Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4Z9ubHb9J2_prOkgvwbVy4xLLKM.roa
File: 4Z9ubHb9J2_prOkgvwbVy4xLLKM.roa (raw, json)
Hash identifier: E+gmLVm5X5jf8z4o1gjc1SqXiNk/gCvuT7affUU8qLo=
Subject key identifier: E1:9F:6E:6C:76:FD:27:6F:E9:AC:E9:20:BF:06:D5:CB:8C:4B:2C:A3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018E76C3C50FD44BF4507853654C30725B4D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4Z9ubHb9J2_prOkgvwbVy4xLLKM.roa
Signing time: Mon 25 Mar 2024 17:58:45 +0000
ROA not before: Mon 25 Mar 2024 17:58:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 192.124.172.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 27 Mar 2024 13:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:76:c3:c5:0f:d4:4b:f4:50:78:53:65:4c:30:72:5b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 25 17:58:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e19f6e6c76fd276fe9ace920bf06d5cb8c4b2ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:4f:1f:e2:bf:68:2a:2e:23:46:c7:c2:2f:
f3:64:f3:7a:24:3e:cd:a0:63:8b:61:a0:af:8b:71:
cd:a8:d0:60:11:9a:46:31:8b:27:02:f9:41:9d:16:
8d:ed:c3:a2:7e:1f:05:f0:72:a0:64:6e:9f:b0:1d:
64:24:e8:a1:4d:65:4c:fe:d7:63:54:df:45:0d:ca:
36:a8:64:11:29:12:c1:54:73:72:e2:17:56:51:d0:
8a:55:39:2c:80:0c:5c:f4:a6:39:b6:23:4e:a3:5b:
d9:b3:d1:54:c5:97:ac:41:bc:d6:40:b3:29:5c:4f:
9a:c5:fd:13:21:a5:9c:17:06:98:9d:55:ed:c1:03:
11:5d:21:1b:30:fe:1a:2c:9a:6a:8b:8a:20:c7:e1:
04:0c:b7:81:6a:54:9b:ea:f6:92:38:40:6f:0e:b9:
a1:0e:81:22:27:eb:29:52:9f:0d:52:61:4a:8a:ee:
be:60:68:a2:fb:0e:fd:18:4e:8e:1f:10:1f:75:a5:
f0:78:c1:d4:ef:77:65:8a:75:30:a9:3d:9a:66:86:
97:1d:8e:10:d4:5e:0f:a0:88:fb:7a:38:af:dd:62:
91:34:04:b9:55:6a:1e:79:44:61:c2:c3:55:e2:a5:
e8:d3:4b:ab:5e:81:dc:90:a7:a4:a8:07:a8:37:fa:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9F:6E:6C:76:FD:27:6F:E9:AC:E9:20:BF:06:D5:CB:8C:4B:2C:A3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4Z9ubHb9J2_prOkgvwbVy4xLLKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
193.124.7.0/24
194.87.168.0/23
194.87.201.0/24
194.87.245.0/24
195.133.25.0/24
212.192.1.0/24
212.192.208.0/24
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
0c:af:42:cb:23:5d:e6:4e:2d:12:f3:4b:01:92:d4:dc:ba:d3:
67:95:a1:f5:87:0f:fe:35:24:d8:9d:41:64:e7:72:bd:2d:12:
b7:c3:ef:b3:fd:8b:26:8c:69:c9:fb:e0:40:7f:1d:61:8b:78:
e3:10:19:d6:8d:7e:bd:fc:26:90:93:c9:1d:79:ba:e5:74:33:
2e:a7:2d:97:58:f1:ff:5d:1b:a8:7a:c7:63:0e:87:9f:f1:6f:
55:79:8c:f6:7c:89:1c:c1:db:1d:08:4e:b0:bf:f8:b2:c7:df:
47:45:9f:cc:b3:70:79:51:95:12:ee:71:92:a2:52:6b:12:49:
28:e4:46:98:87:3b:12:7d:17:56:b7:8f:a7:8c:c2:7a:c4:04:
74:02:0b:29:4c:75:4b:14:7e:58:7e:2a:07:9c:39:e9:68:0e:
45:bc:3b:6b:38:59:31:91:ca:c7:88:72:06:aa:92:4e:fb:57:
40:13:5a:e9:66:8d:13:5c:42:93:f0:ec:db:be:ce:74:01:3a:
13:23:d9:6f:1a:7c:eb:69:42:82:02:cc:3b:f7:0a:0b:0c:a9:
2e:ce:bf:09:bb:c7:e6:fd:7c:96:99:4a:3b:f0:74:9c:7a:74:
76:6b:f9:9e:37:df:42:7e:6d:0d:fe:82:11:dd:2e:a3:9d:7f:
10:22:7b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 17:41:37 2024 by rpki-client on console-ams.rpki-client.org