Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uj81W9MwvFq5T1M8EI9Z9GK-tQ0.roa
File: uj81W9MwvFq5T1M8EI9Z9GK-tQ0.roa (raw, json)
Hash identifier: jpXl3xe0Ntf01l67gMF6RjrXBc4yjaYrWfB/7BbywHA=
Subject key identifier: BA:3F:35:5B:D3:30:BC:5A:B9:4F:53:3C:10:8F:59:F4:62:BE:B5:0D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A27B998BE88ED5CA03025F4042F3AD99D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uj81W9MwvFq5T1M8EI9Z9GK-tQ0.roa
Signing time: Thu 24 Aug 2023 13:26:29 +0000
ROA not before: Thu 24 Aug 2023 13:26:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 193.124.4.0/24 maxlen: 24
195.133.78.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.20.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 12:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:b9:98:be:88:ed:5c:a0:30:25:f4:04:2f:3a:d9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 24 13:26:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba3f355bd330bc5ab94f533c108f59f462beb50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:69:31:ae:81:ad:ab:45:00:dc:55:99:d9:
d1:fb:7f:7d:d7:8a:6a:00:ce:cc:d5:c5:f7:95:da:
96:89:a3:b0:1b:38:e9:63:11:7b:f7:6c:21:31:aa:
2e:44:bb:ea:15:a2:af:05:7d:9f:a6:f3:d0:41:81:
cc:ca:5c:74:06:a0:af:be:fa:e9:24:cd:68:78:06:
ba:c2:bf:09:67:6d:59:18:1f:c7:3c:8b:1e:e0:20:
3f:d7:11:fb:20:e9:33:94:b1:b0:5e:bb:c8:ae:24:
98:08:07:bc:10:bc:e0:a7:62:14:35:23:a8:50:42:
d9:8e:b1:14:f4:3e:22:e5:14:86:c4:db:0b:64:ea:
66:c9:50:09:b2:f5:a3:66:f2:2e:32:2e:6f:a7:af:
53:8e:3a:80:3e:e7:70:48:1c:91:f9:65:1b:24:34:
fd:0d:47:e5:74:66:2a:04:f8:b7:8a:68:6b:5d:d8:
b9:c7:ce:15:97:54:4c:4e:b9:9a:38:7d:81:2f:23:
bb:c1:9e:cc:35:5f:3f:12:fb:b8:66:cf:14:37:6b:
53:c5:37:a9:de:59:6a:d2:2f:6c:7c:2e:e6:77:df:
49:64:37:59:12:20:89:0a:6a:90:4b:65:a4:5f:6b:
1c:d5:2e:f1:22:05:a1:a2:71:64:22:e5:4d:0a:8e:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3F:35:5B:D3:30:BC:5A:B9:4F:53:3C:10:8F:59:F4:62:BE:B5:0D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uj81W9MwvFq5T1M8EI9Z9GK-tQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.4.0/24
194.87.2.0/24
194.87.20.0/24
194.87.30.0/24
194.87.44.0/24
194.87.221.0/24
194.135.105.0/24
195.58.34.0/24
195.58.58.0/24
195.133.35.0/24
195.133.78.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:d7:3f:77:19:7d:61:5f:f3:5a:6f:45:e6:9a:57:92:d5:c4:
3e:4f:c2:f4:a7:a9:40:7a:f1:a4:b1:4d:88:53:a5:81:9f:47:
d2:09:c1:52:fd:63:e6:3c:0b:fb:51:bf:e3:80:25:f8:00:5a:
da:15:cc:86:c1:71:db:e9:35:e3:f5:d9:bd:52:95:2a:4c:e6:
75:b8:a6:39:7f:c7:c9:3b:de:4f:38:ac:2f:b0:ad:d9:63:d9:
db:29:c4:be:d2:be:19:eb:28:09:f2:8f:33:54:18:8f:a2:5e:
10:67:a5:75:9a:7c:5b:71:98:19:7e:46:58:de:84:c1:f2:18:
01:40:19:be:40:9d:22:fa:f4:2a:1e:8f:42:65:fb:cd:f7:a1:
52:ca:ce:75:da:0e:97:1c:db:55:82:5e:a8:e9:d9:6c:55:28:
eb:a8:3c:49:6e:c7:cb:61:b4:f2:4b:67:3d:76:27:40:8a:f6:
1a:ef:78:aa:7b:8e:d0:39:f4:cc:9f:f3:ca:4d:c1:3b:4a:b0:
94:04:d3:79:ea:67:76:04:34:3a:3c:93:7e:f6:b6:f0:ea:2f:
a5:30:1b:51:f2:7a:b1:e4:71:bd:ec:70:d3:8b:f9:a4:e2:5f:
38:2d:83:93:a9:fc:44:dc:ff:59:3b:e3:02:b2:57:98:67:91:
42:7c:7d:2d
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYonuZi+iO1coDAl9AQvOtmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwODI0MTMyNjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTNmMzU1YmQzMzBiYzVhYjk0ZjUzM2MxMDhmNTlmNDYyYmViNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ddpMa6BratFANxVmdnR+39914pq
AM7M1cX3ldqWiaOwGzjpYxF792whMaouRLvqFaKvBX2fpvPQQYHMylx0BqCvvvrp
JM1oeAa6wr8JZ21ZGB/HPIse4CA/1xH7IOkzlLGwXrvIriSYCAe8ELzgp2IUNSOo
UELZjrEU9D4i5RSGxNsLZOpmyVAJsvWjZvIuMi5vp69TjjqAPudwSByR+WUbJDT9
DUfldGYqBPi3imhrXdi5x84Vl1RMTrmaOH2BLyO7wZ7MNV8/Evu4Zs8UN2tTxTep
3llq0i9sfC7md99JZDdZEiCJCmqQS2WkX2sc1S7xIgWhonFkIuVNCo57wQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFLo/NVvTMLxauU9TPBCPWfRivrUNMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvdWo4MVc5TXd2RnE1VDFNOEVJOVo5R0stdFEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAwXwEAwQA
wlcCAwQAwlcUAwQAwlceAwQAwlcsAwQAwlfdAwQAwodpAwQAwzoiAwQAwzo6AwQA
w4UjAwQBw4VOMA0GCSqGSIb3DQEBCwUAA4IBAQBN1z93GX1hX/Nab0XmmleS1cQ+
T8L0p6lAevGksU2IU6WBn0fSCcFS/WPmPAv7Ub/jgCX4AFraFcyGwXHb6TXj9dm9
UpUqTOZ1uKY5f8fJO95POKwvsK3ZY9nbKcS+0r4Z6ygJ8o8zVBiPol4QZ6V1mnxb
cZgZfkZY3oTB8hgBQBm+QJ0i+vQqHo9CZfvN96FSys512g6XHNtVgl6o6dlsVSjr
qDxJbsfLYbTyS2c9didAivYa73iqe47QOfTMn/PKTcE7SrCUBNN56md2BDQ6PJN+
9rbw6i+lMBtR8nqx5HG97HDTi/mk4l84LYOTqfxE3P9ZO+MCsleYZ5FCfH0t
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:49 2024 by rpki-client on console-ams.rpki-client.org