Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-vjM0Pp6PCQn-5JjFBPZUaPOers.roa
File: 1-vjM0Pp6PCQn-5JjFBPZUaPOers.roa (raw, json)
Hash identifier: Yohq3DIzcl3KQ2VfCy57Iur+cyXF40Z2wLJY3vL1gGg=
Subject key identifier: FA:F8:CC:D0:FA:7A:3C:24:27:FB:92:63:14:13:D9:51:A3:CE:7A:BB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DA1636408CD129072F9602F7C704EB737
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-vjM0Pp6PCQn-5JjFBPZUaPOers.roa
Signing time: Tue 13 Feb 2024 07:34:21 +0000
ROA not before: Tue 13 Feb 2024 07:34:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 62.76.224.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 05:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:63:64:08:cd:12:90:72:f9:60:2f:7c:70:4e:b7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 13 07:34:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faf8ccd0fa7a3c2427fb92631413d951a3ce7abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:48:40:85:46:2d:ac:58:94:63:5c:68:c6:
54:02:cd:04:e7:60:a1:3a:f1:8b:02:9d:0d:68:b7:
36:0a:f8:3e:71:df:f4:8f:18:e6:10:a2:48:c0:32:
98:22:b0:e0:1c:54:0d:a9:67:8b:ba:53:87:5b:9d:
c3:d6:9f:53:27:bb:89:8c:a5:df:19:b2:cb:f4:de:
28:01:4d:1f:99:03:fe:76:7f:7a:6c:99:36:ba:34:
85:25:c4:97:6d:28:2d:d0:76:f6:4d:fa:70:78:c3:
77:ba:ac:b9:5e:4b:4a:c9:72:33:6e:aa:aa:c5:bc:
9a:1a:f6:28:af:26:0d:03:58:11:e0:da:0b:59:f6:
4a:f2:d7:37:b4:8f:ab:1d:dd:01:77:6c:61:9e:60:
8f:0d:77:61:8b:8d:ca:9a:f1:b9:b4:ca:52:db:23:
96:44:f7:dc:6b:de:93:c9:d1:0e:b2:f1:ff:4a:1e:
ef:80:c6:65:66:eb:8e:8a:eb:d7:35:04:3f:e7:19:
29:dd:5e:99:af:2d:3b:96:26:a9:3e:be:2d:ec:e9:
4b:a0:2d:47:e5:af:a8:2c:93:f6:51:1d:23:b1:1e:
a4:cc:a6:5c:5d:5c:a1:72:5d:50:c9:4a:04:66:b4:
dc:b4:e9:b7:73:2a:c9:33:e6:1d:19:d4:b5:b4:43:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:CC:D0:FA:7A:3C:24:27:FB:92:63:14:13:D9:51:A3:CE:7A:BB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-vjM0Pp6PCQn-5JjFBPZUaPOers.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
193.124.5.0/24
193.124.7.0/24
193.124.95.0/24
193.124.200.0/24
193.124.202.0/24
194.87.22.0/24
194.87.32.0/24
194.87.81.0/24
194.87.149.0/24
194.87.170.0/24
194.87.172.0/24
194.87.201.0/24
194.135.18.0/24
195.58.60.0/24
195.133.25.0/24
195.133.72.0/24
195.133.85.0/24
195.133.192.0/24
212.192.1.0/24
212.193.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a9:53:f8:d6:bc:f5:bc:79:a1:2c:16:06:2e:b0:e5:3b:09:
9e:77:09:7d:d1:83:b9:97:25:b9:d4:ff:ec:e4:68:db:c3:fa:
cb:00:08:19:24:40:d7:c1:ba:8e:8f:35:f8:ff:0d:b3:97:00:
4b:15:7e:ba:66:94:76:0d:c3:ef:3e:c4:8c:cb:9b:f4:45:3e:
85:a7:66:65:26:25:bd:7b:76:6f:ca:bf:80:28:72:6d:10:75:
57:e3:4b:2f:22:7d:1b:a1:55:1b:d6:5a:78:b2:13:58:1a:79:
6f:e4:bb:34:0b:7e:f7:d5:d6:50:c8:28:a2:04:25:9e:f1:d1:
f3:8a:44:9c:78:a6:29:d4:8a:91:5a:f9:b7:7f:bb:40:2b:cf:
77:ac:af:e8:ea:3a:17:50:a0:f0:7a:5d:93:48:07:a8:47:3e:
58:b3:8c:a4:0a:5b:ea:ae:4c:6f:f0:3f:3a:59:ba:7f:2f:ad:
03:fc:af:66:03:10:96:ee:9b:44:08:fd:f4:2d:5c:eb:95:cc:
e9:f7:b3:66:eb:30:44:de:1e:5b:1b:36:8c:f0:3d:1c:a3:9f:
84:7d:21:9f:3b:e1:dc:ea:7f:34:82:9d:e9:e7:64:db:8a:d8:
94:0e:d3:e1:4e:c3:5b:2c:a7:1d:bd:cf:65:39:9f:ae:bb:ce:
b7:99:7e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 09:29:51 2024 by rpki-client on console-ams.rpki-client.org