c0:65:c8:0d:25:c5:d8:fc:38:e7:
68:7a:c0:4a:dc:8c:05:c5:e8:a4:f2:24:c4:9a:f2:
45:4b:1e:f5:64:69:73:74:a4:90:92:10:4a:af:16:
d6:30:3e:97:ca:e6:aa:f1:f3:0e:50:61:a1:b1:e8:
ee:d5:b0:de:df:63:bf:bb:95:d8:cf:19:e3:4a:b8:
6b:51:bd:f8:fb:67:59:bb:2e:f5:f9:a5:a5:ea:18:
d8:80:ab:ad:7b:a1:43:2d:db:5d:b6:45:f8:f8:a8:
87:10:42:c8:11:95:31:96:b6:4a:91:90:95:b8:9c:
db:33:f8:0d:c0:ee:55:43:2c:a4:6f:1a:9d:42:6a:
fb:01:a9:de:85:72:c1:e2:f7:6e:e3:7a:b5:76:b8:
80:64:c0:69:3b:6d:98:bc:98:45:45:e5:8e:9d:c3:
d3:d2:8a:b2:53:af:ab:02:75:8e:0e:4c:65:9f:fc:
97:79:a4:54:a4:2b:98:81:f1:fa:f4:7e:dc:0e:1a:
c8:21:8e:f5:80:7f:7c:28:2c:96:a9:f0:49:d2:c2:
73:c8:ae:aa:16:f6:b6:da:7c:f3:c0:45:e3:0b:b3:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EC:1A:86:58:FE:D5:9B:C9:08:AA:67:7B:A9:4C:6D:C1:A5:F9:1C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KOwahlj-1ZvJCKpne6lMbcGl-Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
194.58.155.0/24
194.87.58.0/23
194.87.169.0/24
195.133.24.0/23
195.133.50.0/23
195.133.92.0/23
212.192.1.0/24
212.192.208.0/24
212.193.25.0-212.193.27.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
4a:d7:27:56:a3:d1:99:a9:bd:3c:c0:2a:cb:f0:f0:d6:87:7a:
fc:1a:16:c1:1a:49:13:ec:96:f6:30:58:72:3b:39:d7:a4:6f:
0f:69:95:4e:41:01:0e:a0:c2:74:78:f0:a7:c1:94:17:a0:0a:
94:54:56:53:81:9e:46:8d:09:d6:3d:4e:3f:68:5c:b3:44:dc:
8c:d2:b3:ea:70:72:72:d4:3e:9c:8d:f0:be:c5:b0:3f:1e:8e:
70:b6:b4:f1:71:0d:7a:94:76:90:91:2c:cd:12:e5:29:6f:db:
45:9a:e7:b8:d0:23:20:c7:30:5e:a3:8b:00:9d:b6:70:31:d8:
62:e3:b9:a3:de:3e:45:01:fc:59:5e:db:cf:5e:4c:a3:9f:ee:
1a:71:fd:81:46:12:77:62:c6:fd:10:d4:d1:df:2a:92:19:c8:
c3:df:ee:ab:90:43:2d:8d:71:4a:5b:e2:1c:ee:56:16:e7:48:
33:a6:54:90:8a:d8:fb:f6:a2:0a:13:6a:64:c8:94:83:d8:58:
ab:cf:8b:ab:e5:6d:f7:bd:d4:60:61:b1:ab:0d:c5:dc:e9:b1:
9a:cf:b9:01:c0:fa:60:f9:16:14:5d:11:f6:76:51:83:1c:a5:
3b:ac:82:0b:d7:24:45:17:61:4f:82:7b:ff:7e:e6:50:cb:8d:
63:59:b0:7b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZHGkRYE8ONIAwe7vaUxYjZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwOTA2MDkwMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGVjMWE4NjU4ZmVkNTliYzkwOGFhNjc3YmE5NGM2ZGMxYTVmOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdnMLOcEwXi1BErvbxI5ehypPAVS
zSyDp1zxEdtJbxdNj8BlyA0lxdj8OOdoesBK3IwFxeik8iTEmvJFSx71ZGlzdKSQ
khBKrxbWMD6Xyuaq8fMOUGGhseju1bDe32O/u5XYzxnjSrhrUb34+2dZuy71+aWl
6hjYgKute6FDLdtdtkX4+KiHEELIEZUxlrZKkZCVuJzbM/gNwO5VQyykbxqdQmr7
AanehXLB4vdu43q1driAZMBpO22YvJhFReWOncPT0oqyU6+rAnWODkxln/yXeaRU
pCuYgfH69H7cDhrIIY71gH98KCyWqfBJ0sJzyK6qFva22nzzwEXjC7NiSQIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFCjsGoZY/tWbyQiqZ3upTG3BpfkcMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvS093YWhsai0xWnZKQ0twbmU2bE1iY0dsLVJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBKBAIAATBEAwQAwHysAwQA
wjqbAwQBwlc6AwQAwlepAwQBw4UYAwQBw4UyAwQBw4VcAwQA1MABAwQA1MDQMAwD
BADUwRkDBALUwRgwFAQCAAIwDgMFAyoBV8ADBQMqDP9AMA0GCSqGSIb3DQEBCwUA
A4IBAQBK1ydWo9GZqb08wCrL8PDWh3r8GhbBGkkT7Jb2MFhyOznXpG8PaZVOQQEO
oMJ0ePCnwZQXoAqUVFZTgZ5GjQnWPU4/aFyzRNyM0rPqcHJy1D6cjfC+xbA/Ho5w
trTxcQ16lHaQkSzNEuUpb9tFmue40CMgxzBeo4sAnbZwMdhi47mj3j5FAfxZXtvP
Xkyjn+4acf2BRhJ3Ysb9ENTR3yqSGcjD3+6rkEMtjXFKW+Ic7lYW50gzplSQitj7
9qIKE2pkyJSD2Firz4ur5W33vdRgYbGrDcXc6bGaz7kBwPpg+RYUXRH2dlGDHKU7
rIIL1yRFF2FPgnv/fuZQy41jWbB7
-----END CERTIFICATE-----
Generated at Fri Sep 6 22:11:02 2024 by rpki-client on console-fra.rpki-client.org