Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uJIyj3eZA9f3ARyWhX6OL-qAQMg.roa
File: uJIyj3eZA9f3ARyWhX6OL-qAQMg.roa (raw, json)
Hash identifier: aUnQrjhR/yL9W48qwkepT+m+YOU4ZtywNqMAVYLAupQ=
Subject key identifier: B8:92:32:8F:77:99:03:D7:F7:01:1C:96:85:7E:8E:2F:EA:80:40:C8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D7D09E03BB4E95C7F02A9D0D7CA89D46B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uJIyj3eZA9f3ARyWhX6OL-qAQMg.roa
Signing time: Tue 06 Feb 2024 06:10:15 +0000
ROA not before: Tue 06 Feb 2024 06:10:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
195.133.2.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
2a0b:7300::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 07 Feb 2024 16:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:09:e0:3b:b4:e9:5c:7f:02:a9:d0:d7:ca:89:d4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 6 06:10:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b892328f779903d7f7011c96857e8e2fea8040c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:61:67:0f:30:19:b9:06:81:6a:63:c7:d1:44:
0b:98:b7:96:d0:0a:55:1b:1c:18:4a:4c:6c:de:7b:
ec:eb:3d:73:6d:66:6c:56:98:6a:e0:ef:d4:c8:67:
cc:f3:94:e5:df:c2:f3:79:f3:03:7f:47:e7:bf:5c:
88:24:a2:1f:eb:bf:82:37:ac:73:f5:92:95:d2:68:
29:7f:3c:fc:9e:55:57:a7:a4:4b:73:6b:c6:1a:46:
d6:78:d3:77:67:6c:97:0e:b4:de:ef:cf:9c:29:a0:
6c:7f:8a:d9:fd:e6:c6:30:cd:ae:f9:73:94:83:ff:
c3:1f:55:88:d2:e0:05:10:0b:f6:a7:8e:e7:ff:22:
ee:7a:1c:83:d0:91:dc:d7:75:83:be:63:80:3c:d0:
0f:02:ef:20:ee:91:bb:53:29:82:ca:b2:55:bd:a2:
8a:66:e4:cc:74:9b:95:e5:ee:f5:72:a2:f7:6d:0a:
84:6b:6d:d0:de:de:d2:f9:d8:08:12:f2:29:4b:5b:
c2:c2:a6:18:5e:70:d0:9d:76:7d:3f:88:f6:b4:16:
d7:31:fc:49:f3:e5:f1:1c:59:6a:29:6d:d4:70:e4:
c7:35:71:4a:4a:c0:5d:25:2f:b0:65:0e:0b:7c:12:
23:25:3d:f7:78:a5:e9:63:38:ab:ef:71:d6:8f:18:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:92:32:8F:77:99:03:D7:F7:01:1C:96:85:7E:8E:2F:EA:80:40:C8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uJIyj3eZA9f3ARyWhX6OL-qAQMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.5.0/24
193.124.7.0/24
193.124.95.0/24
193.124.200.0/24
193.124.202.0/24
193.124.207.0/24
194.87.22.0/24
194.87.32.0/24
194.87.81.0/24
194.87.149.0/24
194.87.170.0/24
194.87.172.0/24
194.87.201.0/24
194.135.18.0/24
195.58.54.0/24
195.58.60.0/24
195.133.2.0/24
195.133.25.0/24
195.133.72.0/24
195.133.85.0/24
195.133.192.0/24
212.192.1.0/24
212.193.13.0/24
IPv6:
2a0b:7300::/29
