Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OmKb0feNc8Z2prk091-sH-YGmGc.roa
File: OmKb0feNc8Z2prk091-sH-YGmGc.roa (raw, json)
Hash identifier: vgHNZH6gHq5jTWMghtWZPPXAPOte7ReuCsyR4RXq7iU=
Subject key identifier: 3A:62:9B:D1:F7:8D:73:C6:76:A6:B9:34:F7:5F:AC:1F:E6:06:98:67
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189CEB113D16EC317AF1AF6A53A3D40A91B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OmKb0feNc8Z2prk091-sH-YGmGc.roa
Signing time: Mon 07 Aug 2023 06:30:58 +0000
ROA not before: Mon 07 Aug 2023 06:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 194.87.3.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
194.87.188.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.86.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 12:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:b1:13:d1:6e:c3:17:af:1a:f6:a5:3a:3d:40:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 7 06:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a629bd1f78d73c676a6b934f75fac1fe6069867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:88:8c:dc:50:25:21:6b:c4:b2:9a:03:3c:
90:cc:26:1f:df:cb:d0:9f:48:42:30:96:38:12:d4:
33:ee:cc:36:1d:cc:d1:50:8b:87:eb:07:62:65:9d:
a4:c6:d8:0b:7d:6c:b7:1f:27:c3:5a:4e:d1:5d:76:
17:4e:50:f4:5f:7d:54:64:f5:7c:bc:be:1f:3b:61:
f8:f6:17:c3:50:7b:fb:2f:8d:c3:fe:36:74:a9:a8:
43:bc:c2:06:3e:c7:04:3b:bd:50:f5:b3:76:d8:09:
e9:b9:0f:e8:f8:f8:c3:7f:68:57:6f:69:1f:0a:df:
65:7a:f5:54:f4:0d:9a:69:a4:d2:21:d1:34:dd:3f:
5b:af:f0:63:e7:93:a4:84:59:74:e6:76:97:14:0d:
15:d5:2b:5a:bf:fd:68:4b:ad:f1:ec:bb:7b:5c:e0:
6d:f7:2e:ef:6e:86:af:b6:4a:3d:a9:a5:3f:d2:08:
85:8f:63:88:87:be:0d:9e:83:35:a7:61:20:df:7b:
b2:2a:4d:88:94:20:7b:33:11:e4:3d:11:e4:ef:95:
5f:9e:03:c1:03:e0:10:0c:fe:f3:d4:6b:1c:e0:b3:
ce:f3:b8:e2:84:55:3f:e4:6b:3b:c3:92:79:59:66:
0e:ca:4e:18:1f:ba:6d:a2:89:29:c2:29:be:4d:5f:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:62:9B:D1:F7:8D:73:C6:76:A6:B9:34:F7:5F:AC:1F:E6:06:98:67
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OmKb0feNc8Z2prk091-sH-YGmGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.3.0/24
194.87.16.0/24
194.87.34.0/24
194.87.42.0/24
194.87.86.0/24
194.87.91.0/24
194.87.104.0/24
194.87.117.0-194.87.120.255
194.87.176.0/23
194.87.188.0/24
195.58.61.0-195.58.62.255
212.192.8.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e1:a6:40:22:90:81:d1:e7:d3:87:dd:9f:e3:bb:c5:d7:57:
dc:cf:93:94:d4:ef:0d:86:b8:3f:4f:75:6e:54:b2:18:3a:05:
35:77:46:0b:54:de:c1:b6:40:3c:0f:31:e9:2c:d9:38:73:f4:
9a:38:43:c7:8d:a6:e5:f0:b7:1a:42:a1:57:0b:3c:e9:e7:31:
89:9f:36:b1:57:0d:da:ef:31:c4:4c:be:1d:de:91:0e:b3:95:
7b:c8:d8:38:c9:71:f8:08:30:07:3d:53:58:52:9a:8c:05:7d:
d4:37:06:29:b0:a0:1f:03:96:1b:25:fe:1f:97:86:d5:ed:68:
3f:12:41:8b:18:c9:9f:56:b5:08:cb:76:2e:68:a6:b1:47:b1:
a2:90:3e:5a:91:44:5e:dc:f7:1f:07:6f:fd:c5:bc:19:a5:f4:
c8:c1:1f:e0:0b:d6:aa:24:28:75:e4:92:09:ba:aa:df:94:09:
3a:15:f0:f5:03:4b:8c:e9:ec:58:c2:88:c9:12:c9:e2:13:86:
63:c6:2b:68:73:9e:01:08:4e:85:cc:74:09:7a:ff:86:4c:56:
e1:cc:c9:45:2c:b9:f2:ea:1a:e5:98:03:22:96:4f:f3:7a:c1:
78:dd:18:55:58:4d:8f:8d:3f:55:ad:ec:0d:5d:da:e1:77:49:
e6:d0:34:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgISAYnOsRPRbsMXrxr2pTo9QKkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwODA3MDYzMDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTYyOWJkMWY3OGQ3M2M2NzZhNmI5MzRmNzVmYWMxZmU2MDY5ODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uWIjNxQJSFrxLKaAzyQzCYf38vQ
n0hCMJY4EtQz7sw2HczRUIuH6wdiZZ2kxtgLfWy3HyfDWk7RXXYXTlD0X31UZPV8
vL4fO2H49hfDUHv7L43D/jZ0qahDvMIGPscEO71Q9bN22AnpuQ/o+PjDf2hXb2kf
Ct9levVU9A2aaaTSIdE03T9br/Bj55OkhFl05naXFA0V1Stav/1oS63x7Lt7XOBt
9y7vboavtko9qaU/0giFj2OIh74NnoM1p2Eg33uyKk2IlCB7MxHkPRHk75VfngPB
A+AQDP7z1Gsc4LPO87jihFU/5Gs7w5J5WWYOyk4YH7ptookpwim+TV8hawIDAQAB
o4ICWzCCAlcwHQYDVR0OBBYEFDpim9H3jXPGdqa5NPdfrB/mBphnMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvT21LYjBmZU5jOFoycHJrMDkxLXNILVlHbUdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQAwlcDAwQA
wlcQAwQAwlciAwQAwlcqAwQAwldWAwQAwldbAwQAwldoMAwDBADCV3UDBADCV3gD
BAHCV7ADBADCV7wwDAMEAMM6PQMEAMM6PgMEANTACDANBgkqhkiG9w0BAQsFAAOC
AQEAH+GmQCKQgdHn04fdn+O7xddX3M+TlNTvDYa4P091blSyGDoFNXdGC1TewbZA
PA8x6SzZOHP0mjhDx42m5fC3GkKhVws86ecxiZ82sVcN2u8xxEy+Hd6RDrOVe8jY
OMlx+AgwBz1TWFKajAV91DcGKbCgHwOWGyX+H5eG1e1oPxJBixjJn1a1CMt2Lmim
sUexopA+WpFEXtz3Hwdv/cW8GaX0yMEf4AvWqiQodeSSCbqq35QJOhXw9QNLjOns
WMKIyRLJ4hOGY8YraHOeAQhOhcx0CXr/hkxW4czJRSy58uoa5ZgDIpZP83rBeN0Y
VVhNj40/Va3sDV3a4XdJ5tA0pw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:15 2024 by rpki-client on console-fra.rpki-client.org