Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b1fsZVCHUccSyC5nkRjTV90s9NI.roa
File: b1fsZVCHUccSyC5nkRjTV90s9NI.roa (raw, json)
Hash identifier: wnA9JSQmeMrhVhC4PQJa6UH6jHrEh8By4Wzool+YSWw=
Subject key identifier: 6F:57:EC:65:50:87:51:C7:12:C8:2E:67:91:18:D3:57:DD:2C:F4:D2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018E4805D39A898DAA1D498ADF67FF36E615
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b1fsZVCHUccSyC5nkRjTV90s9NI.roa
Signing time: Sat 16 Mar 2024 16:08:45 +0000
ROA not before: Sat 16 Mar 2024 16:08:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.7.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 18 Mar 2024 13:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:05:d3:9a:89:8d:aa:1d:49:8a:df:67:ff:36:e6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 16 16:08:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f57ec65508751c712c82e679118d357dd2cf4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:68:86:1c:b6:45:d8:e2:ff:70:a3:ef:92:78:
42:09:05:ba:ed:ed:43:82:c5:e1:60:7e:ba:ce:66:
e6:a6:cb:da:e1:c4:40:10:1a:49:57:0a:c2:0a:9d:
d8:b1:d4:ce:b8:4e:f3:70:09:0b:b3:6d:04:ab:3c:
22:c4:b3:80:d2:37:14:7f:84:41:93:ea:21:4e:38:
5f:cb:19:d5:5b:62:33:0a:5d:e7:ae:d4:cf:ca:f0:
f3:cf:a1:07:01:54:2f:38:bc:c5:18:d9:73:9b:d5:
4d:66:91:b9:94:86:2f:f7:f6:8a:1d:e9:86:09:f2:
b1:f6:72:95:8f:54:b3:55:e7:3c:ec:4d:82:a1:88:
89:77:a9:7c:ce:98:93:05:59:62:25:17:d1:f2:74:
60:fa:e5:20:e0:7d:27:34:09:4a:2a:96:1f:62:fe:
78:d5:b2:bf:8f:cf:cd:b4:a5:3e:c7:48:b9:28:45:
97:9f:b5:99:f5:29:b6:1b:5f:a1:38:30:fb:31:1e:
28:25:99:0f:c7:31:b1:12:18:a9:94:ea:5d:d8:e9:
e9:89:b5:5a:d8:82:32:59:e7:cf:76:65:18:2a:50:
47:a3:86:c1:ec:39:0c:ee:94:28:ed:c2:e6:79:82:
b4:8d:85:c4:bb:8c:08:d9:4a:3b:36:9b:0b:0a:d7:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:57:EC:65:50:87:51:C7:12:C8:2E:67:91:18:D3:57:DD:2C:F4:D2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b1fsZVCHUccSyC5nkRjTV90s9NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
194.87.168.0/23
194.87.245.0/24
195.133.25.0/24
212.192.1.0/24
212.192.208.0/24
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
1e:5c:6e:4c:a7:a6:63:d8:ea:5b:38:bf:78:6c:74:4b:13:74:
94:73:51:fb:44:06:0d:d3:d6:6a:5c:90:7c:55:92:70:73:32:
cc:b3:6a:1e:9f:8b:be:4c:02:d2:29:80:44:51:a7:83:e4:ba:
65:62:45:b7:bd:aa:36:02:03:6b:3f:34:58:33:1b:8c:2d:ee:
bf:97:cc:1f:2b:5e:d9:e9:a2:ac:4a:43:cb:63:03:83:2a:6d:
6e:dd:2f:aa:24:78:d7:9e:c3:d9:14:66:e3:51:01:d0:c4:41:
5b:e6:53:46:8c:fa:b6:31:91:86:19:5c:21:41:35:b9:e0:f1:
a7:d6:7c:9d:dc:c3:d1:fd:d3:30:2a:9e:43:9e:6a:84:78:1b:
48:8f:f9:d3:4d:06:65:05:94:cd:b5:65:6b:0d:97:72:ca:1c:
58:c7:00:0b:7e:d8:ce:80:48:ac:32:58:a2:85:52:30:8a:5e:
a9:bc:20:1b:b8:65:4c:aa:3f:69:26:c1:a4:b8:43:4b:5e:24:
4d:7d:2d:5d:8f:66:1c:0d:20:3b:de:ea:4d:86:95:7e:cd:bf:
ed:09:10:2a:9f:ee:a8:00:85:2c:38:22:b0:40:fd:64:02:d6:
c3:24:9a:bb:0f:3d:41:3f:21:45:30:f8:94:fa:99:07:8e:d9:
02:77:30:1a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAY5IBdOaiY2qHUmK32f/NuYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMzE2MTYwODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjU3ZWM2NTUwODc1MWM3MTJjODJlNjc5MTE4ZDM1N2RkMmNmNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWiGHLZF2OL/cKPvknhCCQW67e1D
gsXhYH66zmbmpsva4cRAEBpJVwrCCp3YsdTOuE7zcAkLs20EqzwixLOA0jcUf4RB
k+ohTjhfyxnVW2IzCl3nrtTPyvDzz6EHAVQvOLzFGNlzm9VNZpG5lIYv9/aKHemG
CfKx9nKVj1SzVec87E2CoYiJd6l8zpiTBVliJRfR8nRg+uUg4H0nNAlKKpYfYv54
1bK/j8/NtKU+x0i5KEWXn7WZ9Sm2G1+hODD7MR4oJZkPxzGxEhiplOpd2OnpibVa
2IIyWefPdmUYKlBHo4bB7DkM7pQo7cLmeYK0jYXEu4wI2Uo7NpsLCtfS8QIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFG9X7GVQh1HHEsguZ5EY01fdLPTSMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvYjFmc1pWQ0hVY2NTeUM1bmtSalRWOTBzOU5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQAwXwHAwQB
wleoAwQAwlf1AwQAw4UZAwQA1MABAwQA1MDQMBQEAgACMA4DBQMqAVfAAwUDKgz/
QDANBgkqhkiG9w0BAQsFAAOCAQEAHlxuTKemY9jqWzi/eGx0SxN0lHNR+0QGDdPW
alyQfFWScHMyzLNqHp+LvkwC0imARFGng+S6ZWJFt72qNgIDaz80WDMbjC3uv5fM
Hyte2emirEpDy2MDgyptbt0vqiR4157D2RRm41EB0MRBW+ZTRoz6tjGRhhlcIUE1
ueDxp9Z8ndzD0f3TMCqeQ55qhHgbSI/5000GZQWUzbVlaw2XcsocWMcAC37YzoBI
rDJYooVSMIpeqbwgG7hlTKo/aSbBpLhDS14kTX0tXY9mHA0gO97qTYaVfs2/7QkQ
Kp/uqACFLDgisED9ZALWwySauw89QT8hRTD4lPqZB47ZAncwGg==
-----END CERTIFICATE-----
Generated at Mon Mar 18 17:05:22 2024 by rpki-client on console-fra.rpki-client.org