Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Tba5vm9oezmHQZ6k5JIEjj1YiAE.roa
File: Tba5vm9oezmHQZ6k5JIEjj1YiAE.roa (raw, json)
Hash identifier: nB5SPkrd/5ByuR3mwGsg7AYUPLCmk0lNXnAxZMN9GIQ=
Subject key identifier: 4D:B6:B9:BE:6F:68:7B:39:87:41:9E:A4:E4:92:04:8E:3D:58:88:01
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0188C3BF7317C919154BFEEA452BE3FC1CFA
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Tba5vm9oezmHQZ6k5JIEjj1YiAE.roa
Signing time: Fri 16 Jun 2023 10:28:03 +0000
ROA not before: Fri 16 Jun 2023 10:28:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8985
IP address blocks: 193.232.64.0/24 maxlen: 24
194.190.146.0/24 maxlen: 24
193.232.76.0/24 maxlen: 24
194.85.16.0/24 maxlen: 24
195.208.222.0/24 maxlen: 24
193.232.226.0/23 maxlen: 23
194.226.41.0/24 maxlen: 24
195.19.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 11:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:bf:73:17:c9:19:15:4b:fe:ea:45:2b:e3:fc:1c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jun 16 10:28:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4db6b9be6f687b3987419ea4e492048e3d588801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5f:6f:8d:16:dd:70:3c:0d:1e:62:01:25:3d:
b5:77:9a:f3:f1:90:fd:6c:74:06:fc:c8:97:5e:7b:
9f:bd:d1:33:cd:ac:a5:d0:40:76:5f:ea:a8:d3:df:
1a:e8:68:e2:7c:13:62:39:fe:0f:a1:76:13:f6:99:
1e:8d:15:da:b4:26:9c:1b:ae:ae:a0:bb:5f:a8:4b:
bd:9f:c0:12:62:65:90:ae:1d:09:d3:c6:c3:0d:85:
f6:9e:f6:cb:2a:af:cd:fe:96:6c:f4:3c:fe:62:54:
7d:ea:07:13:d3:70:98:3f:ac:5f:29:32:ec:e4:f7:
38:23:c1:1b:ed:4b:c8:f3:22:ed:a4:7f:be:10:0f:
74:38:fa:c5:d3:94:f6:b4:99:49:77:0c:e3:6e:c5:
0d:03:e2:a9:dc:87:85:17:4c:99:b1:d7:91:00:25:
53:45:9e:bd:14:0e:e1:ca:ad:91:7e:5c:af:24:65:
9b:44:87:b0:40:f0:40:b3:f8:d7:71:d8:d5:f8:c7:
8f:1a:32:d7:d2:eb:dc:b5:cc:80:f0:67:19:17:c9:
c1:9a:8f:26:8c:96:0c:4a:72:cc:6b:08:1d:75:ac:
71:36:f5:37:84:d9:f0:28:ef:a1:c2:d3:25:58:12:
4d:c9:07:dc:95:23:a5:16:f6:36:49:f9:94:d1:18:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B6:B9:BE:6F:68:7B:39:87:41:9E:A4:E4:92:04:8E:3D:58:88:01
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Tba5vm9oezmHQZ6k5JIEjj1YiAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.64.0/24
193.232.76.0/24
193.232.226.0/23
194.85.16.0/24
194.190.146.0/24
194.226.41.0/24
195.19.8.0/24
195.208.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:36:9b:0c:a2:76:3f:59:b7:7f:42:17:93:de:38:42:a5:c4:
82:06:e3:35:d1:9b:33:30:07:ba:62:e6:17:03:27:74:68:a8:
6b:60:37:63:8d:fd:be:6d:4e:f0:5a:2f:f3:24:6c:95:cf:eb:
c8:8c:f5:a3:c8:7b:d0:5f:4f:b4:74:22:de:a5:ad:51:ee:22:
8d:57:16:e8:f4:fe:ca:da:8b:81:96:11:04:ac:bd:88:9f:91:
72:27:fc:b2:ad:7f:48:2c:06:cf:37:6a:85:28:e0:37:c5:32:
26:14:e0:7e:52:a6:f3:15:ad:1c:c8:83:95:0c:b9:11:05:79:
4b:b4:cb:8e:4c:7a:d6:e1:b5:26:0c:e1:64:80:ca:b5:4e:02:
25:13:b0:55:87:6f:99:af:66:a5:aa:79:16:f5:3e:f1:4e:9e:
b0:69:7d:ac:3c:4d:18:80:d9:12:74:84:7b:b5:b6:ac:eb:ae:
82:f5:e3:f2:76:1c:8f:af:0b:24:4b:7c:19:46:e9:cd:c2:f8:
69:89:09:77:c4:30:d7:9d:38:69:8c:81:1d:9f:46:de:00:e2:
20:d2:b9:e8:18:f6:15:38:bd:b2:f3:ae:2b:ad:92:82:21:e5:
87:01:1a:60:37:dc:e7:69:cc:33:39:2c:49:5b:82:05:af:f0:
17:89:ee:cd
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYjDv3MXyRkVS/7qRSvj/Bz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2
OTdhMDMwHhcNMjMwNjE2MTAyODAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGI2YjliZTZmNjg3YjM5ODc0MTllYTRlNDkyMDQ4ZTNkNTg4ODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh19vjRbdcDwNHmIBJT21d5rz8ZD9
bHQG/MiXXnufvdEzzayl0EB2X+qo098a6GjifBNiOf4PoXYT9pkejRXatCacG66u
oLtfqEu9n8ASYmWQrh0J08bDDYX2nvbLKq/N/pZs9Dz+YlR96gcT03CYP6xfKTLs
5Pc4I8Eb7UvI8yLtpH++EA90OPrF05T2tJlJdwzjbsUNA+Kp3IeFF0yZsdeRACVT
RZ69FA7hyq2RflyvJGWbRIewQPBAs/jXcdjV+MePGjLX0uvctcyA8GcZF8nBmo8m
jJYMSnLMawgddaxxNvU3hNnwKO+hwtMlWBJNyQfclSOlFvY2SfmU0RgjlwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFE22ub5vaHs5h0GepOSSBI49WIgBMB8GA1UdIwQY
MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt
Njg4ZDMzM2VkOWQ1LzEvVGJhNXZtOW9lem1IUVo2azVKSUVqajFZaUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1
LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAwehAAwQA
wehMAwQBwejiAwQAwlUQAwQAwr6SAwQAwuIpAwQAwxMIAwQAw9DeMA0GCSqGSIb3
DQEBCwUAA4IBAQArNpsMonY/Wbd/QheT3jhCpcSCBuM10ZszMAe6YuYXAyd0aKhr
YDdjjf2+bU7wWi/zJGyVz+vIjPWjyHvQX0+0dCLepa1R7iKNVxbo9P7K2ouBlhEE
rL2In5FyJ/yyrX9ILAbPN2qFKOA3xTImFOB+UqbzFa0cyIOVDLkRBXlLtMuOTHrW
4bUmDOFkgMq1TgIlE7BVh2+Zr2alqnkW9T7xTp6waX2sPE0YgNkSdIR7tbas666C
9ePydhyPrwskS3wZRunNwvhpiQl3xDDXnThpjIEdn0beAOIg0rnoGPYVOL2y864r
rZKCIeWHARpgN9znacwzOSxJW4IFr/AXie7N
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:51 2024 by rpki-client on console-ams.rpki-client.org