Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xw98Og4L1o38Q9tyN7d0Xo656Mk.roa
File: Xw98Og4L1o38Q9tyN7d0Xo656Mk.roa (raw, json)
Hash identifier: jlQur2CSaZ4Z/qlGPOAggcmbJwSQADbWwytMgSq5egI=
Subject key identifier: 5F:0F:7C:3A:0E:0B:D6:8D:FC:43:DB:72:37:B7:74:5E:8E:B9:E8:C9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185ED3074ABD382A59E7948806672FAA5BA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xw98Og4L1o38Q9tyN7d0Xo656Mk.roa
Signing time: Thu 26 Jan 2023 08:27:33 +0000
ROA not before: Thu 26 Jan 2023 08:27:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jan 2023 12:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:30:74:ab:d3:82:a5:9e:79:48:80:66:72:fa:a5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 26 08:27:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f0f7c3a0e0bd68dfc43db7237b7745e8eb9e8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:88:df:6b:99:6c:75:50:eb:9a:fd:0e:dd:
2b:9c:d4:2e:84:d9:b1:33:b5:e9:ab:b7:e1:3a:2d:
6b:8b:10:d5:cb:de:49:d1:72:78:43:d3:0e:14:14:
9a:1d:64:0f:dd:09:8a:32:c2:34:3a:c7:2c:fb:7a:
f4:3c:ad:ca:95:d3:25:7f:89:b3:03:5c:58:02:00:
74:0f:d6:71:26:6d:15:9a:9a:04:b3:f2:7d:07:ae:
c2:7a:9f:1e:fc:ac:bf:ad:b4:37:6c:57:fa:3b:3d:
9a:6a:d0:e3:9e:89:4e:1c:58:39:c6:1b:13:8a:69:
a5:6e:1c:d6:b4:bc:4b:02:f4:aa:20:cd:09:1b:35:
7f:77:03:18:96:5c:cf:f4:c5:9f:bc:a5:82:a3:22:
2e:fe:51:3d:fc:da:47:fc:b9:d1:a4:c2:3b:46:74:
f3:f3:2c:ce:50:24:cd:ac:5a:d0:04:7c:83:48:9a:
66:8f:4c:db:ec:ec:eb:69:80:52:2f:8f:56:b3:8b:
9a:a5:c0:0b:10:93:ff:0b:9d:7e:de:3e:4e:64:c3:
db:e6:d8:08:55:31:47:7f:00:12:18:8e:d4:03:ee:
4c:a2:9f:62:a6:40:d9:7e:2c:c2:ed:9f:d6:c3:40:
d3:88:d7:b2:38:5b:76:00:b9:c4:50:81:a5:51:30:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:7C:3A:0E:0B:D6:8D:FC:43:DB:72:37:B7:74:5E:8E:B9:E8:C9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xw98Og4L1o38Q9tyN7d0Xo656Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.3.0/24
193.124.6.0/24
193.124.9.0/24
193.124.44.0/24
193.124.201.0/24
194.87.1.0/24
194.87.42.0/24
194.87.73.0/24
194.87.130.0/23
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/24
194.87.178.0/23
194.87.182.0/24
194.87.187.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.56.0/24
195.133.0.0/24
195.133.30.0/24
195.133.35.0/24
195.133.195.0/24
212.192.10.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
98:92:41:b5:39:d2:db:1b:86:2a:8f:d3:46:af:91:4d:f6:8e:
