Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6oRQak8Y-6vqOc4K7SmcdKqJTb0.roa
File: 6oRQak8Y-6vqOc4K7SmcdKqJTb0.roa (raw, json)
Hash identifier: 05nJnLlxqnBOZTG3WmkkbLPrIfURFRBMmwj61uktVV4=
Subject key identifier: EA:84:50:6A:4F:18:FB:AB:EA:39:CE:0A:ED:29:9C:74:AA:89:4D:BD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019201556DEC72FA346F858ED3180BF9D75B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6oRQak8Y-6vqOc4K7SmcdKqJTb0.roa
Signing time: Tue 17 Sep 2024 18:53:48 +0000
ROA not before: Tue 17 Sep 2024 18:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.58.155.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 23 Sep 2024 10:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:01:55:6d:ec:72:fa:34:6f:85:8e:d3:18:0b:f9:d7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 17 18:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea84506a4f18fbabea39ce0aed299c74aa894dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:45:b9:48:4b:55:86:dd:f7:88:a4:8b:20:0c:
d6:c2:fe:2e:8c:73:86:3a:af:48:25:c3:61:17:c1:
88:ff:1e:55:6e:57:2f:47:30:b1:18:3d:94:97:d5:
9d:6b:c8:08:08:de:cd:e4:3b:11:0c:44:90:1d:5d:
84:7f:06:a5:db:51:4b:92:a7:2b:25:52:b6:5c:12:
5e:11:0f:89:43:76:4b:91:e7:4e:c1:44:98:4f:0f:
98:71:bf:5f:b4:30:df:c4:48:8c:4b:70:7f:83:90:
c0:8c:a9:90:cb:5f:9f:32:33:b9:c1:28:d4:fd:eb:
d6:97:c3:ee:6b:29:56:74:63:1b:02:e7:9f:d2:39:
d5:60:51:c1:7f:5f:c8:ed:54:b0:98:04:58:b2:ee:
d0:be:1f:44:55:01:82:8f:48:0f:46:18:38:6c:00:
4d:0d:27:e2:16:a2:aa:d3:f9:da:71:52:7e:a6:36:
95:63:98:a0:05:8d:fc:5d:2d:66:5d:ad:d0:3d:5b:
e7:97:a3:ce:41:de:70:9b:e9:7f:03:b0:1e:4e:63:
0c:96:71:84:4a:05:34:23:9e:dd:a5:ba:7e:0b:3a:
cc:51:8e:80:de:8a:43:e6:03:de:5b:85:1c:ef:35:
b6:f0:59:e3:3f:38:99:c3:71:fd:ff:b3:57:f1:07:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:84:50:6A:4F:18:FB:AB:EA:39:CE:0A:ED:29:9C:74:AA:89:4D:BD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6oRQak8Y-6vqOc4K7SmcdKqJTb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.155.0/24
194.87.82.0/24
194.87.169.0/24
195.133.24.0/23
195.133.50.0/23
195.133.92.0/23
212.192.1.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
05:8e:75:2a:79:89:4b:37:aa:8e:5e:00:1e:f6:a0:23:ee:53:
fa:3d:f1:85:e9:fc:e0:84:92:26:9c:3d:2b:41:3d:6c:eb:ae:
be:73:be:21:bf:cc:55:c7:e2:3c:52:8a:03:8d:e3:98:60:87:
b9:0d:09:7e:f5:1f:41:d1:ff:b1:8f:52:e5:5b:fe:18:31:c4:
8b:72:28:a9:62:6c:c5:74:81:e3:3e:af:36:a1:51:aa:01:b7:
b6:b2:2f:34:82:51:74:e0:40:b0:12:24:aa:c2:f1:e5:06:7d:
59:7f:76:ef:a6:e3:ad:55:d8:3c:91:90:7b:14:c6:be:bd:56:
95:6a:05:0f:75:e4:7f:71:b4:cf:86:29:fa:31:4d:6a:0a:73:
b4:f1:2f:0c:31:a3:bc:ad:8c:b6:29:76:4b:6e:9b:e1:5c:60:
89:54:43:1b:12:04:30:01:8f:4b:ec:3b:89:54:40:bf:b0:a8:
cc:bd:c7:f7:eb:c5:79:f0:ac:9d:2f:93:e9:3d:94:76:de:a2:
e6:6e:5f:06:90:10:20:f5:36:b5:d4:67:1b:80:30:dc:35:34:
9e:0f:eb:e6:69:15:8e:4b:d2:67:48:9e:c7:14:4d:81:1e:4d:
3d:7b:1a:f9:88:68:e9:c0:a3:f2:0b:c4:f0:cc:c3:06:3e:d7:
e6:68:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 15:22:07 2024 by rpki-client on console-fra.rpki-client.org