Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OMBv0BXzPieaTkublfZTEjY-WSY.roa
File: OMBv0BXzPieaTkublfZTEjY-WSY.roa (raw, json)
Hash identifier: /gksvt8xbgc4yjDbbiZkuQAJ0CggE6Bd8KJyQQbOgcM=
Subject key identifier: 38:C0:6F:D0:15:F3:3E:27:9A:4E:4B:9B:95:F6:53:12:36:3E:59:26
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DE4C455393C0A52A1B70CA2A34476AC77
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OMBv0BXzPieaTkublfZTEjY-WSY.roa
Signing time: Mon 26 Feb 2024 09:34:48 +0000
ROA not before: Mon 26 Feb 2024 09:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 192.124.191.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.78.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 17:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:c4:55:39:3c:0a:52:a1:b7:0c:a2:a3:44:76:ac:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 26 09:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38c06fd015f33e279a4e4b9b95f65312363e5926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:85:77:1b:1b:da:dc:de:69:e8:86:f3:8c:4c:
50:d2:82:f7:ce:eb:a7:27:7e:66:48:8f:5c:2d:77:
f5:58:b4:f6:bd:ef:36:dd:14:29:aa:ba:90:85:4a:
82:23:f6:fd:88:9d:54:f8:ca:0a:0c:c0:19:86:ec:
27:b1:49:24:fd:41:d9:77:34:2d:00:d2:d3:f8:c5:
57:76:b9:5e:c8:bc:3f:ed:e4:fc:12:05:c3:bc:20:
0e:ab:7a:6a:d8:31:a2:7f:cd:00:ef:01:a9:ec:25:
3f:70:7d:c8:2a:f6:8d:c4:5b:8c:20:e7:88:03:bc:
53:38:2d:97:ae:09:de:94:4d:ac:12:5c:d0:69:5e:
3c:10:87:28:89:76:42:21:2f:d1:fc:98:6e:c5:af:
20:da:92:a2:15:78:71:71:b0:5f:73:b4:34:01:18:
8d:e3:d6:77:a2:7a:a7:5d:51:82:02:b0:10:37:4c:
ae:16:a3:d3:b5:a5:3e:30:9e:74:28:3a:6d:31:38:
6e:2d:e4:d4:2b:98:aa:5a:65:c3:8c:ab:64:f1:16:
62:a1:d0:43:72:f6:91:01:95:b1:9d:89:0f:89:69:
ed:d5:32:35:11:a2:d9:9b:0c:df:17:62:af:2a:b2:
b1:63:88:1c:4f:56:2c:9a:e5:a2:8f:39:9f:fe:86:
e6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C0:6F:D0:15:F3:3E:27:9A:4E:4B:9B:95:F6:53:12:36:3E:59:26
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OMBv0BXzPieaTkublfZTEjY-WSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.191.0/24
193.124.5.0/24
193.124.7.0/24
193.124.203.0/24
194.87.22.0/24
194.87.32.0/24
194.87.142.0/24
194.87.169.0/24
194.87.201.0/24
194.87.245.0/24
195.133.6.0/24
195.133.25.0/24
195.133.72.0/24
195.133.78.0/24
195.133.85.0/24
195.133.192.0/24
212.192.1.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:4a:91:cf:e6:0a:59:41:f1:b2:ec:69:ee:34:d0:4b:cb:da:
c2:fd:2e:5b:c1:89:db:3d:b2:df:b4:9f:eb:68:25:f6:ef:c7:
8e:54:d3:f5:41:b9:48:b7:9c:f1:7c:94:58:64:c4:26:a0:e3:
50:1e:73:6f:1d:90:4b:d6:1b:98:5a:6b:af:34:a8:f4:d8:a0:
00:6d:ce:64:35:17:4c:bf:1f:21:09:98:9e:89:83:ad:14:aa:
9c:f0:cb:05:9e:13:60:ef:03:2e:65:c9:fa:47:32:e5:f7:06:
f5:fc:8b:a0:32:c3:0d:89:72:c2:13:e8:dd:f9:bd:06:38:6b:
c8:89:7a:56:99:ea:1c:e3:9f:6c:49:3e:6d:45:ec:26:87:a7:
43:94:c7:59:db:16:94:8f:e6:de:eb:cc:b5:d9:19:d4:7d:3d:
e9:10:54:03:9c:f6:b0:f7:bc:26:3b:26:2d:a9:ba:e6:0c:0c:
4a:d1:ef:39:55:53:a7:07:08:a3:17:af:4b:04:61:1f:7e:03:
88:4d:82:2f:cf:66:0d:93:ad:00:c5:c7:14:d3:e0:7c:f5:7c:
f2:88:2f:f6:0c:04:b3:1a:1f:fa:e8:1f:5e:93:e6:cb:57:d3:
e9:80:74:d8:94:48:bd:f1:62:2e:dd:28:3c:22:d2:a6:92:a7:
11:e1:eb:07
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAY3kxFU5PApSobcMoqNEdqx3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMjI2MDkzNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGMwNmZkMDE1ZjMzZTI3OWE0ZTRiOWI5NWY2NTMxMjM2M2U1OTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4V3Gxva3N5p6IbzjExQ0oL3zuun
J35mSI9cLXf1WLT2ve823RQpqrqQhUqCI/b9iJ1U+MoKDMAZhuwnsUkk/UHZdzQt
ANLT+MVXdrleyLw/7eT8EgXDvCAOq3pq2DGif80A7wGp7CU/cH3IKvaNxFuMIOeI
A7xTOC2XrgnelE2sElzQaV48EIcoiXZCIS/R/Jhuxa8g2pKiFXhxcbBfc7Q0ARiN
49Z3onqnXVGCArAQN0yuFqPTtaU+MJ50KDptMThuLeTUK5iqWmXDjKtk8RZiodBD
cvaRAZWxnYkPiWnt1TI1EaLZmwzfF2KvKrKxY4gcT1YsmuWijzmf/obmNwIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFDjAb9AV8z4nmk5Lm5X2UxI2PlkmMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvT01CdjBCWHpQaWVhVGt1YmxmWlRFalktV1NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAMB8vwME
AMF8BQMEAMF8BwMEAMF8ywMEAMJXFgMEAMJXIAMEAMJXjgMEAMJXqQMEAMJXyQME
AMJX9QMEAMOFBgMEAMOFGQMEAMOFSAMEAMOFTgMEAMOFVQMEAMOFwAMEANTAAQME
ANTBDjANBgkqhkiG9w0BAQsFAAOCAQEAikqRz+YKWUHxsuxp7jTQS8vawv0uW8GJ
2z2y37Sf62gl9u/HjlTT9UG5SLec8XyUWGTEJqDjUB5zbx2QS9YbmFprrzSo9Nig
AG3OZDUXTL8fIQmYnomDrRSqnPDLBZ4TYO8DLmXJ+kcy5fcG9fyLoDLDDYlywhPo
3fm9BjhryIl6VpnqHOOfbEk+bUXsJoenQ5THWdsWlI/m3uvMtdkZ1H096RBUA5z2
sPe8JjsmLam65gwMStHvOVVTpwcIoxevSwRhH34DiE2CL89mDZOtAMXHFNPgfPV8
8ogv9gwEsxof+ugfXpPmy1fT6YB02JRIvfFiLt0oPCLSppKnEeHrBw==
-----END CERTIFICATE-----
Generated at Mon Feb 26 22:58:30 2024 by rpki-client on console-ams.rpki-client.org