Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4USswI2pnENVJuWlqTZRGGvBh1E.roa
File: 4USswI2pnENVJuWlqTZRGGvBh1E.roa (raw, json)
Hash identifier: eEea7W/W0CFkElyJne7Z8w58FMuLflwK63Ggh2q3aeA=
Subject key identifier: E1:44:AC:C0:8D:A9:9C:43:55:26:E5:A5:A9:36:51:18:6B:C1:87:51
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188999A16F67153FD9B3400651E477A302B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4USswI2pnENVJuWlqTZRGGvBh1E.roa
Signing time: Thu 08 Jun 2023 06:03:12 +0000
ROA not before: Thu 08 Jun 2023 06:03:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 195.133.80.0/24 maxlen: 24
194.87.25.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 12:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:99:9a:16:f6:71:53:fd:9b:34:00:65:1e:47:7a:30:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 8 06:03:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e144acc08da99c435526e5a5a93651186bc18751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:df:23:06:86:a0:b9:8d:3c:e0:71:ad:16:
98:ce:92:fc:1e:10:0d:88:9a:48:3e:8e:7c:f8:3c:
99:f9:4b:0d:64:20:26:a5:04:88:bf:a4:fe:05:2e:
44:d2:d6:12:76:95:35:f0:8b:1b:50:60:eb:79:d1:
48:60:ae:c4:a8:1b:24:56:dd:09:39:2b:af:07:6f:
da:be:01:28:eb:ad:68:00:7b:ec:7d:c0:a8:85:e3:
6e:6d:84:f9:b4:da:56:61:24:a0:01:e7:ab:81:44:
4a:a3:d6:3c:b5:8e:49:72:cd:a0:fb:a0:23:83:a5:
fe:7f:d5:5f:1f:71:b1:05:e7:be:4f:3d:97:46:94:
2b:22:48:b2:3b:52:c1:28:d2:dd:de:b8:20:07:1a:
a1:38:e4:05:61:d3:48:cf:f1:51:d8:45:dc:f7:46:
71:67:f5:90:68:fd:a6:4b:8e:2c:f3:df:28:73:93:
de:b0:2e:ba:b2:05:97:f3:8e:42:2e:8a:08:0e:31:
44:f6:8b:fd:41:df:1e:7f:a9:a9:88:a2:c6:4e:f6:
32:de:a7:f6:33:c0:b6:d0:34:21:aa:79:42:67:9b:
4b:6f:68:be:8e:2d:0e:c6:24:03:d4:69:81:d2:50:
0c:02:87:3a:3b:49:af:98:a3:8b:3c:76:f5:95:43:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:44:AC:C0:8D:A9:9C:43:55:26:E5:A5:A9:36:51:18:6B:C1:87:51
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4USswI2pnENVJuWlqTZRGGvBh1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.25.0/24
194.87.33.0/24
194.87.182.0/24
195.133.80.0/24
Signature Algorithm: sha256WithRSAEncryption
42:60:7d:87:45:31:a2:53:ff:c8:b0:12:12:81:80:0c:c5:ea:
71:d4:fb:5f:b8:50:41:3b:b6:96:a2:ca:e1:d3:16:9b:9f:b7:
bb:67:0d:24:cd:cf:f8:03:ff:f6:0c:31:9f:a1:60:26:4b:44:
7b:f6:72:3f:df:c4:32:76:4b:2e:67:0a:d4:80:15:ee:7d:6e:
90:b2:06:75:2d:1b:d8:dd:47:84:7d:3d:5e:9c:33:af:8e:bb:
28:c3:85:b0:72:dd:ff:1c:bf:4b:8b:06:36:a1:d9:82:7e:94:
fc:e7:45:fc:d3:ac:66:ad:c9:3b:4c:4e:c5:3b:18:b2:9c:ab:
7e:df:23:59:87:23:74:60:e6:49:e3:5b:61:bf:cd:b7:fe:ba:
ea:7f:4b:d3:70:0b:8f:2b:c1:03:93:49:e5:53:10:22:c4:54:
33:de:3c:d8:44:2f:62:f2:dc:08:5f:f1:26:c9:7c:d5:c4:13:
4b:7d:84:8d:be:2e:75:e9:a6:02:15:5b:96:d2:31:e4:f9:fa:
69:f3:bb:8d:f4:f1:51:c7:ff:a3:a2:db:b3:0a:20:9c:e1:ef:
0e:18:40:c9:85:ff:60:a9:64:6f:04:d0:16:d4:15:83:6e:ef:
98:26:92:a1:10:ce:5a:5d:cc:9f:2c:a3:ba:50:67:67:bd:ca:
84:ea:42:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:05 2024 by rpki-client on console-fra.rpki-client.org