Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-_DUSQE-tFvQl1pqgVUNvXyfIU0.roa
File: 1-_DUSQE-tFvQl1pqgVUNvXyfIU0.roa (raw, json)
Hash identifier: WGqSevmFTMpIx03SH1sFjhmTM2cjEW0IAjCv9wrJi9k=
Subject key identifier: FB:F0:D4:49:01:3E:B4:5B:D0:97:5A:6A:81:55:0D:BD:7C:9F:21:4D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DC283EC28A909252CA6AB95DD785AAE25
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-_DUSQE-tFvQl1pqgVUNvXyfIU0.roa
Signing time: Mon 19 Feb 2024 17:57:21 +0000
ROA not before: Mon 19 Feb 2024 17:57:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 19:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c2:83:ec:28:a9:09:25:2c:a6:ab:95:dd:78:5a:ae:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 19 17:57:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbf0d449013eb45bd0975a6a81550dbd7c9f214d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6b:6a:1e:27:6f:c9:e7:af:1a:c4:07:1b:76:
53:95:e0:6f:6d:47:fd:02:36:c2:2e:c9:c8:cd:e4:
67:b5:e5:f0:7b:ed:b7:cb:d6:36:e5:3b:d2:26:db:
e2:58:c8:a8:08:59:2f:ab:c0:36:16:78:e7:a0:8d:
0e:20:cf:76:c0:4d:c0:5e:66:ac:8b:20:42:06:a2:
7c:1c:64:a7:0d:a5:f9:a7:57:3e:15:11:96:40:73:
9d:34:ae:78:f1:b7:15:00:0c:93:19:de:23:14:b8:
67:cb:32:4e:6c:39:63:6f:7e:b6:f8:91:bc:8a:87:
2d:f3:25:01:73:80:59:7b:7a:57:88:5f:e8:af:d0:
bb:e8:63:45:8d:da:08:55:54:23:f8:4f:b8:ea:d1:
a0:54:af:d4:e1:c9:18:4b:bd:24:56:90:ba:26:30:
d5:c7:ae:7b:34:d6:75:54:78:ae:f5:a7:62:89:f2:
dd:ec:2d:70:07:c9:6e:4c:2d:50:18:fa:2b:98:38:
17:fc:35:cd:88:04:15:83:81:d6:91:23:02:5e:81:
03:8f:15:fd:a7:7a:9b:fd:11:7f:67:fd:65:42:e5:
40:2e:82:3c:ff:82:ff:5a:ae:d4:e0:af:db:b4:95:
2b:80:8a:26:1a:8c:28:08:b5:56:d0:1d:71:e8:27:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F0:D4:49:01:3E:B4:5B:D0:97:5A:6A:81:55:0D:BD:7C:9F:21:4D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-_DUSQE-tFvQl1pqgVUNvXyfIU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.5.0/24
193.124.7.0/24
194.87.22.0/24
194.87.32.0/24
194.87.142.0/24
194.87.201.0/24
195.133.6.0/24
195.133.25.0/24
195.133.72.0/24
195.133.85.0/24
195.133.192.0/24
212.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
85:5c:c4:96:46:38:2b:f9:cd:2e:6b:32:cf:fe:19:ff:79:d3:
d3:18:1f:12:b6:d6:1f:d5:94:10:b7:5b:99:da:1a:9f:9a:4d:
4e:c3:66:ac:89:ab:b1:7f:6a:fc:c7:c4:7d:38:7f:84:93:fd:
07:a2:8a:f7:2f:db:2c:ee:b4:b1:5b:59:4e:78:77:3b:c3:81:
d9:4e:8c:c8:e8:da:17:ea:5b:de:b5:02:e3:7b:8c:3e:54:46:
e0:1e:50:0b:58:39:13:40:a8:3d:08:c2:82:19:d4:0d:09:98:
95:6e:9a:44:9d:55:6d:64:50:e0:8d:1e:49:2e:7d:0c:49:a4:
eb:c2:c6:61:4d:5e:ae:a8:6a:64:6f:1e:0e:42:ca:a3:d5:73:
8b:4f:40:0b:a5:23:27:7d:59:85:66:de:7e:ee:4f:08:52:86:
89:f8:9c:dd:05:8a:85:3f:79:d9:1b:6f:a3:78:85:7d:7e:73:
a0:90:03:c7:ae:91:16:fa:09:a1:64:f9:02:57:cb:0a:49:ce:
5b:98:ea:6f:b2:ce:71:18:d9:09:8b:88:e6:7f:c1:53:e4:e1:
a9:ce:b3:c4:5c:64:0f:f1:5b:51:83:bd:a2:f7:13:8c:ff:e7:
9a:19:2c:3f:31:93:dd:11:85:31:a1:8b:fc:fa:de:85:82:1c:
bb:8f:29:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 22:14:55 2024 by rpki-client on console-fra.rpki-client.org