Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4pApf_RBLsrgEswagvSjf5KOxUA.roa
File: 4pApf_RBLsrgEswagvSjf5KOxUA.roa (raw, json)
Hash identifier: k0W1oaU4rZrYmwTv9USQwKaDcCouVufs9RBCmwdV4t8=
Subject key identifier: E2:90:29:7F:F4:41:2E:CA:E0:12:CC:1A:82:F4:A3:7F:92:8E:C5:40
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018EBE316958830C7C6E805393E711B63D78
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4pApf_RBLsrgEswagvSjf5KOxUA.roa
Signing time: Mon 08 Apr 2024 14:51:33 +0000
ROA not before: Mon 08 Apr 2024 14:51:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 192.124.172.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 11 Apr 2024 12:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:31:69:58:83:0c:7c:6e:80:53:93:e7:11:b6:3d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 8 14:51:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e290297ff4412ecae012cc1a82f4a37f928ec540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:68:3f:a0:8a:d8:5e:51:3e:46:3a:29:46:
5f:c2:c2:88:98:dd:6f:75:0a:c1:18:51:7d:0a:a5:
bf:88:6d:3e:58:94:85:fd:97:6f:01:59:8d:af:28:
a9:b7:c6:a5:18:63:f7:78:0f:97:42:1c:2a:59:07:
4d:ea:e3:be:95:e6:6a:72:4e:91:39:cc:83:d8:c2:
fd:7d:e0:6c:c4:f0:25:da:49:74:50:95:58:81:7b:
ab:bf:8c:ba:dc:99:d6:ad:e1:98:a5:7c:48:4d:ab:
7a:64:42:12:e0:77:37:12:0d:cd:b7:36:60:97:05:
4b:cc:22:fc:3e:cf:4f:c4:2a:c0:6a:5e:f3:4c:cf:
24:00:1d:e3:a2:af:2e:83:c9:04:30:8b:4d:f0:5c:
f7:25:29:31:11:04:e8:d2:1e:63:89:00:6c:25:6e:
4e:ba:32:31:d9:37:e4:7d:a8:19:41:0c:5d:34:14:
8d:db:00:df:c6:d6:70:93:4a:5c:a7:5e:b0:d6:b5:
0d:79:db:f5:3c:86:ad:7f:ed:60:32:34:ba:6e:27:
d1:ba:da:35:7b:49:7d:82:25:77:1e:26:84:3f:97:
08:aa:d3:38:06:ef:75:4b:ac:ba:49:fa:fd:e8:de:
bf:13:90:91:42:bd:7f:69:93:17:00:52:a5:49:99:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:90:29:7F:F4:41:2E:CA:E0:12:CC:1A:82:F4:A3:7F:92:8E:C5:40
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4pApf_RBLsrgEswagvSjf5KOxUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
193.124.7.0/24
194.87.169.0/24
194.87.245.0/24
195.133.25.0/24
212.192.1.0/24
212.192.208.0/24
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
35:24:84:26:4e:d9:92:17:b3:af:90:8f:86:a5:3d:fe:34:7e:
bb:81:55:5d:ab:bb:2b:b1:14:95:a1:9d:7e:15:8b:ff:e0:3d:
03:aa:e4:fd:bd:a3:86:41:cc:78:75:83:4c:09:f5:0c:ff:97:
a7:18:de:41:89:82:70:c8:b5:1b:30:9c:f7:29:2d:eb:1e:9c:
a9:e2:58:d6:24:e1:61:21:65:ef:a2:c4:59:80:2c:75:71:dc:
40:f9:3c:e9:6e:c1:b4:d3:13:5e:98:96:5e:e0:2f:d0:31:c6:
b1:5a:bd:bb:f7:55:9c:8f:6e:69:2c:d6:27:b4:91:cb:a3:35:
51:0a:d0:76:78:ba:d0:0e:7a:f4:ca:f2:e9:40:36:e3:df:2d:
e1:42:f0:24:bf:e5:ea:1e:09:c8:38:ac:cb:95:f0:80:e1:c7:
45:9f:f5:2a:e1:0b:19:e3:6b:76:c7:8b:a1:92:db:7e:0d:6d:
7a:2f:f5:92:91:6c:d8:96:d7:ac:e1:87:8e:6b:40:aa:51:97:
91:80:92:8e:9f:3a:e7:8d:38:be:d5:b1:44:13:9c:77:0a:a6:
7f:a3:bd:55:d7:45:1d:4e:05:e9:f7:c8:3b:ba:d1:78:72:4f:
67:03:fd:6c:80:6c:a9:c7:ed:ce:26:6b:f5:ed:3a:50:d8:2d:
05:ec:f9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 16:20:20 2024 by rpki-client on console-ams.rpki-client.org