Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3erzJx74BQ4Sc-DdKiy7NukC4SU.roa
File: 3erzJx74BQ4Sc-DdKiy7NukC4SU.roa (raw, json)
Hash identifier: y60ngsjDeq+eok3L77LGXaySF5eGooDcGmCA6nc5yfk=
Subject key identifier: DD:EA:F3:27:1E:F8:05:0E:12:73:E0:DD:2A:2C:BB:36:E9:02:E1:25
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018954EC2EE7C259C08EED243A4140DAEC79
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3erzJx74BQ4Sc-DdKiy7NukC4SU.roa
Signing time: Fri 14 Jul 2023 15:01:51 +0000
ROA not before: Fri 14 Jul 2023 15:01:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203639
IP address blocks: 212.193.14.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 09:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:ec:2e:e7:c2:59:c0:8e:ed:24:3a:41:40:da:ec:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 14 15:01:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddeaf3271ef8050e1273e0dd2a2cbb36e902e125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:43:bd:bf:62:c5:5f:c8:ac:17:c2:ea:dd:
64:4b:38:38:06:70:17:f9:ac:1d:7d:54:2a:08:77:
f7:8c:a1:19:de:66:2f:5c:c2:5a:1a:8e:62:6a:2c:
37:11:af:30:83:76:a3:17:64:6e:32:3e:cd:81:c6:
cb:80:fc:b3:36:cb:a5:53:59:19:d3:0f:44:08:24:
13:49:41:32:ad:aa:9b:f1:3a:1e:9c:b9:a0:93:fe:
e5:62:30:06:08:ab:1b:40:42:86:4e:4f:4a:95:c2:
cc:29:00:76:27:4b:3e:8f:d0:a8:99:14:a6:c6:3b:
f1:2d:8a:74:2f:1d:c8:5c:05:e8:b2:1d:1a:24:48:
14:30:2d:05:98:90:b2:b1:eb:25:7a:df:80:b9:0d:
66:58:a2:db:ea:d2:37:45:a3:a0:71:25:c0:f1:15:
df:ff:61:5f:a2:7e:09:67:7b:80:bb:66:cb:51:63:
8a:63:4a:fa:35:6a:46:69:b8:dd:9d:fe:4c:c6:59:
02:bd:1e:95:b9:54:79:fd:be:ae:1d:cf:37:d0:76:
76:b3:34:d1:5d:02:9f:0e:c5:9e:36:ac:f4:d6:5e:
ab:4d:18:86:bf:6e:c7:b9:6b:10:1a:4c:ef:5e:e3:
2f:30:04:39:05:da:18:3f:92:1e:1f:8b:78:c2:49:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EA:F3:27:1E:F8:05:0E:12:73:E0:DD:2A:2C:BB:36:E9:02:E1:25
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3erzJx74BQ4Sc-DdKiy7NukC4SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.180.0/24
193.124.90.0/24
194.87.76.0/24
194.87.208.0/24
194.87.226.0/24
194.87.231.0/24
195.133.15.0/24
195.133.25.0/24
195.133.27.0/24
212.192.4.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e4:4f:c6:e0:13:5c:c4:66:52:7e:a4:f5:22:3e:15:8e:56:
70:22:8b:87:95:79:df:5b:61:e4:57:ad:e0:df:27:f1:64:4b:
08:86:92:e0:5d:c8:06:1d:cc:79:bb:31:9e:de:a6:9b:6d:9b:
ac:9d:7e:38:45:cc:ff:ae:12:c3:06:be:f3:ed:42:22:ab:e7:
99:49:89:01:5a:f5:08:da:3f:b3:98:31:ab:5a:ba:c2:58:17:
ac:00:25:4e:90:95:fc:35:36:d6:b9:13:1f:2d:b2:54:24:79:
38:43:f1:11:67:77:31:4f:b9:8c:f9:6e:8f:80:d7:d4:c1:68:
60:93:56:69:26:b9:eb:8e:7e:d2:39:a8:b7:03:72:bc:af:ee:
f8:3c:3b:24:cc:9c:25:54:d9:43:3b:46:43:95:f5:63:59:73:
47:e8:05:dd:32:4a:a5:d0:e5:42:dc:97:08:9f:ae:2c:66:30:
ec:99:f6:25:5b:b9:6a:af:5f:ee:9d:24:22:54:f2:d5:df:37:
d5:3b:e6:da:2f:9b:8b:5d:04:22:8b:1a:f7:94:88:16:91:31:
b9:d5:d8:02:5b:1e:62:6c:a9:99:dd:56:55:e6:97:31:38:f2:
9d:74:69:7a:98:e1:0f:8e:2b:31:c2:73:e7:fb:56:77:2b:56:
ac:94:c2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:05 2024 by rpki-client on console-fra.rpki-client.org