Signature Algorithm: sha256WithRSAEncryption
49:ed:41:05:ad:15:f2:ac:2c:3a:ed:59:54:08:b5:84:80:91:
50:61:82:f9:f0:8f:a9:af:c0:64:81:31:0c:0b:e2:3c:f9:fa:
91:53:66:5d:93:88:41:d9:1f:38:7a:3e:53:85:92:f3:db:8a:
05:73:2d:de:87:d8:14:85:ab:77:59:fb:b6:d0:08:d5:2a:02:
4b:d0:6c:62:ee:f2:fa:14:22:5e:20:8a:0b:1c:c5:65:2c:4b:
93:53:fe:4f:26:32:8e:a3:ae:56:63:80:af:13:65:fc:b1:44:
5b:38:41:dd:ae:7b:e9:3f:c1:2d:3a:12:f0:c0:fe:d0:37:32:
32:f5:e2:2f:40:61:d0:e6:71:3a:e8:c5:f9:33:bb:34:4e:9d:
e5:26:bf:0a:48:f9:e5:64:ed:1d:d4:c3:ad:7d:df:bf:01:6d:
1e:0f:33:4a:e3:c8:96:53:09:63:19:82:3c:f6:68:cb:8f:a0:
b5:8c:9b:80:b7:bb:c1:44:ac:61:8d:13:c0:43:33:53:98:e4:
62:6f:0e:09:53:6e:95:b7:14:f1:68:60:03:94:71:24:9b:56:
1d:83:a3:13:09:d8:d8:93:80:68:55:d2:9a:a9:11:7c:bf:b0:
71:11:37:38:ab:d3:d6:56:55:1c:1f:e7:22:07:dd:2e:66:30:
67:78:cf:6f
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAY19CeA7tOlcfwKp0NfKidRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMjA2MDYxMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODkyMzI4Zjc3OTkwM2Q3ZjcwMTFjOTY4NTdlOGUyZmVhODA0MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WFnDzAZuQaBamPH0UQLmLeW0ApV
GxwYSkxs3nvs6z1zbWZsVphq4O/UyGfM85Tl38LzefMDf0fnv1yIJKIf67+CN6xz
9ZKV0mgpfzz8nlVXp6RLc2vGGkbWeNN3Z2yXDrTe78+cKaBsf4rZ/ebGMM2u+XOU
g//DH1WI0uAFEAv2p47n/yLuehyD0JHc13WDvmOAPNAPAu8g7pG7UymCyrJVvaKK
ZuTMdJuV5e71cqL3bQqEa23Q3t7S+dgIEvIpS1vCwqYYXnDQnXZ9P4j2tBbXMfxJ
8+XxHFlqKW3UcOTHNXFKSsBdJS+wZQ4LfBIjJT33eKXpYzir73HWjxjr+QIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFLiSMo93mQPX9wEcloV+ji/qgEDIMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvdUpJeWozZVpBOWYzQVJ5V2hYNk9MLXFBUU1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG2BggrBgEFBQcBBwEB/wSBpjCBozCBkQQCAAEwgYoDBADB
fAUDBADBfAcDBADBfF8DBADBfMgDBADBfMoDBADBfM8DBADCVxYDBADCVyADBADC
V1EDBADCV5UDBADCV6oDBADCV6wDBADCV8kDBADChxIDBADDOjYDBADDOjwDBADD
hQIDBADDhRkDBADDhUgDBADDhVUDBADDhcADBADUwAEDBADUwQ0wDQQCAAIwBwMF
AyoLcwAwDQYJKoZIhvcNAQELBQADggEBAEntQQWtFfKsLDrtWVQItYSAkVBhgvnw
j6mvwGSBMQwL4jz5+pFTZl2TiEHZHzh6PlOFkvPbigVzLd6H2BSFq3dZ+7bQCNUq
AkvQbGLu8voUIl4gigscxWUsS5NT/k8mMo6jrlZjgK8TZfyxRFs4Qd2ue+k/wS06
EvDA/tA3MjL14i9AYdDmcTroxfkzuzROneUmvwpI+eVk7R3Uw619378BbR4PM0rj
yJZTCWMZgjz2aMuPoLWMm4C3u8FErGGNE8BDM1OY5GJvDglTbpW3FPFoYAOUcSSb
Vh2DoxMJ2NiTgGhV0pqpEXy/sHERNzir09ZWVRwf5yIH3S5mMGd4z28=
-----END CERTIFICATE-----
Generated at Wed Feb 7 20:26:36 2024 by rpki-client on console-fra.rpki-client.org