Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aFXAgTvIEE1PvL2uOI49eG7JFSo.roa
File: aFXAgTvIEE1PvL2uOI49eG7JFSo.roa (raw, json)
Hash identifier: rzSukXSoD3Lpu4tlrbeCHOhE405mxD/z7CvEpXLK/e0=
Subject key identifier: 68:55:C0:81:3B:C8:10:4D:4F:BC:BD:AE:38:8E:3D:78:6E:C9:15:2A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DFAD34F2474809F662B8DFED1B95A3106
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aFXAgTvIEE1PvL2uOI49eG7JFSo.roa
Signing time: Fri 01 Mar 2024 16:22:48 +0000
ROA not before: Fri 01 Mar 2024 16:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 192.124.191.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.78.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 05:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:d3:4f:24:74:80:9f:66:2b:8d:fe:d1:b9:5a:31:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 1 16:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6855c0813bc8104d4fbcbdae388e3d786ec9152a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d3:4c:34:b9:d1:0f:66:19:ee:ad:0d:dc:ff:
c3:d7:59:64:74:4c:47:8a:f6:d0:57:ed:ef:64:12:
3b:44:67:8b:4a:d8:15:66:a7:59:26:e6:f5:2f:97:
f0:6b:1f:50:1e:e0:df:8f:4b:35:00:20:d2:a4:5c:
b7:12:d9:07:92:1a:43:9d:82:38:f1:e3:29:71:97:
c2:77:d5:27:64:75:13:0b:e8:4d:ea:44:e6:c7:2a:
65:5d:2c:53:b4:cb:cb:bb:ee:54:2f:29:56:15:67:
cf:97:8c:32:b6:26:03:9d:9d:28:e7:ad:d0:9b:68:
d5:8a:6e:35:5e:a5:d8:f6:18:7b:92:71:31:15:ce:
3d:ee:76:cd:95:fb:50:e0:95:b2:8e:6d:57:47:ea:
d0:ee:17:d2:f9:9b:c9:7f:b9:99:b7:61:57:28:f9:
e3:b1:87:31:1d:94:52:c4:a1:92:a1:2b:67:8e:db:
d6:ce:d4:db:d4:9d:0d:fa:8a:27:76:e1:25:20:2e:
7e:dd:0f:8c:51:d9:5a:77:db:3f:33:32:ec:11:d4:
62:c9:bf:8f:a2:44:9b:20:dd:01:1a:a0:70:7f:e9:
e1:2a:92:33:de:f4:60:f4:c3:bd:d8:75:00:c3:f7:
60:eb:0f:68:61:5c:1b:c2:d1:11:7c:33:b0:7e:f3:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:55:C0:81:3B:C8:10:4D:4F:BC:BD:AE:38:8E:3D:78:6E:C9:15:2A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aFXAgTvIEE1PvL2uOI49eG7JFSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.191.0/24
193.124.5.0/24
193.124.7.0/24
193.124.203.0/24
194.87.22.0/24
194.87.32.0/24
194.87.142.0/24
194.87.169.0/24
194.87.245.0/24
195.133.6.0/24
195.133.25.0/24
195.133.72.0/24
195.133.78.0/24
195.133.85.0/24
195.133.192.0/24
212.192.1.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:71:3c:83:1e:ec:ea:19:b5:17:f5:ba:a4:43:c2:60:e9:7c:
5b:24:0d:e4:3f:dd:07:5f:9c:1c:c5:4e:ba:1e:24:29:72:80:
c8:21:15:c7:cd:6f:03:f6:c8:04:91:28:00:8f:9a:16:90:d0:
a7:ab:26:af:90:b6:57:c8:92:58:9c:8d:dc:e1:3b:f7:2f:03:
fb:23:1e:f3:b5:24:52:47:b2:17:e9:f3:6e:5d:0a:d1:aa:b5:
3e:ce:ad:65:3d:fa:dc:19:b3:db:b5:10:81:d0:dc:eb:3a:b2:
6c:e3:da:cf:b7:5f:04:f3:4c:05:10:64:06:64:d4:75:1a:05:
a0:17:7a:42:f8:d5:6d:49:98:62:73:61:3f:36:13:62:57:04:
93:b7:96:77:2a:ae:38:90:19:46:60:8f:5f:d8:60:5c:ad:39:
02:9e:8b:12:4e:cc:d1:fb:5e:8a:2b:0f:e4:e2:24:34:5e:ce:
da:03:85:a1:e6:d2:ef:dc:36:33:a9:66:82:c7:6e:2c:dd:7e:
51:39:a4:07:2f:0e:76:27:3d:77:2b:87:cf:d1:a9:fa:8c:88:
c3:a1:96:1f:c6:29:1c:5f:ca:00:1f:7d:bd:ea:7a:3e:3b:a1:
ab:58:8a:bb:63:47:ae:ce:96:5c:d2:60:be:6c:9b:d4:5a:41:
e9:66:56:e2
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAY36008kdICfZiuN/tG5WjEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMzAxMTYyMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODU1YzA4MTNiYzgxMDRkNGZiY2JkYWUzODhlM2Q3ODZlYzkxNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNNMNLnRD2YZ7q0N3P/D11lkdExH
ivbQV+3vZBI7RGeLStgVZqdZJub1L5fwax9QHuDfj0s1ACDSpFy3EtkHkhpDnYI4
8eMpcZfCd9UnZHUTC+hN6kTmxyplXSxTtMvLu+5ULylWFWfPl4wytiYDnZ0o563Q
m2jVim41XqXY9hh7knExFc497nbNlftQ4JWyjm1XR+rQ7hfS+ZvJf7mZt2FXKPnj
sYcxHZRSxKGSoStnjtvWztTb1J0N+oonduElIC5+3Q+MUdlad9s/MzLsEdRiyb+P
okSbIN0BGqBwf+nhKpIz3vRg9MO92HUAw/dg6w9oYVwbwtERfDOwfvNYLwIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFGhVwIE7yBBNT7y9rjiOPXhuyRUqMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvYUZYQWdUdklFRTFQdkwydU9JNDllRzdKRlNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAwHy/AwQA
wXwFAwQAwXwHAwQAwXzLAwQAwlcWAwQAwlcgAwQAwleOAwQAwlepAwQAwlf1AwQA
w4UGAwQAw4UZAwQAw4VIAwQAw4VOAwQAw4VVAwQAw4XAAwQA1MABAwQA1MEOMA0G
CSqGSIb3DQEBCwUAA4IBAQBvcTyDHuzqGbUX9bqkQ8Jg6XxbJA3kP90HX5wcxU66
HiQpcoDIIRXHzW8D9sgEkSgAj5oWkNCnqyavkLZXyJJYnI3c4Tv3LwP7Ix7ztSRS
R7IX6fNuXQrRqrU+zq1lPfrcGbPbtRCB0NzrOrJs49rPt18E80wFEGQGZNR1GgWg
F3pC+NVtSZhic2E/NhNiVwSTt5Z3Kq44kBlGYI9f2GBcrTkCnosSTszR+16KKw/k
4iQ0Xs7aA4Wh5tLv3DYzqWaCx24s3X5ROaQHLw52Jz13K4fP0an6jIjDoZYfxikc
X8oAH3296no+O6GrWIq7Y0euzpZc0mC+bJvUWkHpZlbi
-----END CERTIFICATE-----
Generated at Tue Mar 5 07:07:09 2024 by rpki-client on console-fra.rpki-client.org