Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YEwpKUjVv0okGKNv6f2i91FF9jk.roa
File: YEwpKUjVv0okGKNv6f2i91FF9jk.roa (raw, json)
Hash identifier: LSe9++T8KKdHk2kFtqOCXijK2u/uWisvOHTAQbTesgM=
Subject key identifier: 60:4C:29:29:48:D5:BF:4A:24:18:A3:6F:E9:FD:A2:F7:51:45:F6:39
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CF336C2A29F357994B90C283A0F81AF17
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YEwpKUjVv0okGKNv6f2i91FF9jk.roa
Signing time: Wed 10 Jan 2024 11:51:41 +0000
ROA not before: Wed 10 Jan 2024 11:51:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200482
IP address blocks: 212.193.12.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.28.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:36:c2:a2:9f:35:79:94:b9:0c:28:3a:0f:81:af:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 10 11:51:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=604c292948d5bf4a2418a36fe9fda2f75145f639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:02:87:ba:69:4f:f6:cd:9d:68:e8:17:bc:
7d:26:4f:9f:60:95:97:e4:8c:f8:5d:83:82:66:24:
ce:f8:89:61:c1:27:cb:62:b4:a5:cf:d0:29:07:4a:
1f:0a:37:40:e3:26:b1:a9:e8:49:76:4d:e3:f9:a5:
18:28:d1:3a:a8:7a:f6:f4:d0:18:7c:31:75:82:d6:
21:18:d2:19:18:1a:91:da:e0:8d:1f:32:1f:e6:37:
ef:ea:2d:7b:79:83:d2:35:c5:19:9b:35:31:9a:26:
21:67:ee:58:97:ba:e2:ef:00:ee:7d:c3:3e:b9:cf:
93:9d:ef:d9:ff:af:84:b6:a7:ee:10:1f:92:e7:c5:
d3:0a:71:81:54:f3:e1:48:72:c5:d0:9b:03:79:d7:
b7:3b:31:f0:27:13:b5:a7:f7:39:6d:1f:e7:77:44:
6d:99:2b:34:d2:cb:58:c5:43:88:a4:de:97:e4:ce:
ee:6b:c3:61:43:ff:fc:47:df:21:38:53:63:07:c2:
a9:ed:de:06:5b:92:d0:2a:98:c7:05:b5:70:f1:f1:
c7:06:b6:94:fb:8a:9c:04:4a:bb:af:14:99:e7:26:
a6:db:04:83:54:05:b7:ca:2b:17:92:1f:12:cb:e4:
a7:2e:3b:22:cc:06:82:26:c5:22:a0:35:1b:e3:63:
1c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4C:29:29:48:D5:BF:4A:24:18:A3:6F:E9:FD:A2:F7:51:45:F6:39
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YEwpKUjVv0okGKNv6f2i91FF9jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.169.0/24
195.133.15.0/24
195.133.28.0/24
195.133.81.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
64:32:4d:66:ad:d5:ed:6b:af:33:6a:b4:6d:5c:53:36:38:2d:
f9:30:30:34:a3:62:e0:2d:6a:77:b8:ed:e3:e0:7e:07:1c:69:
5c:89:5f:37:79:00:46:25:6e:a6:f1:bc:62:ef:cb:a0:f7:22:
f3:92:9b:03:2e:4c:3e:26:50:01:42:f8:66:50:2c:52:3c:01:
d1:2f:23:65:4b:f9:d3:f6:19:94:4d:40:c1:0f:9d:86:3c:8d:
ed:dd:66:e6:30:e8:ca:64:81:d9:fa:61:92:6b:bc:b4:4a:18:
df:82:54:0d:0a:24:0a:a9:f8:76:e7:c2:a2:7f:9f:8c:01:35:
18:a0:0b:10:a9:0a:05:fe:29:f1:7e:99:ea:24:82:7b:79:d6:
b2:85:68:c5:ff:e3:e7:16:19:6a:1f:be:16:3f:3b:df:13:86:
f0:18:e6:a4:4b:fd:8c:d2:11:64:2a:09:b1:0e:85:e8:49:34:
81:ef:d4:94:2a:47:a8:3a:fe:01:7f:49:bb:b8:b4:b4:60:82:
c6:c1:a7:dd:fc:ea:fe:99:75:7a:09:2b:36:3f:de:83:72:a8:
f6:6c:e9:ae:a1:1d:af:d2:d8:d3:71:1d:b6:ce:eb:86:59:32:
f4:24:91:fb:27:1d:33:f5:65:ed:3c:6f:46:9c:42:82:a9:ec:
0b:eb:d1:b4
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzzNsKinzV5lLkMKDoPga8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTEwMTE1MTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDRjMjkyOTQ4ZDViZjRhMjQxOGEzNmZlOWZkYTJmNzUxNDVmNjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAQCh7ppT/bNnWjoF7x9Jk+fYJWX
5Iz4XYOCZiTO+IlhwSfLYrSlz9ApB0ofCjdA4yaxqehJdk3j+aUYKNE6qHr29NAY
fDF1gtYhGNIZGBqR2uCNHzIf5jfv6i17eYPSNcUZmzUxmiYhZ+5Yl7ri7wDufcM+
uc+Tne/Z/6+EtqfuEB+S58XTCnGBVPPhSHLF0JsDede3OzHwJxO1p/c5bR/nd0Rt
mSs00stYxUOIpN6X5M7ua8NhQ//8R98hOFNjB8Kp7d4GW5LQKpjHBbVw8fHHBraU
+4qcBEq7rxSZ5yam2wSDVAW3yisXkh8Sy+SnLjsizAaCJsUioDUb42McSQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGBMKSlI1b9KJBijb+n9ovdRRfY5MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvWUV3cEtValZ2MG9rR0tOdjZmMmk5MUZGOWprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwlepAwQA
w4UPAwQAw4UcAwQAw4VRAwQA1MEMMA0GCSqGSIb3DQEBCwUAA4IBAQBkMk1mrdXt
a68zarRtXFM2OC35MDA0o2LgLWp3uO3j4H4HHGlciV83eQBGJW6m8bxi78ug9yLz
kpsDLkw+JlABQvhmUCxSPAHRLyNlS/nT9hmUTUDBD52GPI3t3WbmMOjKZIHZ+mGS
a7y0ShjfglQNCiQKqfh258Kif5+MATUYoAsQqQoF/inxfpnqJIJ7edayhWjF/+Pn
FhlqH74WPzvfE4bwGOakS/2M0hFkKgmxDoXoSTSB79SUKkeoOv4Bf0m7uLS0YILG
wafd/Or+mXV6CSs2P96Dcqj2bOmuoR2v0tjTcR22zuuGWTL0JJH7Jx0z9WXtPG9G
nEKCqewL69G0
-----END CERTIFICATE-----
Generated at Sat Jan 20 08:13:05 2024 by rpki-client on console-ams.rpki-client.org