Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6-xCTcYhuTOIylJodgXvIHscMFQ.roa
File: 6-xCTcYhuTOIylJodgXvIHscMFQ.roa (raw, json)
Hash identifier: 3X1/lG/trh0t0iw/ZpF0jnC0dDDBo7+fSZ6VXpTozko=
Subject key identifier: EB:EC:42:4D:C6:21:B9:33:88:CA:52:68:76:05:EF:20:7B:1C:30:54
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187FB84FD32DE8B80EA10FB600B83A6FAE1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6-xCTcYhuTOIylJodgXvIHscMFQ.roa
Signing time: Mon 08 May 2023 13:20:09 +0000
ROA not before: Mon 08 May 2023 13:20:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 195.133.76.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
195.133.91.0/24 maxlen: 24
195.133.90.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
193.124.35.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.248.0/24 maxlen: 24
194.58.56.0/23 maxlen: 23
195.133.64.0/22 maxlen: 22
194.87.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 09:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:84:fd:32:de:8b:80:ea:10:fb:60:0b:83:a6:fa:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 8 13:20:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebec424dc621b93388ca52687605ef207b1c3054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:a0:e5:c5:db:e2:d4:bd:67:d5:83:14:8c:
e3:f6:4c:e6:e9:6e:c9:01:81:e8:b1:20:66:d7:f0:
e2:50:22:e7:d2:55:1a:3c:bf:08:bd:60:e2:95:81:
4f:8d:59:1d:c1:0b:33:56:7e:4f:1d:ad:7d:3a:dd:
b7:ea:38:2a:fd:a5:d0:9a:e2:c8:b2:87:2d:48:39:
2f:eb:48:e9:4b:9c:0b:b3:07:58:82:fe:34:b6:79:
45:25:9b:83:59:0c:17:8f:3b:1e:4d:30:75:1d:d4:
e9:30:9f:5b:31:59:15:73:0d:63:98:b9:82:b2:e4:
d3:24:b7:86:d8:24:4e:38:5f:b2:da:61:6c:96:35:
f9:fd:01:b8:db:76:65:f1:ad:ff:94:24:74:a1:aa:
97:c7:3d:16:2f:c1:ff:d9:e0:9d:7a:10:d0:fa:0f:
66:d7:73:5a:4a:8c:f8:5e:de:34:3e:99:1d:38:4c:
ab:5b:45:3b:62:2a:d6:5b:33:69:3a:6a:f5:4a:c8:
05:9b:6d:cb:28:40:bb:ca:9d:17:2e:89:0a:bb:47:
d2:31:84:9a:7a:52:f9:f2:f7:ee:19:dd:e0:69:4a:
74:fd:f8:9e:e7:b7:5b:f1:ec:1e:08:f8:47:33:b2:
dc:70:21:fc:d1:d0:9a:bd:0c:e1:16:d2:63:74:c1:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EC:42:4D:C6:21:B9:33:88:CA:52:68:76:05:EF:20:7B:1C:30:54
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6-xCTcYhuTOIylJodgXvIHscMFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.35.0/24
194.58.40.0/24
194.58.56.0/23
194.85.248.0/24
194.85.251.0/24
194.87.10.0/24
194.87.17.0/24
194.87.255.0/24
195.58.38.0/24
195.133.64.0/22
195.133.76.0/24
195.133.90.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:6b:4c:7b:10:f4:6b:29:49:46:6a:05:b7:28:06:5b:a1:de:
20:c6:28:5f:af:91:ab:c8:68:c5:e0:8d:30:48:76:07:67:3a:
41:a4:52:55:b8:7f:bd:9a:18:ef:b6:3f:46:7a:53:db:9e:2e:
2d:69:6a:63:90:48:8d:30:d5:b2:f2:eb:de:43:9f:e4:dc:98:
00:0f:2b:d5:42:83:97:ba:1f:62:ee:ab:ad:89:e9:23:c4:dc:
ca:6e:9f:8e:6d:76:e6:a0:4a:56:b8:fd:a4:39:ae:52:98:0f:
05:10:d7:14:76:e7:3d:1b:d9:a4:0d:0a:c4:ce:c2:73:42:84:
df:8c:42:52:67:d9:eb:35:63:a1:91:55:dd:96:75:8b:0a:bf:
e3:22:85:ab:06:f5:60:7d:78:b6:7e:c3:28:ac:d0:bc:40:d1:
74:71:61:b4:d5:98:5e:e1:d3:34:b9:7d:2e:c2:84:dd:b9:7e:
65:1a:8c:d9:b0:f8:27:1b:79:14:d4:69:62:0e:5d:1e:7e:d5:
83:88:cf:7b:69:4e:d2:e8:5e:d4:fc:0e:d0:d4:64:ee:15:ed:
ab:80:79:64:ac:11:dc:8a:57:ae:5a:a2:fb:48:fe:fa:92:0d:
be:5d:9b:8c:4a:5e:b8:d3:46:f3:3b:c7:53:91:3c:cb:09:b9:
c3:58:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:06 2024 by rpki-client on console-fra.rpki-client.org