Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4393-VbZsDVT3cwReWgwyxup1jQ.roa
File: 4393-VbZsDVT3cwReWgwyxup1jQ.roa (raw, json)
Hash identifier: H0G9efyHegb+bTH4bybzo1nucalWc9nnSp/5tNh2l90=
Subject key identifier: E3:7F:77:F9:56:D9:B0:35:53:DD:CC:11:79:68:30:CB:1B:A9:D6:34
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193C0B4B276840FC22BDD5B2EA91F45EE48
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4393-VbZsDVT3cwReWgwyxup1jQ.roa
Signing time: Fri 13 Dec 2024 15:48:07 +0000
ROA not before: Fri 13 Dec 2024 15:48:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199785
IP address blocks: 194.87.54.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
195.58.39.0/24 maxlen: 24
195.133.64.0/24 maxlen: 24
195.133.65.0/24 maxlen: 24
212.193.4.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:b4:b2:76:84:0f:c2:2b:dd:5b:2e:a9:1f:45:ee:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 13 15:48:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e37f77f956d9b03553ddcc11796830cb1ba9d634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:1a:5e:8c:89:ed:b9:de:ba:c5:f1:52:3d:
5f:c6:a0:f8:ee:28:fa:62:0e:0a:f1:f2:f3:01:dd:
3a:4a:18:9b:0a:28:4c:87:b1:e5:27:73:0c:a3:b1:
9e:63:bb:4c:0a:d4:ed:92:fa:49:e3:9c:f6:ea:b2:
cf:7b:25:e8:6e:0d:e5:53:41:57:09:cb:4e:1b:8d:
53:3d:01:c7:8d:b4:ab:ae:31:c0:fb:6e:64:3f:36:
60:87:de:c4:21:b9:6f:d9:d0:9f:73:72:06:7a:5c:
95:3d:eb:a9:9d:d6:33:f7:8f:2b:fa:c8:d0:54:ed:
7f:18:36:c6:a9:77:b4:10:58:98:fd:16:64:d1:40:
75:ab:fe:22:ec:4c:cc:76:16:10:1a:9a:c3:25:5f:
ac:88:bd:fd:14:3e:29:d0:87:e5:8d:b9:c9:07:03:
87:36:77:2b:2b:bd:1d:59:4b:94:9d:8e:07:d3:c1:
c5:ed:a0:d6:45:44:99:1e:f5:c7:ec:86:62:3a:bd:
08:a9:28:db:e0:41:bd:a2:0e:ac:17:ec:0d:4e:a4:
cb:00:36:e2:2c:62:0d:8f:eb:d3:bd:f5:d6:4b:83:
40:82:ab:c9:c1:d5:de:2b:dd:fd:a2:58:2e:71:ef:
d5:fc:97:a0:b0:8f:72:9f:96:29:51:05:75:9b:0b:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7F:77:F9:56:D9:B0:35:53:DD:CC:11:79:68:30:CB:1B:A9:D6:34
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4393-VbZsDVT3cwReWgwyxup1jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.54.0/23
194.87.199.0/24
195.58.38.0/23
195.133.64.0/23
212.193.4.0/23
Signature Algorithm: sha256WithRSAEncryption
99:df:bb:ef:9b:09:e1:34:92:89:b7:89:3e:8a:b5:c6:77:97:
20:08:b1:44:7b:c2:6e:11:ec:d3:18:4a:4c:98:7e:23:82:c2:
4a:98:0a:78:a8:ae:1f:29:89:7b:7d:b1:f5:1c:a8:de:5e:07:
5b:70:18:2f:6b:0f:a6:42:0e:af:72:c4:f8:6f:51:dd:92:b7:
ea:e1:fa:7d:ed:b1:d2:7b:23:b2:22:2f:1a:c8:13:ad:17:89:
2c:14:4e:49:1f:47:63:d0:a2:d0:a8:21:36:2b:5d:2d:1b:8d:
00:d5:cb:2b:8c:b3:95:81:b0:c0:1e:f3:da:71:8f:ef:ce:94:
0c:36:2c:64:80:7a:4e:0b:12:cd:d6:82:e3:54:55:f3:7f:71:
fa:17:a3:60:1e:66:a2:c4:7b:79:8b:48:95:22:47:1c:11:3c:
ed:86:a4:b0:09:4b:59:05:92:3b:42:ab:93:9d:38:54:8a:55:
71:ea:b5:d4:28:38:78:41:db:79:4b:59:29:7d:4b:d8:eb:78:
73:aa:d4:b1:9f:ce:a0:66:7b:1e:df:39:21:47:36:df:73:6c:
7d:78:7f:78:1e:18:36:7e:23:25:32:77:df:07:f4:13:83:06:
15:0a:11:97:b3:db:84:20:aa:91:4b:a6:66:d8:2a:83:3e:7f:
76:7b:52:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:33:31 2025 by rpki-client