Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/snZYTXKo4OmOdudIVQRNg4aa3iA.roa
File: snZYTXKo4OmOdudIVQRNg4aa3iA.roa (raw, json)
Hash identifier: Wo5jC1hEVKNIQcCPvJAtLBjq3XRHF0yzperQz9liGf8=
Subject key identifier: B2:76:58:4D:72:A8:E0:E9:8E:76:E7:48:55:04:4D:83:86:9A:DE:20
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185A1BDE77514EB1F4DD774F3A9E69D178C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/snZYTXKo4OmOdudIVQRNg4aa3iA.roa
Signing time: Wed 11 Jan 2023 16:50:55 +0000
ROA not before: Wed 11 Jan 2023 16:50:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 194.87.205.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.139.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jan 2023 09:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:bd:e7:75:14:eb:1f:4d:d7:74:f3:a9:e6:9d:17:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 11 16:50:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b276584d72a8e0e98e76e74855044d83869ade20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:87:25:33:71:e6:1a:02:98:f5:2f:65:fb:88:
ca:99:2a:b2:cc:f4:c4:80:b5:03:9f:ac:e1:fd:58:
4a:e6:0c:0f:03:1c:e6:16:17:0c:f5:a5:0d:3f:c3:
b9:39:a9:05:97:f4:59:c7:45:a6:68:b5:b3:77:56:
f4:b9:51:6e:6a:19:37:dc:31:47:d2:55:b4:43:9d:
0c:72:d2:a9:ad:a5:bb:92:a3:4b:3c:7a:3e:cf:b4:
21:d3:30:f4:7a:a3:5c:51:14:a1:d9:ca:18:2b:7a:
e9:99:a1:65:a3:cd:40:12:e3:ad:fa:74:42:b4:85:
8d:ac:c8:92:9f:e2:a0:d2:3e:48:01:d5:ed:08:a2:
33:15:0e:98:35:a9:89:31:dd:1e:27:ce:ef:53:1a:
21:e3:b4:80:52:f8:19:a5:0a:f3:b0:f4:3a:ae:30:
7a:59:90:7b:11:a5:83:9a:2d:69:33:25:79:32:d8:
18:e1:57:fa:e6:e2:a5:b9:b2:d6:9d:f0:5b:36:27:
a5:4f:90:61:ed:80:8e:a8:77:5d:ab:08:e6:44:57:
f6:9d:ad:4f:73:f2:73:c4:5d:a9:6b:cb:d0:36:9e:
8c:96:9c:1f:23:90:97:83:df:a9:b1:5c:8c:33:ab:
6e:80:b1:c2:f9:8f:28:59:7b:c7:5d:0a:59:c3:cf:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:58:4D:72:A8:E0:E9:8E:76:E7:48:55:04:4D:83:86:9A:DE:20
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/snZYTXKo4OmOdudIVQRNg4aa3iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
192.124.180.0/24
192.124.183.0/24
193.124.46.0/24
193.124.90.0/24
193.124.200.0/24
194.58.40.0/24
194.87.2.0/24
194.87.10.0/24
194.87.122.0/24
194.87.124.0/23
194.87.139.0/24
194.87.170.0/24
194.87.205.0/24
194.87.233.0/24
194.87.252.0/24
195.58.51.0/24
195.133.76.0/24
195.133.193.0/24
212.192.1.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
25:87:a4:65:79:12:e3:9e:fa:bc:94:b4:f6:01:39:a2:39:03:
80:c1:8a:5e:8a:1a:44:c6:20:30:02:32:81:7f:7f:aa:3e:51:
c4:3f:d8:e0:4b:4f:24:a7:68:95:1d:c6:47:48:c3:c9:5e:02:
a2:c7:85:68:fc:c5:21:8b:3f:a4:26:e1:71:11:34:5f:51:40:
52:c2:07:23:84:91:41:0f:4b:15:8f:f2:7d:28:94:c3:8f:c2:
bb:d0:35:f7:b9:85:9b:0c:69:8d:f8:d4:93:d0:06:96:9c:5f:
a5:a9:3b:e5:f7:cf:4d:4b:32:e6:ab:86:aa:ca:1f:31:f5:93:
e6:53:cc:d9:04:81:97:0b:60:f8:1b:b4:71:e0:82:9f:14:33:
1c:83:9f:2d:30:56:00:ef:9c:ac:a1:3c:0a:35:f1:b9:c6:17:
1f:57:85:96:bd:84:f8:29:56:fd:de:a2:a1:8b:2e:c7:ba:e6:
00:92:95:50:4b:de:2d:d6:0d:38:52:6a:bb:70:e1:25:ff:6b:
53:6d:95:08:d8:72:34:10:6a:52:a0:29:11:48:54:ed:f3:75:
34:e7:13:83:0e:dd:41:d3:62:2c:a5:09:92:ae:fc:4f:b9:a9:
fa:34:a8:60:6c:c2:15:ad:b5:49:d9:d1:d9:74:78:54:9d:32:
76:91:b6:e7
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYWhved1FOsfTdd086nmnReMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTExMTY1MDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjc2NTg0ZDcyYThlMGU5OGU3NmU3NDg1NTA0NGQ4Mzg2OWFkZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoclM3HmGgKY9S9l+4jKmSqyzPTE
gLUDn6zh/VhK5gwPAxzmFhcM9aUNP8O5OakFl/RZx0WmaLWzd1b0uVFuahk33DFH
0lW0Q50MctKpraW7kqNLPHo+z7Qh0zD0eqNcURSh2coYK3rpmaFlo81AEuOt+nRC
tIWNrMiSn+Kg0j5IAdXtCKIzFQ6YNamJMd0eJ87vUxoh47SAUvgZpQrzsPQ6rjB6
WZB7EaWDmi1pMyV5MtgY4Vf65uKlubLWnfBbNielT5Bh7YCOqHddqwjmRFf2na1P
c/JzxF2pa8vQNp6MlpwfI5CXg9+psVyMM6tugLHC+Y8oWXvHXQpZw8810wIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFLJ2WE1yqODpjnbnSFUETYOGmt4gMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvc25aWVRYS280T21PZHVkSVZRUk5nNGFhM2lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAD5M
4gMEAMB8tAMEAMB8twMEAMF8LgMEAMF8WgMEAMF8yAMEAMI6KAMEAMJXAgMEAMJX
CgMEAMJXegMEAcJXfAMEAMJXiwMEAMJXqgMEAMJXzQMEAMJX6QMEAMJX/AMEAMM6
MwMEAMOFTAMEAMOFwQMEANTAAQMEANTACTANBgkqhkiG9w0BAQsFAAOCAQEAJYek
ZXkS4576vJS09gE5ojkDgMGKXooaRMYgMAIygX9/qj5RxD/Y4EtPJKdolR3GR0jD
yV4CoseFaPzFIYs/pCbhcRE0X1FAUsIHI4SRQQ9LFY/yfSiUw4/Cu9A197mFmwxp
jfjUk9AGlpxfpak75ffPTUsy5quGqsofMfWT5lPM2QSBlwtg+Bu0ceCCnxQzHIOf
LTBWAO+crKE8CjXxucYXH1eFlr2E+ClW/d6ioYsux7rmAJKVUEveLdYNOFJqu3Dh
Jf9rU22VCNhyNBBqUqApEUhU7fN1NOcTgw7dQdNiLKUJkq78T7mp+jSoYGzCFa21
SdnR2XR4VJ0ydpG25w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:28 2024 by rpki-client on console-fra.rpki-client.org