Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T_V_OfuJlIOw4EPx2amW9IYwuhE.roa
File: T_V_OfuJlIOw4EPx2amW9IYwuhE.roa (raw, json)
Hash identifier: +Eeci9XjPbRZJ71rIUHskb7yVSw+CC0NPKuZhgsR4Yw=
Subject key identifier: 4F:F5:7F:39:FB:89:94:83:B0:E0:43:F1:D9:A9:96:F4:86:30:BA:11
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01909ADA9401C67CBD33375C7AE96009B6C2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T_V_OfuJlIOw4EPx2amW9IYwuhE.roa
Signing time: Wed 10 Jul 2024 04:15:34 +0000
ROA not before: Wed 10 Jul 2024 04:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 194.87.246.0/24 maxlen: 24
195.58.39.0/24 maxlen: 24
195.133.50.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
212.193.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 12:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9a:da:94:01:c6:7c:bd:33:37:5c:7a:e9:60:09:b6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 10 04:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ff57f39fb899483b0e043f1d9a996f48630ba11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:32:df:55:5c:b3:ec:21:74:94:1c:8b:59:97:
a6:54:91:57:7e:e4:44:8d:99:21:ec:a7:0f:0e:3c:
87:b8:14:a0:9a:20:8e:a5:ad:d5:45:3c:22:16:e8:
ef:85:8a:2e:1c:d3:5f:d1:4b:4a:c7:75:78:6c:40:
58:63:2c:a0:55:4a:71:d6:ad:5b:73:5b:75:f8:cd:
3c:2a:b8:aa:e3:a6:84:3c:b7:5a:43:da:c8:b4:8c:
7b:25:07:67:38:cb:9a:74:55:8c:b7:3e:89:5f:82:
30:a3:6f:73:2f:65:c0:c3:90:33:eb:cd:c5:9a:6d:
56:35:38:41:8e:c0:07:82:be:f7:59:cd:ef:75:e1:
f8:04:d0:31:b5:a1:65:0f:cb:02:f6:cd:0c:49:13:
43:a7:b9:c0:6c:40:21:5c:57:7c:4e:6a:6d:1a:9c:
de:e0:d8:1d:61:8b:60:18:75:8c:dd:ae:c2:45:f3:
2d:2a:a7:1c:aa:d6:77:fa:f9:bf:08:d3:50:64:4c:
e9:2f:4f:60:61:76:d9:1d:a9:c4:85:c5:3d:c4:6d:
0b:58:20:44:8c:fa:50:45:f6:ba:b0:e4:45:d1:05:
64:db:e3:00:97:cb:63:27:f5:7a:f2:3c:0c:4a:0e:
96:80:8e:39:8e:ee:08:58:cd:6c:21:4c:20:d8:bb:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F5:7F:39:FB:89:94:83:B0:E0:43:F1:D9:A9:96:F4:86:30:BA:11
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T_V_OfuJlIOw4EPx2amW9IYwuhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.246.0/24
195.58.39.0/24
195.133.50.0/24
195.133.76.0/24
212.193.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:74:59:0f:1f:0f:eb:c5:b6:a2:73:53:8d:fc:8c:e3:fd:52:
ed:2c:ff:46:39:b0:11:92:55:e6:e9:08:9c:85:8a:e0:65:51:
16:87:97:b2:79:ff:a1:d6:c3:c8:7d:fb:1e:19:2e:02:b0:b4:
02:2f:8a:55:54:40:d2:b7:50:10:04:5b:4a:b0:db:c4:1e:f6:
69:15:49:2d:c7:c1:8a:6f:ef:74:f6:eb:5e:89:40:48:b9:d7:
68:55:e0:83:85:90:65:9a:82:07:0c:b6:c1:2d:47:29:64:2a:
f8:d2:f1:29:89:44:96:04:e7:5c:4d:d0:88:44:dd:30:9b:9c:
28:fe:c0:db:5d:7e:e8:18:e2:39:49:26:62:27:3a:ce:ff:16:
f0:9c:18:8d:3a:95:55:61:47:97:e8:7c:aa:8f:eb:d7:15:b7:
13:ac:4a:45:b8:bc:8e:d2:3c:c6:d4:a9:82:e7:cd:3c:77:3c:
bd:9a:d3:b7:f1:29:c2:95:d6:9c:07:af:e8:dc:ae:07:72:dc:
90:22:a6:f7:30:71:cd:71:ab:0d:06:28:79:02:af:3e:ff:69:
2f:d6:37:95:a7:6b:74:83:bb:3a:b1:66:b2:45:67:8c:19:82:
a9:1c:e2:aa:54:80:9a:db:95:1d:6c:31:cf:6a:b7:a3:af:4a:
f5:dd:38:67
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZCa2pQBxny9MzdceulgCbbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwNzEwMDQxNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmY1N2YzOWZiODk5NDgzYjBlMDQzZjFkOWE5OTZmNDg2MzBiYTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TLfVVyz7CF0lByLWZemVJFXfuRE
jZkh7KcPDjyHuBSgmiCOpa3VRTwiFujvhYouHNNf0UtKx3V4bEBYYyygVUpx1q1b
c1t1+M08Kriq46aEPLdaQ9rItIx7JQdnOMuadFWMtz6JX4Iwo29zL2XAw5Az683F
mm1WNThBjsAHgr73Wc3vdeH4BNAxtaFlD8sC9s0MSRNDp7nAbEAhXFd8TmptGpze
4NgdYYtgGHWM3a7CRfMtKqccqtZ3+vm/CNNQZEzpL09gYXbZHanEhcU9xG0LWCBE
jPpQRfa6sORF0QVk2+MAl8tjJ/V68jwMSg6WgI45ju4IWM1sIUwg2LtUGwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFE/1fzn7iZSDsOBD8dmplvSGMLoRMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVF9WX09mdUpsSU93NEVQeDJhbVc5SVl3dWhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwlf2AwQA
wzonAwQAw4UyAwQAw4VMAwQA1MEEMA0GCSqGSIb3DQEBCwUAA4IBAQB/dFkPHw/r
xbaic1ON/Izj/VLtLP9GObARklXm6QichYrgZVEWh5eyef+h1sPIffseGS4CsLQC
L4pVVEDSt1AQBFtKsNvEHvZpFUktx8GKb+909uteiUBIuddoVeCDhZBlmoIHDLbB
LUcpZCr40vEpiUSWBOdcTdCIRN0wm5wo/sDbXX7oGOI5SSZiJzrO/xbwnBiNOpVV
YUeX6Hyqj+vXFbcTrEpFuLyO0jzG1KmC5808dzy9mtO38SnCldacB6/o3K4HctyQ
Iqb3MHHNcasNBih5Aq8+/2kv1jeVp2t0g7s6sWayRWeMGYKpHOKqVICa25UdbDHP
arejr0r13Thn
-----END CERTIFICATE-----
Generated at Wed Jul 10 13:42:03 2024 by rpki-client on console-fra.rpki-client.org