Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4NOjAf45H-JwaVuszgI_71SFSOI.roa
File: 4NOjAf45H-JwaVuszgI_71SFSOI.roa (raw, json)
Hash identifier: jm2BlLTaDFlgJtUC6BeYRRIyp+3TLFydfggdo9yr88k=
Subject key identifier: E0:D3:A3:01:FE:39:1F:E2:70:69:5B:AC:CE:02:3F:EF:54:85:48:E2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C86AE6B81D76E022E6BB6833679020470
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4NOjAf45H-JwaVuszgI_71SFSOI.roa
Signing time: Wed 20 Dec 2023 10:03:46 +0000
ROA not before: Wed 20 Dec 2023 10:03:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208287
IP address blocks: 193.124.7.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
212.192.217.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:ae:6b:81:d7:6e:02:2e:6b:b6:83:36:79:02:04:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 20 10:03:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0d3a301fe391fe270695bacce023fef548548e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cf:2a:ef:0d:12:ef:0c:7c:cc:65:6e:17:a6:
74:34:c1:b6:61:dd:1b:2b:01:d0:90:98:93:47:eb:
f1:f5:4b:a3:15:2d:47:04:a8:c6:98:f1:35:a8:53:
5a:62:73:d6:af:56:26:1c:01:31:2e:1c:ca:cb:80:
47:d6:9b:fa:df:2a:92:bc:9a:e6:db:3c:76:23:67:
fe:2c:da:f8:ff:a3:01:30:af:8e:64:cb:d7:98:50:
8a:c1:fc:f7:2c:34:fd:37:69:74:be:18:a2:75:8e:
62:4f:72:41:67:77:8f:74:6f:74:b4:33:e1:21:80:
d4:16:d0:33:8f:55:50:b9:ee:86:24:89:7e:1c:a3:
3d:89:de:1e:fc:4b:40:46:09:9d:35:9b:ea:fb:21:
de:03:3a:8b:21:6c:e8:f9:96:28:f5:15:dc:cb:07:
79:fe:80:25:ea:80:8c:a3:df:8a:1b:9c:eb:3a:7e:
b9:49:87:b0:07:05:89:18:02:ac:6d:0a:d0:f7:62:
fb:e0:ae:ee:62:56:89:4f:cb:f4:1f:14:f2:59:52:
91:7b:35:cc:a7:f5:10:0c:1c:84:87:7a:4d:f4:7c:
2e:99:81:17:d9:40:7a:f2:5c:82:5f:6e:2e:56:44:
1f:24:e8:43:35:97:ac:9b:9f:42:da:66:99:3d:b4:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D3:A3:01:FE:39:1F:E2:70:69:5B:AC:CE:02:3F:EF:54:85:48:E2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4NOjAf45H-JwaVuszgI_71SFSOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
193.124.90.0/24
193.124.200.0/24
194.58.154.0/24
194.87.190.0/24
194.87.215.0/24
195.133.6.0/24
195.133.85.0/24
212.192.217.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e3:67:fe:8a:d5:f6:37:93:64:0b:f8:9b:a6:e8:0a:53:09:
04:cd:19:47:17:09:1e:49:e3:3c:95:f2:97:c1:96:19:a9:0e:
d1:52:f5:e9:4d:32:b2:45:06:17:17:4f:60:f4:33:5b:f0:a0:
99:3f:3f:d2:9d:83:d3:b4:02:c6:ec:e4:5b:57:cc:e0:9f:9b:
9e:59:6d:cf:62:b9:00:90:a2:86:02:37:2c:f3:42:b1:57:39:
e8:5a:29:d4:9a:03:e2:a4:02:48:82:56:95:a1:cb:3d:b9:c6:
79:9d:a0:90:f3:41:dd:d8:7f:0d:1a:fe:17:b4:02:5a:ab:ac:
06:69:54:c2:96:c5:9f:54:2f:6f:d9:c2:61:17:b4:a4:5a:46:
a1:2d:05:75:75:ee:81:1c:fb:a3:58:60:39:c1:53:f3:3a:81:
9a:f9:ad:3b:3d:e4:4e:08:8a:fe:01:29:6c:5f:7a:61:ec:29:
2e:0d:f5:cc:b0:19:1a:3d:2d:1c:9c:b7:e3:78:59:9f:ab:56:
80:5f:e6:58:52:03:10:1e:16:5e:5a:d4:6e:9f:9a:f6:1f:35:
57:8b:d2:bb:03:4a:c8:60:ec:3d:b4:35:85:8d:e5:20:22:d7:
d5:07:77:03:ff:aa:18:60:b2:20:21:17:20:d3:00:9f:be:67:
97:0e:70:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 09:32:13 2023 by rpki-client on console-ams.rpki-client.org