Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KnUdV1j1crZkHiR2IvAgHY3tRwU.roa
File: KnUdV1j1crZkHiR2IvAgHY3tRwU.roa (raw, json)
Hash identifier: L6bNzkf4ca6N7A0QD71xDmdBLEot6brjSv1JL7glxfQ=
Subject key identifier: 2A:75:1D:57:58:F5:72:B6:64:1E:24:76:22:F0:20:1D:8D:ED:47:05
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A8B016389DE0081B4366056FA40ED
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KnUdV1j1crZkHiR2IvAgHY3tRwU.roa
Signing time: Tue 02 Jan 2024 12:33:54 +0000
ROA not before: Tue 02 Jan 2024 12:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 193.124.7.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:8b:01:63:89:de:00:81:b4:36:60:56:fa:40:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a751d5758f572b6641e247622f0201d8ded4705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7a:75:40:57:dd:ef:a0:eb:b1:f8:28:57:d4:
fc:8e:9d:9c:c6:6a:f5:26:39:fd:85:ec:df:9f:a3:
29:7b:c0:40:fc:4e:a4:03:0d:13:8a:88:ed:70:0a:
94:55:cc:e9:a5:86:4b:a6:5b:df:44:32:fb:46:f4:
01:db:e9:65:bd:ee:6f:21:b2:75:f1:4d:1c:ff:48:
95:32:6c:95:72:d8:c9:5e:6d:e7:b7:4d:b9:8b:25:
b6:77:70:be:55:13:e2:87:50:c1:fb:e2:14:5a:cf:
72:0c:28:a4:9a:75:93:4e:fd:d2:7d:ef:53:ec:48:
59:0d:ed:66:1b:96:95:72:82:04:16:68:89:89:fa:
01:d0:4c:71:35:8e:97:f5:c5:9b:e0:e9:ff:59:9d:
ad:95:9c:80:dd:10:8e:8a:a2:2c:13:84:6d:6f:15:
fa:c9:11:9c:d1:02:91:2a:52:85:08:60:6a:06:dd:
3a:67:7a:45:9a:14:cf:2c:6d:45:ea:f4:b7:55:dd:
a6:ad:d1:b3:bc:d4:2e:0d:ba:9d:65:58:8b:2b:74:
2f:7d:15:bf:dd:ba:fd:48:9c:12:95:8f:0b:5f:75:
df:8c:ec:63:bd:9e:0a:d8:ed:fe:ad:95:2d:ec:36:
2a:69:4c:40:c7:bb:a6:df:f6:57:14:1d:2a:8d:27:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:75:1D:57:58:F5:72:B6:64:1E:24:76:22:F0:20:1D:8D:ED:47:05
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KnUdV1j1crZkHiR2IvAgHY3tRwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
193.124.90.0/24
193.124.200.0/24
194.58.154.0/24
194.87.190.0/24
194.87.215.0/24
195.58.34.0/24
195.133.6.0/24
195.133.85.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:80:88:01:98:03:e6:86:bd:63:f3:5b:40:d6:a4:b0:6f:20:
47:7b:22:f2:ff:59:47:13:81:d8:10:d7:9b:dc:24:93:dc:84:
85:59:37:61:05:91:a3:c6:91:3d:91:fe:75:a2:08:5a:d7:4d:
e1:2c:42:94:49:8b:29:34:f2:cf:d6:48:99:0a:df:1e:e7:d8:
ba:dd:10:3d:1f:fc:00:c2:5c:8d:66:e7:a4:05:41:53:ea:52:
c7:7b:1d:91:8b:5c:e6:df:29:c0:00:1c:df:66:2c:6d:78:63:
11:1b:fc:a3:c5:ad:f9:47:77:d6:e7:23:f5:3f:c0:13:15:9e:
90:7d:96:41:9a:71:20:30:36:30:a0:d0:73:ad:06:22:45:20:
46:f3:91:e1:de:db:41:e0:4e:2d:31:03:bd:38:ca:05:1d:17:
32:7e:ee:a0:56:b5:0a:6c:6e:31:1b:f5:e8:19:41:0a:f1:77:
32:dd:ee:9d:af:a5:99:1a:dc:3b:1a:4f:2e:77:95:e7:bb:ff:
4b:10:9a:2a:2a:80:6d:7e:48:d3:f9:05:cb:38:5b:c4:ee:9f:
ac:63:cd:17:b4:76:8a:45:c5:0c:21:5f:5b:3c:4e:97:0d:3d:
76:72:69:06:f7:fa:97:ec:a4:3a:47:6a:8a:5b:8c:e7:98:4f:
d3:73:b1:24
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYzKKosBY4neAIG0NmBW+kDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMTIzMzU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTc1MWQ1NzU4ZjU3MmI2NjQxZTI0NzYyMmYwMjAxZDhkZWQ0NzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXp1QFfd76DrsfgoV9T8jp2cxmr1
Jjn9hezfn6Mpe8BA/E6kAw0TiojtcAqUVczppYZLplvfRDL7RvQB2+llve5vIbJ1
8U0c/0iVMmyVctjJXm3nt025iyW2d3C+VRPih1DB++IUWs9yDCikmnWTTv3Sfe9T
7EhZDe1mG5aVcoIEFmiJifoB0ExxNY6X9cWb4On/WZ2tlZyA3RCOiqIsE4RtbxX6
yRGc0QKRKlKFCGBqBt06Z3pFmhTPLG1F6vS3Vd2mrdGzvNQuDbqdZViLK3QvfRW/
3br9SJwSlY8LX3XfjOxjvZ4K2O3+rZUt7DYqaUxAx7um3/ZXFB0qjSf+PQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFCp1HVdY9XK2ZB4kdiLwIB2N7UcFMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvS25VZFYxajFjclprSGlSMkl2QWdIWTN0UndVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAwXwHAwQA
wXxaAwQAwXzIAwQAwjqaAwQAwle+AwQAwlfXAwQAwzoiAwQAw4UGAwQAw4VVMA0G
CSqGSIb3DQEBCwUAA4IBAQB9gIgBmAPmhr1j81tA1qSwbyBHeyLy/1lHE4HYENeb
3CST3ISFWTdhBZGjxpE9kf51ogha103hLEKUSYspNPLP1kiZCt8e59i63RA9H/wA
wlyNZuekBUFT6lLHex2Ri1zm3ynAABzfZixteGMRG/yjxa35R3fW5yP1P8ATFZ6Q
fZZBmnEgMDYwoNBzrQYiRSBG85Hh3ttB4E4tMQO9OMoFHRcyfu6gVrUKbG4xG/Xo
GUEK8Xcy3e6dr6WZGtw7Gk8ud5Xnu/9LEJoqKoBtfkjT+QXLOFvE7p+sY80XtHaK
RcUMIV9bPE6XDT12cmkG9/qX7KQ6R2qKW4znmE/Tc7Ek
-----END CERTIFICATE-----
Generated at Fri Jan 5 14:29:55 2024 by rpki-client on console-fra.rpki-client.org