e7:70:d5:8f:96:f4:c8:0c:ab:33:bd:24:ac:7c:86:09:9d:6d:
70:6a:2a:6a:4d:4e:37:e0:16:54:35:0f:31:e4:11:b8:d1:a8:
5c:fb:ae:d0:6c:ed:e8:d2:a9:02:d7:17:ce:bf:7d:67:6b:ec:
c6:f5:29:e3:b8:fe:09:1c:91:b3:c9:b3:97:b1:9f:be:47:74:
8e:7b:be:62:de:af:43:41:90:2c:9d:7a:38:de:56:69:2b:f2:
08:be:18:32:25:71:2e:18:38:b8:2a:92:4a:f6:8b:63:79:49:
c1:d6:6e:53:14:21:21:2a:0d:ec:94:b1:0f:20:f4:96:4b:8d:
3a:50:15:88:7e:dd:75:b7:53:d8:2a:01:06:6a:db:b9:df:5d:
57:55:af:3c:ad:04:74:22:2f:41:f8:59:f3:a2:ba:e6:81:e2:
51:b7:aa:88:74:cf:1e:db:84:28:e1:95:31:5e:59:7e:68:58:
10:5a:6f:df:50:dc:22:9f:b4:e8:fe:04:85:42:66:28:83:bc:
a9:f8:94:0f:77:ef:a1:b4:4d:ee:59:7a:00:94:5f:a5:8b:64:
b5:58:3d:73:5c:06:a6:9d:3a:fe:90:92:b5:aa:4f:4d:b3:eb:
ba:16:e2:b4
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAYXtMHSr04KlnnlIgGZy+qW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTI2MDgyNzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjBmN2MzYTBlMGJkNjhkZmM0M2RiNzIzN2I3NzQ1ZThlYjllOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQSI32uZbHVQ65r9Dt0rnNQuhNmx
M7Xpq7fhOi1rixDVy95J0XJ4Q9MOFBSaHWQP3QmKMsI0Oscs+3r0PK3KldMlf4mz
A1xYAgB0D9ZxJm0VmpoEs/J9B67Cep8e/Ky/rbQ3bFf6Oz2aatDjnolOHFg5xhsT
immlbhzWtLxLAvSqIM0JGzV/dwMYllzP9MWfvKWCoyIu/lE9/NpH/LnRpMI7RnTz
8yzOUCTNrFrQBHyDSJpmj0zb7OzraYBSL49Ws4uapcALEJP/C51+3j5OZMPb5tgI
VTFHfwASGI7UA+5Mop9ipkDZfizC7Z/Ww0DTiNeyOFt2ALnEUIGlUTBtVQIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFF8PfDoOC9aN/EPbcje3dF6OuejJMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvWHc5OE9nNEwxbzM4UTl0eU43ZDBYbzY1Nk1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHPBggrBgEFBQcBBwEB/wSBvzCBvDCBuQQCAAEwgbIDBADB
fAMDBADBfAYDBADBfAkDBADBfCwDBADBfMkDBADCVwEDBADCVyoDBADCV0kDBAHC
V4IDBADCV6YDBADCV6gwDAMEAcJXqgMEAMJXrAMEAMJXsAMEAcJXsgMEAMJXtgME
AMJXuwMEAMKHEgMEAMKHFzAMAwQAwzojAwQAwzokAwQAwzoyAwQAwzo4AwQAw4UA
AwQAw4UeAwQAw4UjAwQAw4XDAwQA1MAKAwQA1MAfMA0GCSqGSIb3DQEBCwUAA4IB
AQCYkkG1OdLbG4Yqj9NGr5FN9o7ncNWPlvTIDKszvSSsfIYJnW1waipqTU434BZU
NQ8x5BG40ahc+67QbO3o0qkC1xfOv31na+zG9SnjuP4JHJGzybOXsZ++R3SOe75i
3q9DQZAsnXo43lZpK/IIvhgyJXEuGDi4KpJK9otjeUnB1m5TFCEhKg3slLEPIPSW
S406UBWIft11t1PYKgEGatu5311XVa88rQR0Ii9B+FnzorrmgeJRt6qIdM8e24Qo
4ZUxXll+aFgQWm/fUNwin7To/gSFQmYog7yp+JQPd++htE3uWXoAlF+li2S1WD1z
XAamnTr+kJK1qk9Ns+u6FuK0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:19 2024 by rpki-client on console-fra.rpki-client.org