Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Ce1YsRIc0zs6IWenjKgI1jZQoxI.roa
File: Ce1YsRIc0zs6IWenjKgI1jZQoxI.roa (raw, json)
Hash identifier: J1tc04KFpp5+26Rd8BBYq2IGR2Wn4x/mO4f1ogHNjzM=
Subject key identifier: 09:ED:58:B1:12:1C:D3:3B:3A:21:67:A7:8C:A8:08:D6:36:50:A3:12
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 018823701B7E4F6ECCA3CF9063481E6CF124
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Ce1YsRIc0zs6IWenjKgI1jZQoxI.roa
Signing time: Tue 16 May 2023 07:22:09 +0000
ROA not before: Tue 16 May 2023 07:22:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3316
IP address blocks: 194.190.138.0/24 maxlen: 24
194.190.141.0/24 maxlen: 24
194.190.142.0/24 maxlen: 24
194.190.145.0/24 maxlen: 24
194.190.148.0/24 maxlen: 24
194.85.105.0/24 maxlen: 24
62.76.249.0/24 maxlen: 24
194.85.106.0/24 maxlen: 24
194.85.117.0/24 maxlen: 24
194.85.118.0/24 maxlen: 24
194.85.31.0/24 maxlen: 24
193.232.131.0/24 maxlen: 24
195.208.22.0/23 maxlen: 23
195.209.4.0/24 maxlen: 24
195.209.8.0/24 maxlen: 24
86.62.49.0/24 maxlen: 24
195.209.146.0/24 maxlen: 24
193.232.85.0/24 maxlen: 24
194.85.119.0/24 maxlen: 24
194.226.29.0/24 maxlen: 24
194.226.44.0/24 maxlen: 24
194.226.46.0/23 maxlen: 23
195.19.26.0/24 maxlen: 24
212.193.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 10:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:70:1b:7e:4f:6e:cc:a3:cf:90:63:48:1e:6c:f1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: May 16 07:22:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09ed58b1121cd33b3a2167a78ca808d63650a312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:4d:bf:a2:6c:e6:c4:fd:7d:de:d5:9d:97:
f6:b0:91:c1:23:54:24:8a:4b:a3:49:7c:06:98:97:
99:89:10:ee:75:6c:eb:48:78:3f:87:2b:29:15:fc:
a0:56:cb:bd:de:08:f6:46:94:5b:b7:4c:d4:8f:c5:
ae:8f:df:80:c3:15:14:3d:6a:f7:92:00:d7:83:8d:
46:a3:b0:3e:6d:12:6e:f5:11:8f:8c:f0:e8:a7:24:
e4:fa:57:8c:2e:cf:f6:66:b9:5c:21:71:ce:fd:d6:
90:de:04:15:84:c3:16:1d:92:0c:53:e0:a2:14:21:
11:a8:40:b7:fa:bc:f4:f5:db:8d:5a:bb:c4:b6:15:
73:21:fc:80:69:e6:7a:95:0d:1d:e2:0f:ec:89:30:
99:a8:51:ac:97:1d:ba:c6:d7:5d:57:0f:33:e4:4b:
d7:8f:c4:b8:42:b3:27:5b:a5:4d:6b:47:23:eb:15:
78:07:cf:e1:fa:d7:fe:92:d3:ee:e9:d5:88:7c:3e:
1c:c1:79:18:19:c9:df:83:5a:2c:43:ef:eb:99:b6:
63:77:bd:79:c6:b1:3e:2c:c3:5a:52:cd:a1:d3:3f:
22:4e:17:96:d3:cd:1c:d6:3a:4c:80:61:ab:a8:a7:
28:f9:dc:e6:19:da:da:e1:55:71:2e:91:ed:14:78:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:ED:58:B1:12:1C:D3:3B:3A:21:67:A7:8C:A8:08:D6:36:50:A3:12
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Ce1YsRIc0zs6IWenjKgI1jZQoxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.249.0/24
86.62.49.0/24
193.232.85.0/24
193.232.131.0/24
194.85.31.0/24
194.85.105.0-194.85.106.255
