Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/X_d-i6zpAY1c_22cHze1I7pMOvI.roa
File: X_d-i6zpAY1c_22cHze1I7pMOvI.roa (raw, json)
Hash identifier: ebpvEdab/8kgbjh/PT2EdCiGNJVbrfdpjByQwMugYKA=
Subject key identifier: 5F:F7:7E:8B:AC:E9:01:8D:5C:FF:6D:9C:1F:37:B5:23:BA:4C:3A:F2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A8017B765B5A90294C8EEC8496C3E1C5F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/X_d-i6zpAY1c_22cHze1I7pMOvI.roa
Signing time: Sun 10 Sep 2023 17:15:52 +0000
ROA not before: Sun 10 Sep 2023 17:15:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
195.58.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Sep 2023 07:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:80:17:b7:65:b5:a9:02:94:c8:ee:c8:49:6c:3e:1c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 10 17:15:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ff77e8bace9018d5cff6d9c1f37b523ba4c3af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:e6:0b:23:3b:9a:ff:27:fc:39:27:30:f2:
71:16:fa:ad:60:4b:fa:fe:3b:99:4a:44:f6:e1:ef:
2a:7c:53:4e:52:64:01:bc:6e:5a:b4:80:be:ec:a5:
c8:81:5e:6b:bd:80:df:15:a2:b8:db:d7:21:4d:15:
98:b9:35:90:c9:2b:ea:8d:85:c6:81:8e:7a:46:dc:
26:ea:f6:ce:49:39:3b:80:5e:60:34:ec:b9:2c:f2:
39:3d:63:1c:3f:00:ed:a4:71:c0:8a:3a:31:8b:d7:
2b:3f:06:18:78:9d:ab:2f:80:20:9e:c4:22:f1:b0:
04:b5:da:cb:77:fa:55:b9:f8:91:79:1c:ee:6a:c5:
ac:eb:8a:7d:92:0c:22:2b:aa:b0:f4:78:5a:13:f2:
b5:6c:b3:af:ce:94:f1:66:ac:59:14:4f:76:45:06:
62:60:bf:0d:be:8c:15:ac:b0:1a:22:88:2b:b5:c8:
b8:8e:4c:21:72:ce:e0:c2:af:47:b9:fd:48:91:cf:
4e:a8:ce:0d:6d:c1:65:45:34:27:09:84:4c:50:39:
8f:c9:d2:d0:c8:8d:02:45:8f:2f:b5:69:72:b1:e2:
32:a1:4d:41:f2:e9:8e:7b:fd:ab:a6:3d:20:5e:41:
23:81:dc:5e:8f:70:18:a7:e3:50:8c:db:2e:2d:6e:
30:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F7:7E:8B:AC:E9:01:8D:5C:FF:6D:9C:1F:37:B5:23:BA:4C:3A:F2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/X_d-i6zpAY1c_22cHze1I7pMOvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.191.0/24
192.124.209.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.21.0/24
194.87.26.0/23
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:99:72:6e:0e:e3:1e:be:bb:9c:b0:d6:24:c9:7d:b3:e1:98:
30:52:c8:43:53:51:c4:af:67:05:74:1d:2c:8e:18:72:80:4d:
a3:f3:fd:5a:5a:b2:9e:ad:5d:10:24:ee:af:a0:e2:60:77:3f:
