Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5vvwqHavE4cZs_YUxV2T5CTxGK4.roa
File: 5vvwqHavE4cZs_YUxV2T5CTxGK4.roa (raw, json)
Hash identifier: PCZYn0XkGu6txtlMyDbWCoaAIcmHJoNG1Ny/GK2Pns4=
Subject key identifier: E6:FB:F0:A8:76:AF:13:87:19:B3:F6:14:C5:5D:93:E4:24:F1:18:AE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C91AC027826718D511E23C54C190B5BE8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5vvwqHavE4cZs_YUxV2T5CTxGK4.roa
Signing time: Fri 22 Dec 2023 13:16:58 +0000
ROA not before: Fri 22 Dec 2023 13:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208287
IP address blocks: 193.124.7.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:ac:02:78:26:71:8d:51:1e:23:c5:4c:19:0b:5b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 22 13:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6fbf0a876af138719b3f614c55d93e424f118ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:6b:92:d2:aa:e8:3c:5b:1b:9f:41:17:22:
44:51:1b:9d:c8:1a:49:07:d9:2e:ae:72:c3:1a:c1:
93:85:22:94:31:d6:db:40:8d:74:e3:9e:e2:4c:f2:
1f:3d:49:83:e0:6b:11:aa:ef:b2:f8:e6:1e:24:e7:
21:5c:76:52:7d:95:db:c6:67:2f:5d:9a:ed:0c:00:
db:6f:e0:5f:29:da:a0:bf:84:93:a9:6e:8a:41:13:
8a:67:96:fc:48:fd:53:24:46:3c:83:c8:1e:d0:7f:
a4:57:5f:f8:6f:5e:dd:7a:a6:8a:c7:2f:d5:f6:77:
f5:4a:de:25:bd:4d:77:f2:fb:5c:20:da:ca:98:f8:
d0:a8:e7:0b:da:df:ea:45:91:1c:b5:e1:2f:1d:b2:
6a:be:4c:63:9d:7e:c2:f2:80:10:e7:fd:2f:a0:07:
61:a8:6d:30:76:f8:60:18:d9:73:4e:13:a4:99:81:
db:78:83:34:c5:8a:8a:d6:45:28:36:56:3b:db:c0:
a1:e4:48:0d:71:e0:64:14:70:8a:f6:2a:3f:1e:98:
5b:56:40:f6:ed:09:01:b7:c9:f3:f7:43:15:5a:29:
b6:5b:7c:97:3e:14:04:60:25:c5:82:7b:d2:36:8b:
ca:23:8a:ea:93:70:17:9f:d7:76:ce:06:b1:9d:8c:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FB:F0:A8:76:AF:13:87:19:B3:F6:14:C5:5D:93:E4:24:F1:18:AE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5vvwqHavE4cZs_YUxV2T5CTxGK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
193.124.90.0/24
193.124.200.0/24
194.58.154.0/24
194.87.190.0/24
194.87.215.0/24
195.58.34.0/24
195.133.6.0/24
195.133.85.0/24
Signature Algorithm: sha256WithRSAEncryption
63:83:8c:a2:24:b4:ad:2d:b8:03:b2:3d:c2:5f:8c:39:c9:98:
4b:6f:4b:6d:34:2d:ce:cd:3a:20:ff:e6:b9:fd:2d:90:d2:20:
e7:4f:e8:fb:6a:d0:28:da:7e:47:7f:ab:a0:6b:86:03:b1:4c:
23:60:00:16:6e:0d:61:f8:29:51:1f:a0:34:28:e1:92:c4:25:
d8:e0:01:4d:99:c5:5a:43:64:ae:a0:f0:fa:a8:20:0b:88:c0:
e3:66:6e:c7:74:a0:81:5b:1d:95:3a:a8:9c:75:4d:1b:b2:f5:
41:1e:c7:34:cb:cb:96:a7:69:3d:8c:81:b0:9c:2d:35:3f:5c:
7c:58:4d:f7:dc:ba:6f:33:55:f8:f6:19:74:ef:b0:80:fa:c1:
7b:7c:63:be:ed:f1:e1:4b:d2:c0:99:ba:18:ae:89:a6:90:c2:
53:1c:41:60:d6:7a:04:4d:f8:0b:b9:9d:b8:78:eb:6c:e7:09:
b3:6a:d3:ff:d6:93:fb:f5:ee:1f:a8:ba:d7:d2:c4:b6:eb:42:
40:56:c8:d2:4e:52:1e:e9:7b:da:19:3d:d3:69:b4:4f:c1:e8:
18:17:bb:ab:d3:24:17:c9:bf:f4:56:71:04:bf:09:fd:2f:30:
e7:c2:20:46:68:bc:e2:eb:8a:58:fb:77:70:a3:5d:21:6b:18:
a4:9e:88:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:20 2024 by rpki-client on console-fra.rpki-client.org