Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1iK--Nr5JS1Ix3MaF0FuHdqpHuU.roa
File: 1iK--Nr5JS1Ix3MaF0FuHdqpHuU.roa (raw, json)
Hash identifier: MU5vAu0oEnhgzWr+3w8az1CDfsgWsfmsWsukQJKd/TI=
Subject key identifier: D6:22:BE:F8:DA:F9:25:2D:48:C7:73:1A:17:41:6E:1D:DA:A9:1E:E5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CE9200C8BED84B73DE0172246E38320C3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1iK--Nr5JS1Ix3MaF0FuHdqpHuU.roa
Signing time: Mon 08 Jan 2024 12:50:40 +0000
ROA not before: Mon 08 Jan 2024 12:50:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 194.87.32.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.133.40.0/22 maxlen: 22
194.87.66.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
212.192.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 07:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:20:0c:8b:ed:84:b7:3d:e0:17:22:46:e3:83:20:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 8 12:50:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d622bef8daf9252d48c7731a17416e1ddaa91ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:d5:5f:ed:be:c8:5c:de:d9:9b:be:33:9c:
e5:49:9f:d3:be:88:81:07:9c:7a:f7:07:69:13:0d:
2a:fc:f2:e8:93:8b:e5:26:0a:56:11:b6:80:61:fd:
ba:27:af:49:2c:54:9b:5a:d3:f5:46:29:8c:11:e0:
eb:e5:6e:00:cf:25:30:eb:d0:d0:9c:14:66:53:6d:
63:66:be:00:ca:f4:a4:30:be:b4:81:b3:2d:28:e7:
41:29:33:5d:d2:4a:81:d1:87:aa:87:dc:58:5f:a9:
ca:30:94:31:76:00:64:f5:5c:b2:6b:d2:85:43:54:
6e:fa:9f:5c:66:7c:19:68:86:ef:61:06:78:4d:c4:
6d:8b:de:a0:a4:02:8f:79:25:54:5e:2b:c6:6a:ad:
26:3f:c5:e9:12:fb:bc:1b:97:9e:46:5e:f4:d2:b3:
91:a8:5f:a3:29:59:80:a3:26:cf:d0:f8:fd:ad:5e:
1f:48:69:14:93:29:21:b6:01:c5:d8:5e:5e:3d:a7:
88:52:37:bc:e5:67:8d:c4:e7:74:dc:40:04:94:f0:
af:ab:da:da:02:17:11:39:95:d8:d3:f6:c1:b7:45:
2a:d1:46:f4:c5:72:b3:1d:24:1b:f3:1a:f8:72:4b:
5f:30:3e:4f:4c:22:b4:a4:7d:71:9c:34:f4:73:31:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:22:BE:F8:DA:F9:25:2D:48:C7:73:1A:17:41:6E:1D:DA:A9:1E:E5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1iK--Nr5JS1Ix3MaF0FuHdqpHuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.32.0/24
194.87.40.0/24
194.87.66.0/24
195.58.35.0/24
195.58.60.0/24
195.133.40.0/22
212.192.254.0/24
Signature Algorithm: sha256WithRSAEncryption
21:de:d7:b5:12:38:c8:02:a8:f8:dd:a9:9e:07:df:07:2f:c2:
50:0f:a3:81:cc:71:57:17:51:01:57:09:84:54:2c:b7:64:b0:
c3:83:68:9d:54:7f:a5:57:09:be:39:c7:20:f4:29:9c:20:4f:
f2:bd:b1:15:a6:63:d1:26:ea:2e:14:4e:e0:f0:23:f7:51:7b:
f7:53:fa:28:d6:7b:77:50:7a:b7:34:64:f4:68:24:d7:c5:5a:
dd:b8:d0:35:d0:62:9e:34:15:89:9a:1e:45:2b:93:bb:92:72:
04:25:39:87:48:80:e1:9e:cd:c4:ff:07:5f:44:e9:b5:16:73:
1e:70:04:72:f9:36:15:0f:78:0d:15:03:13:f4:9c:6b:07:3a:
31:d9:ba:ec:3e:ea:95:1c:d1:96:a1:a0:df:3e:25:d1:f4:f0:
52:f8:b1:0f:ed:68:2b:90:4a:a4:97:14:2f:45:8e:fe:5e:7a:
29:b5:54:69:53:a8:91:dc:d2:e1:0c:bc:ae:e1:f5:04:0e:bd:
f6:cb:6e:9f:f8:89:b2:06:bb:cd:09:ed:4e:25:86:86:7d:7f:
e0:2d:a1:89:f4:31:d7:70:e9:12:28:37:25:b2:58:69:99:39:
4e:20:0e:7e:37:e8:c3:f7:c7:99:13:39:80:d3:62:2e:7b:fc:
fa:49:f1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 08:30:13 2024 by rpki-client on console-fra.rpki-client.org