af:ab:5a:f0:69:ec:35:8f:f2:22:e0:48:16:f2:a8:03:48:00:
01:3d:62:b6:1a:7d:46:b8:83:46:99:a2:0b:3b:87:7c:06:85:
91:17:cc:fb:bf:83:14:ce:a1:70:6c:05:ca:d6:c7:a2:16:8c:
6e:2c:89:62:94:c2:74:75:73:2c:8e:9c:f1:14:bb:d2:f7:fb:
c3:9e:60:a7:f1:20:0a:46:02:16:e7:77:01:7f:33:ab:1f:82:
22:d9:c2:7f:46:91:46:e9:08:1f:13:c2:d2:7e:d7:30:8f:9a:
37:66:ee:41:b5:be:8b:0b:f6:1e:23:19:e0:76:b9:06:23:5a:
5e:d3:45:e2:46:0e:23:22:b3:65:78:04:ec:2e:c8:cf:2d:07:
18:f8:1c:e1:60:9b:b4:b4:19:08:10:54:be:82:05:fb:2d:27:
1e:5c:61:e9:ac:d8:22:75:4c:83:0a:a9:28:93:79:49:f7:09:
d1:4e:87:4c:4b:b4:c1:a8:59:64:a2:06:38:9c:1d:bc:1b:74:
3a:07:4b:42
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgISAYqAF7dltakClMjuyElsPhxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwOTEwMTcxNTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmY3N2U4YmFjZTkwMThkNWNmZjZkOWMxZjM3YjUyM2JhNGMzYWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth/mCyM7mv8n/DknMPJxFvqtYEv6
/juZSkT24e8qfFNOUmQBvG5atIC+7KXIgV5rvYDfFaK429chTRWYuTWQySvqjYXG
gY56Rtwm6vbOSTk7gF5gNOy5LPI5PWMcPwDtpHHAijoxi9crPwYYeJ2rL4AgnsQi
8bAEtdrLd/pVufiReRzuasWs64p9kgwiK6qw9HhaE/K1bLOvzpTxZqxZFE92RQZi
YL8NvowVrLAaIogrtci4jkwhcs7gwq9Huf1Ikc9OqM4NbcFlRTQnCYRMUDmPydLQ
yI0CRY8vtWlyseIyoU1B8umOe/2rpj0gXkEjgdxej3AYp+NQjNsuLW4w9QIDAQAB
o4IDDTCCAwkwHQYDVR0OBBYEFF/3fous6QGNXP9tnB83tSO6TDryMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvWF9kLWk2enBBWTFjXzIyY0h6ZTFJN3BNT3ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBIQYIKwYBBQUHAQcBAf8EggEQMIIBDDCCAQgEAgABMIIB
AAMEAMB8sgMEAMB8vwMEAMB80QMEAMF8EAMEAMF8UAMEAMF8hQMEAMF8yAMEAMI6
LwMEAMI6mgMEAMJXATAMAwQAwlcLAwQAwlcMAwQAwlcVAwQBwlcaAwQAwlcoAwQA
wlc4AwQAwldJAwQAwldTAwQAwldsAwQBwldyAwQAwld6AwQAwld8AwQBwleCMAwD
BADCV4UDBAPCV4ADBADCV5cDBADCV6gDBADCV7MDBADCV7sDBADCV74DBADCV8gD
BADCV94DBADDOiQDBADDOjYDBAHDOjoDBAHDOj4DBADDhQADBAHDhQYDBADDhR4D
BAHDhSgDBADDhUkDBAHDhVQwDQYJKoZIhvcNAQELBQADggEBAC6Zcm4O4x6+u5yw
1iTJfbPhmDBSyENTUcSvZwV0HSyOGHKATaPz/Vpasp6tXRAk7q+g4mB3P6+rWvBp
7DWP8iLgSBbyqANIAAE9YrYafUa4g0aZogs7h3wGhZEXzPu/gxTOoXBsBcrWx6IW
jG4siWKUwnR1cyyOnPEUu9L3+8OeYKfxIApGAhbndwF/M6sfgiLZwn9GkUbpCB8T
wtJ+1zCPmjdm7kG1vosL9h4jGeB2uQYjWl7TReJGDiMis2V4BOwuyM8tBxj4HOFg
m7S0GQgQVL6CBfstJx5cYems2CJ1TIMKqSiTeUn3CdFOh0xLtMGoWWSiBjicHbwb
dDoHS0I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:19 2024 by rpki-client on console-fra.rpki-client.org