Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S7cLW9XpVA_UV8BSY6EH6QuLv28.roa
File: S7cLW9XpVA_UV8BSY6EH6QuLv28.roa (raw, json)
Hash identifier: G35N3CHZXsS9g9Yiz1OXe9qiGAOSDZWOsiZ7BXb7IyQ=
Subject key identifier: 4B:B7:0B:5B:D5:E9:54:0F:D4:57:C0:52:63:A1:07:E9:0B:8B:BF:6F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DE679F4ED05D0C0F65D06927AD46E958F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S7cLW9XpVA_UV8BSY6EH6QuLv28.roa
Signing time: Mon 26 Feb 2024 17:32:48 +0000
ROA not before: Mon 26 Feb 2024 17:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 192.124.191.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.78.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 15:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:79:f4:ed:05:d0:c0:f6:5d:06:92:7a:d4:6e:95:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 26 17:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bb70b5bd5e9540fd457c05263a107e90b8bbf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:bf:4f:5e:cd:81:ca:3b:6b:61:67:7e:01:
2e:57:c4:ab:e7:88:ad:64:82:5d:52:31:ac:e8:f0:
95:9e:fe:c6:2e:9f:4e:dc:ba:3f:e2:21:f8:6d:b2:
25:1b:0b:24:c5:79:12:e0:f6:3c:15:ee:68:33:69:
59:3b:a2:87:d4:8d:67:b0:bf:2d:f5:e5:91:b3:7b:
ac:6a:eb:cf:c6:d1:81:58:ad:7c:cd:63:00:1b:50:
bd:c2:aa:d8:1a:47:cd:0c:eb:0d:8f:c8:f3:bb:62:
2e:4d:63:69:bd:2c:ef:6e:8e:dc:b8:07:31:3c:92:
4a:00:93:36:d2:fe:ea:76:14:77:c8:09:7f:c1:76:
42:30:c1:ee:85:ba:77:52:58:39:21:c0:a5:7c:f8:
34:39:68:ee:23:f2:7c:1f:a7:93:46:9a:9f:b6:54:
38:5b:75:55:d4:4f:12:5f:d8:4e:0a:c8:12:7a:3c:
1d:fd:b0:01:33:e5:63:7c:3b:1d:1a:12:f1:84:42:
1d:82:9a:1d:73:5a:15:6f:21:87:1b:d4:28:3d:94:
89:17:94:8c:0d:25:d8:57:1f:87:19:6f:b3:97:6e:
0c:13:c4:ba:5a:86:22:a8:83:7a:2a:0b:d9:f8:cd:
79:1a:b0:23:77:73:6e:e3:96:99:d0:f3:e5:b4:ba:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B7:0B:5B:D5:E9:54:0F:D4:57:C0:52:63:A1:07:E9:0B:8B:BF:6F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/S7cLW9XpVA_UV8BSY6EH6QuLv28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.191.0/24
193.124.5.0/24
193.124.7.0/24
193.124.203.0/24
194.87.22.0/24
194.87.32.0/24
194.87.142.0/24
194.87.169.0/24
194.87.245.0/24
195.133.6.0/24
195.133.25.0/24
195.133.72.0/24
195.133.78.0/24
195.133.85.0/24
195.133.192.0/24
212.192.1.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
73:4a:12:18:f0:9f:d4:9a:48:68:fb:16:1c:c5:59:a3:27:f1:
d4:25:e3:1d:08:c1:db:bb:3a:a8:52:64:f1:a1:8a:3e:d3:c2:
5d:69:78:69:92:1e:04:58:48:65:90:c4:85:cf:23:af:89:58:
07:2b:08:c1:c8:25:3b:5a:42:ba:1b:e1:e0:8d:58:e4:eb:a3:
fb:21:80:5f:60:d2:d9:8b:60:5e:d7:c8:45:ef:d8:55:61:6e:
37:24:3f:45:0c:b2:a8:c7:27:74:e7:25:67:f5:ad:09:d1:b0:
2b:3e:e9:55:c1:c3:6a:e4:86:ca:81:42:a2:8d:e0:c4:8b:b2:
7d:cb:98:a8:45:d8:b4:70:5a:a4:96:b5:55:77:e5:77:c5:fe:
68:13:7c:32:4a:a7:4d:23:3d:0b:ab:74:b1:4b:3b:d6:11:28:
84:45:27:3d:bc:83:02:fd:96:99:51:56:96:36:bd:0f:eb:ca:
d7:8b:d3:9e:85:e5:17:6d:c8:d8:8c:a6:44:c2:32:0c:e1:ba:
f3:78:01:39:9c:6e:8d:be:2d:98:c3:43:a3:d5:73:61:c5:18:
87:c4:ef:b9:72:d5:9a:76:10:cf:18:75:9c:1b:aa:43:27:15:
9a:35:e3:54:81:ed:57:54:df:06:80:17:be:0a:15:89:4f:05:
ca:de:00:2a
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAY3mefTtBdDA9l0GknrUbpWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMjI2MTczMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmI3MGI1YmQ1ZTk1NDBmZDQ1N2MwNTI2M2ExMDdlOTBiOGJiZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaC/T17Ngco7a2FnfgEuV8Sr54it
ZIJdUjGs6PCVnv7GLp9O3Lo/4iH4bbIlGwskxXkS4PY8Fe5oM2lZO6KH1I1nsL8t
9eWRs3usauvPxtGBWK18zWMAG1C9wqrYGkfNDOsNj8jzu2IuTWNpvSzvbo7cuAcx
PJJKAJM20v7qdhR3yAl/wXZCMMHuhbp3Ulg5IcClfPg0OWjuI/J8H6eTRpqftlQ4
W3VV1E8SX9hOCsgSejwd/bABM+VjfDsdGhLxhEIdgpodc1oVbyGHG9QoPZSJF5SM
DSXYVx+HGW+zl24ME8S6WoYiqIN6KgvZ+M15GrAjd3Nu45aZ0PPltLq95QIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFEu3C1vV6VQP1FfAUmOhB+kLi79vMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvUzdjTFc5WHBWQV9VVjhCU1k2RUg2UXVMdjI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAwHy/AwQA
wXwFAwQAwXwHAwQAwXzLAwQAwlcWAwQAwlcgAwQAwleOAwQAwlepAwQAwlf1AwQA
w4UGAwQAw4UZAwQAw4VIAwQAw4VOAwQAw4VVAwQAw4XAAwQA1MABAwQA1MEOMA0G
CSqGSIb3DQEBCwUAA4IBAQBzShIY8J/Umkho+xYcxVmjJ/HUJeMdCMHbuzqoUmTx
oYo+08JdaXhpkh4EWEhlkMSFzyOviVgHKwjByCU7WkK6G+HgjVjk66P7IYBfYNLZ
i2Be18hF79hVYW43JD9FDLKoxyd05yVn9a0J0bArPulVwcNq5IbKgUKijeDEi7J9
y5ioRdi0cFqklrVVd+V3xf5oE3wySqdNIz0Lq3SxSzvWESiERSc9vIMC/ZaZUVaW
Nr0P68rXi9OeheUXbcjYjKZEwjIM4brzeAE5nG6Nvi2Yw0Oj1XNhxRiHxO+5ctWa
dhDPGHWcG6pDJxWaNeNUge1XVN8GgBe+ChWJTwXK3gAq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:16 2024 by rpki-client on console-fra.rpki-client.org