194.85.117.0-194.85.119.255
194.190.138.0/24
194.190.141.0-194.190.142.255
194.190.145.0/24
194.190.148.0/24
194.226.29.0/24
194.226.44.0/24
194.226.46.0/23
195.19.26.0/24
195.208.22.0/23
195.209.4.0/24
195.209.8.0/24
195.209.146.0/24
212.193.118.0/24
Signature Algorithm: sha256WithRSAEncryption
65:84:e3:52:f8:22:d6:aa:d8:f9:0c:3f:c2:12:66:11:bf:d8:
fa:41:ab:09:ad:86:74:ae:31:65:8f:9f:da:af:05:a6:ba:dc:
8b:6e:7a:dc:80:d9:8c:9a:14:25:40:b6:17:5a:3a:5d:29:fa:
be:98:bb:af:ef:44:6f:f2:39:ff:1b:9a:70:70:72:4a:3c:2e:
fc:d2:58:58:9e:62:11:07:af:b3:94:dd:8e:7a:ca:9d:93:e7:
8e:8d:c6:8d:0a:16:3c:1c:4a:60:c8:a0:83:d7:6b:67:ef:b1:
f5:e0:06:89:05:e8:38:48:4b:50:4d:5c:26:d8:49:2d:eb:84:
b4:e3:70:b4:51:71:93:2b:c9:23:02:3f:cd:fb:f1:1e:d3:f7:
6c:f0:9f:07:84:1a:dd:7f:a2:8a:0b:a8:85:6a:bd:e9:f0:82:
4f:eb:f3:fc:3a:4e:62:95:48:f8:d7:a4:84:c7:eb:ee:b1:6e:
c1:6c:ab:34:64:3a:53:23:8c:f1:a9:84:57:30:b0:28:88:97:
2c:e3:e4:80:95:aa:eb:8d:d8:14:82:9c:2c:56:30:ea:68:4e:
b9:1b:cd:e1:54:b1:e9:d0:2d:d3:69:7f:3a:92:7d:10:5e:f0:
5e:c4:e1:4c:cf:ad:b2:38:6c:73:8a:d0:4f:54:e9:7e:1d:f4:
4d:ab:9e:51
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAYgjcBt+T27Mo8+QY0gebPEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2
OTdhMDMwHhcNMjMwNTE2MDcyMjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWVkNThiMTEyMWNkMzNiM2EyMTY3YTc4Y2E4MDhkNjM2NTBhMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzolNv6Js5sT9fd7VnZf2sJHBI1Qk
ikujSXwGmJeZiRDudWzrSHg/hyspFfygVsu93gj2RpRbt0zUj8Wuj9+AwxUUPWr3
kgDXg41Go7A+bRJu9RGPjPDopyTk+leMLs/2ZrlcIXHO/daQ3gQVhMMWHZIMU+Ci
FCERqEC3+rz09duNWrvEthVzIfyAaeZ6lQ0d4g/siTCZqFGslx26xtddVw8z5EvX
j8S4QrMnW6VNa0cj6xV4B8/h+tf+ktPu6dWIfD4cwXkYGcnfg1osQ+/rmbZjd715
xrE+LMNaUs2h0z8iTheW080c1jpMgGGrqKco+dzmGdra4VVxLpHtFHhB4QIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFAntWLESHNM7OiFnp4yoCNY2UKMSMB8GA1UdIwQY
MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt
Njg4ZDMzM2VkOWQ1LzEvQ2UxWXNSSWMwenM2SVdlbmpLZ0kxalpRb3hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1
LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAA+
TPkDBABWPjEDBADB6FUDBADB6IMDBADCVR8wDAMEAMJVaQMEAMJVajAMAwQAwlV1
AwQDwlVwAwQAwr6KMAwDBADCvo0DBADCvo4DBADCvpEDBADCvpQDBADC4h0DBADC
4iwDBAHC4i4DBADDExoDBAHD0BYDBADD0QQDBADD0QgDBADD0ZIDBADUwXYwDQYJ
KoZIhvcNAQELBQADggEBAGWE41L4Itaq2PkMP8ISZhG/2PpBqwmthnSuMWWPn9qv
Baa63ItuetyA2YyaFCVAthdaOl0p+r6Yu6/vRG/yOf8bmnBwcko8LvzSWFieYhEH
r7OU3Y56yp2T546Nxo0KFjwcSmDIoIPXa2fvsfXgBokF6DhIS1BNXCbYSS3rhLTj
cLRRcZMrySMCP8378R7T92zwnweEGt1/oooLqIVqvenwgk/r8/w6TmKVSPjXpITH
6+6xbsFsqzRkOlMjjPGphFcwsCiIlyzj5ICVquuN2BSCnCxWMOpoTrkbzeFUsenQ
LdNpfzqSfRBe8F7E4UzPrbI4bHOK0E9U6X4d9E2rnlE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:51 2024 by rpki-client on console-fra.rpki-client.org