Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/E-pZP48csoRGtpgks3phq_uqfzA.roa
File: E-pZP48csoRGtpgks3phq_uqfzA.roa (raw, json)
Hash identifier: IQNwF679X1GfPBI00i5v165vLM0XP7M4gF/LIsjnSig=
Subject key identifier: 13:EA:59:3F:8F:1C:B2:84:46:B6:98:24:B3:7A:61:AB:FB:AA:7F:30
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 01856D8ACF6C72B0EFF242B4D6BAC83E1A55
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/E-pZP48csoRGtpgks3phq_uqfzA.roa
Signing time: Sun 01 Jan 2023 13:34:51 +0000
ROA not before: Sun 01 Jan 2023 13:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209122
IP address blocks: 194.35.104.0/23 maxlen: 23
194.35.104.0/22 maxlen: 22
194.35.106.0/23 maxlen: 23
2a0d:f8c0:20::/43 maxlen: 43
2a0d:f8c0::/43 maxlen: 43
2a0d:f8c0::/42 maxlen: 42
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:cf:6c:72:b0:ef:f2:42:b4:d6:ba:c8:3e:1a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Jan 1 13:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13ea593f8f1cb28446b69824b37a61abfbaa7f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:0d:4a:8a:c2:4a:8b:c2:44:9d:ad:a7:9a:
8d:04:41:7f:a3:bf:37:92:2e:1b:55:38:bc:58:e8:
aa:0c:10:1e:b1:fa:1b:9d:07:1a:80:d0:48:69:36:
6d:a9:52:bb:8d:c6:f3:e2:c9:a6:a9:bb:ab:23:f5:
e8:ec:79:f2:9e:80:1e:58:b5:62:f1:49:38:8a:fa:
05:c4:89:4d:7b:dc:7e:6f:7e:79:1c:b0:9b:0a:e9:
9c:c6:bc:9c:bb:12:86:fb:9c:51:72:d3:e0:ed:a1:
64:7b:d0:24:f6:26:52:32:b2:4f:6c:77:2f:ab:d3:
a9:4d:b8:1f:d3:02:c5:60:93:20:f3:05:a5:b9:6b:
43:6e:76:3d:83:c1:ca:55:03:43:5a:b6:2a:6f:20:
32:1c:71:7c:d3:7e:3c:83:1e:aa:b3:fc:32:0e:23:
a0:94:a0:2c:db:02:85:c3:8b:14:fd:c4:6a:4b:5a:
d4:1f:9e:ff:dd:ae:de:fd:48:d9:96:07:bb:ab:8b:
f8:8e:15:de:f4:14:21:a6:7c:7f:9e:c4:aa:e1:ae:
f5:e6:d6:14:25:c6:d4:df:11:b2:b8:31:d9:c2:ed:
51:a3:a3:57:01:ee:92:9f:77:af:6f:84:bd:8e:3a:
fc:37:c2:7b:fb:a0:29:cc:dc:9d:85:46:06:43:25:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EA:59:3F:8F:1C:B2:84:46:B6:98:24:B3:7A:61:AB:FB:AA:7F:30
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/E-pZP48csoRGtpgks3phq_uqfzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.104.0/22
IPv6:
2a0d:f8c0::/42
Signature Algorithm: sha256WithRSAEncryption
5a:58:f5:49:3b:76:2f:f6:da:48:60:96:bc:d6:a9:d1:dc:31:
99:74:72:14:6b:73:e1:43:3b:52:52:0d:f5:b7:a6:02:ae:3e:
94:83:da:65:df:6b:07:67:4d:b1:04:29:3b:a2:44:c9:56:26:
9a:fc:fc:ba:83:b4:fa:0e:57:ce:78:dd:bc:49:0c:03:3c:96:
83:42:84:c7:ae:c0:08:b8:79:5e:2f:1d:23:c7:da:bb:8d:e1:
3f:24:3a:57:05:2d:60:14:c5:bd:93:de:f9:1a:50:0b:de:2c:
6b:fe:1b:87:b6:71:97:64:a4:99:dc:03:9e:d9:ef:0d:8e:3d:
d3:8a:3d:fa:c9:fd:41:86:38:81:b1:2c:8c:a0:cc:6f:8e:08:
f0:13:40:78:12:89:23:0c:c8:c5:6b:78:26:ac:2a:2f:53:15:
0d:14:04:c6:0b:7e:c8:a4:87:77:9a:95:ec:10:0e:34:22:e5:
b6:91:dd:98:89:86:1b:2d:a1:91:63:9f:b9:85:63:87:1c:ee:
b1:85:9d:bd:54:06:99:b9:9c:46:a1:96:cf:72:df:14:a2:9c:
13:78:61:0b:b6:84:25:54:9c:84:3b:33:9c:52:c5:8f:d9:8f:
3b:59:c9:52:4f:c7:24:b9:ab:c9:13:6c:d4:55:50:07:59:b3:
bc:ea:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:44 2024 by rpki-client on console-fra.rpki-client.org