Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/U9nfymnkCYA9Ec8gD6JfPSGe3WA.roa
File: U9nfymnkCYA9Ec8gD6JfPSGe3WA.roa (raw, json)
Hash identifier: dbVJzzK9fYEogKjb0BT15wwtp6usNEfNn+sdovYZpYc=
Subject key identifier: 53:D9:DF:CA:69:E4:09:80:3D:11:CF:20:0F:A2:5F:3D:21:9E:DD:60
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AA76CA6F82F9DA4DFFE2DC15018A752BF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/U9nfymnkCYA9Ec8gD6JfPSGe3WA.roa
Signing time: Mon 18 Sep 2023 08:33:50 +0000
ROA not before: Mon 18 Sep 2023 08:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 193.124.4.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.252.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
212.192.253.0/24 maxlen: 24
212.192.254.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:6c:a6:f8:2f:9d:a4:df:fe:2d:c1:50:18:a7:52:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 18 08:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53d9dfca69e409803d11cf200fa25f3d219edd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:01:13:f9:ee:84:d4:8b:77:e9:53:29:ff:
9e:b7:74:f5:69:02:87:71:d4:c8:aa:ec:85:c4:1b:
ea:1a:a8:9a:44:4c:4a:70:af:d1:80:20:fe:d0:23:
50:35:57:61:b9:95:6f:f9:f1:2b:c1:61:9e:b1:c8:
35:99:ef:cd:c2:75:02:e7:23:5e:ed:5d:2c:36:b2:
04:b2:f5:9d:d0:6d:e7:49:db:6c:bc:be:23:a6:ea:
3f:f1:cb:56:a4:83:c7:e6:6e:04:ba:df:ad:95:aa:
30:29:26:91:c0:4f:99:aa:55:88:23:5a:d4:df:c0:
3c:24:17:f7:02:04:77:9e:d0:81:16:1f:6f:74:14:
52:80:c1:e7:4b:5b:a7:63:97:12:6f:99:8f:8f:8e:
4e:55:1c:b3:3a:df:69:24:06:52:e4:0e:91:86:05:
6e:ad:4e:3f:bc:fe:7a:d7:4a:76:7f:ce:c4:24:4a:
af:e2:b7:17:0d:73:4e:b2:6b:0e:a8:cc:e7:6e:de:
d8:48:05:ee:d5:ab:02:4f:cd:b6:4c:62:ee:d2:a8:
89:4d:f3:8c:35:23:e5:81:e1:be:67:47:4b:f8:49:
d1:8d:7a:27:62:a4:e1:00:76:76:03:a3:27:ea:de:
43:15:37:7e:33:8e:4f:c8:2c:bb:34:0c:fc:a2:65:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D9:DF:CA:69:E4:09:80:3D:11:CF:20:0F:A2:5F:3D:21:9E:DD:60
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/U9nfymnkCYA9Ec8gD6JfPSGe3WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.4.0/23
194.87.30.0/24
194.87.44.0/24
194.87.142.0/23
194.87.221.0/24
195.133.94.0/24
212.192.212.0/24
212.192.215.0/24
212.192.248.0/24
212.192.252.0-212.192.254.255
Signature Algorithm: sha256WithRSAEncryption
8c:ef:57:00:41:a4:84:b5:62:bc:6b:e9:37:41:a8:5c:0d:5b:
7b:26:d4:08:d7:fb:3a:5e:57:10:77:2f:94:13:c3:c5:72:cf:
9d:05:20:15:0c:e6:73:a6:7f:e6:ad:21:9d:44:2f:46:d2:da:
d3:49:4a:97:a3:55:70:ed:ad:81:b7:42:88:d9:e5:89:b3:e0:
6e:b7:4e:d5:82:f8:9a:a3:e2:74:bc:51:f3:77:18:5b:ab:da:
53:8e:84:00:a2:85:5e:16:15:bd:84:a3:18:27:9c:fa:49:55:
b5:42:bb:79:fd:15:18:ca:16:8c:dd:86:93:dd:a9:cf:e5:66:
48:ce:42:1f:01:7a:00:90:c7:26:b5:79:05:8e:c7:ab:1d:f2:
20:fc:7d:64:13:b3:de:02:15:97:5f:71:5a:88:2e:c9:f6:3d:
8c:dc:f8:8b:34:7d:0e:a1:42:66:1b:0f:a8:5d:b4:52:63:f9:
ea:ae:dd:3d:23:23:45:a9:53:66:42:c4:e0:4b:97:83:e0:1a:
b6:aa:33:9a:3e:98:7f:65:39:70:12:15:66:cc:f5:9b:64:fa:
83:4f:83:eb:16:51:80:e7:16:57:62:89:15:56:0f:a1:5f:04:
bd:b1:80:b0:ef:29:93:cb:45:9a:12:33:ac:ee:9d:65:cb:a2:
b8:0a:64:95
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAYqnbKb4L52k3/4twVAYp1K/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwOTE4MDgzMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2Q5ZGZjYTY5ZTQwOTgwM2QxMWNmMjAwZmEyNWYzZDIxOWVkZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuIBE/nuhNSLd+lTKf+et3T1aQKH
cdTIquyFxBvqGqiaRExKcK/RgCD+0CNQNVdhuZVv+fErwWGescg1me/NwnUC5yNe
7V0sNrIEsvWd0G3nSdtsvL4jpuo/8ctWpIPH5m4Eut+tlaowKSaRwE+ZqlWII1rU
38A8JBf3AgR3ntCBFh9vdBRSgMHnS1unY5cSb5mPj45OVRyzOt9pJAZS5A6RhgVu
rU4/vP5610p2f87EJEqv4rcXDXNOsmsOqMznbt7YSAXu1asCT822TGLu0qiJTfOM
NSPlgeG+Z0dL+EnRjXonYqThAHZ2A6Mn6t5DFTd+M45PyCy7NAz8omVjXwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFFPZ38pp5AmAPRHPIA+iXz0hnt1gMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVTluZnltbmtDWUE5RWM4Z0Q2SmZQU0dlM1dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQBwXwEAwQA
wlceAwQAwlcsAwQBwleOAwQAwlfdAwQAw4VeAwQA1MDUAwQA1MDXAwQA1MD4MAwD
BALUwPwDBADUwP4wDQYJKoZIhvcNAQELBQADggEBAIzvVwBBpIS1Yrxr6TdBqFwN
W3sm1AjX+zpeVxB3L5QTw8Vyz50FIBUM5nOmf+atIZ1EL0bS2tNJSpejVXDtrYG3
QojZ5Ymz4G63TtWC+Jqj4nS8UfN3GFur2lOOhACihV4WFb2EoxgnnPpJVbVCu3n9
FRjKFozdhpPdqc/lZkjOQh8BegCQxya1eQWOx6sd8iD8fWQTs94CFZdfcVqILsn2
PYzc+Is0fQ6hQmYbD6hdtFJj+equ3T0jI0WpU2ZCxOBLl4PgGraqM5o+mH9lOXAS
FWbM9Ztk+oNPg+sWUYDnFldiiRVWD6FfBL2xgLDvKZPLRZoSM6zunWXLorgKZJU=
-----END CERTIFICATE-----
Generated at Mon Sep 18 09:29:23 2023 by rpki-client on console-ams.rpki-client.org