Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7YN7aL85U3ev-sRSgrktNs0o50Q.roa
File: 7YN7aL85U3ev-sRSgrktNs0o50Q.roa (raw, json)
Hash identifier: IqbEhctNfSQSWjIxn4Ik4QhQs09nhUje/GgMFEkz9Ag=
Subject key identifier: ED:83:7B:68:BF:39:53:77:AF:FA:C4:52:82:B9:2D:36:CD:28:E7:44
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCEE4C5D1A6B48A5918C14D3E2AD5A8C0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7YN7aL85U3ev-sRSgrktNs0o50Q.roa
Signing time: Wed 03 Jan 2024 10:35:48 +0000
ROA not before: Wed 03 Jan 2024 10:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 212.193.12.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:e4:c5:d1:a6:b4:8a:59:18:c1:4d:3e:2a:d5:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 3 10:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed837b68bf395377affac45282b92d36cd28e744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:68:be:30:31:b3:f2:8c:55:d0:2c:a1:08:
d9:79:b0:e0:28:17:e6:74:c2:83:6c:7a:7c:96:f3:
ec:5b:bc:90:e3:0c:3d:21:ec:4b:d6:8e:98:53:97:
fa:f1:c2:5a:7f:d7:b0:3d:01:17:73:f2:33:21:d6:
2c:58:a5:ea:68:0f:b2:18:c2:69:55:88:9d:f0:e7:
28:94:90:c8:12:b1:2f:85:d4:93:44:f2:25:c4:11:
8b:2b:97:82:7d:f7:59:95:ad:ba:5e:ce:27:92:7d:
55:1d:d5:a9:1c:91:13:b7:8f:f3:8d:85:35:dc:8e:
87:9f:ed:b6:02:8d:15:89:02:c1:5e:dd:af:d9:24:
df:c8:c3:7d:bc:2d:8d:db:dc:c8:d8:30:6c:69:5b:
cb:5e:37:bd:ad:26:af:75:8a:66:1c:75:88:07:7e:
72:e3:28:b4:aa:c7:1c:24:77:c0:a8:b4:9c:4a:b5:
e1:14:b7:27:fd:4d:fb:b8:a3:45:15:ad:0c:96:d8:
1c:92:11:6f:9b:f8:b3:51:59:49:84:9c:89:94:00:
6c:88:91:e6:37:ac:75:e3:b6:14:12:d0:03:52:3d:
94:c0:0b:f0:46:94:9d:90:a3:d2:d8:c5:9f:1d:02:
6b:0a:26:20:3c:e0:14:68:e3:de:f3:83:03:4f:35:
3b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:83:7B:68:BF:39:53:77:AF:FA:C4:52:82:B9:2D:36:CD:28:E7:44
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7YN7aL85U3ev-sRSgrktNs0o50Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
193.124.95.0/24
194.87.26.0/24
194.87.128.0/24
194.135.33.0/24
212.192.214.0/24
212.192.222.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a8:a4:d3:d6:56:ee:d4:2c:1f:b4:3c:c8:a4:d0:06:ae:ed:
b6:08:49:7d:b6:d8:ea:50:1e:54:07:32:c3:d3:92:21:45:d5:
61:76:75:54:8a:ee:e3:ae:40:83:39:d7:8f:00:7c:7b:bf:b2:
08:42:12:4d:0b:28:4b:57:37:76:42:7e:77:bb:7f:cb:ee:d7:
28:9d:11:f5:fe:9f:ec:41:3c:5c:ff:28:4a:be:d4:9b:c4:45:
25:16:e8:bb:f2:6f:db:60:e1:19:03:30:6f:c7:ef:19:0b:ab:
65:35:bc:27:ef:3b:0c:17:46:0b:43:cd:ac:12:9e:34:39:17:
1c:18:56:95:9a:63:65:b2:ef:6d:90:9b:c2:5a:47:41:5f:5e:
d7:0f:40:ae:ba:00:a5:05:65:40:7c:9d:30:59:7a:4b:c2:81:
40:f0:e5:e4:40:cc:23:a0:c9:db:11:29:5e:a9:ed:80:a0:36:
41:5c:27:ec:04:31:9a:77:da:17:9e:4b:5c:40:42:73:1d:56:
9c:25:fd:9b:00:b3:d4:4d:ba:1e:fa:bd:9b:1e:09:a5:11:05:
3d:3a:54:17:97:6f:fd:b5:09:03:6f:05:9f:2b:72:d1:03:4b:
88:c2:78:cc:2e:2c:bd:ba:f3:58:c1:94:92:af:19:56:fb:4a:
48:5c:aa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 16:21:21 2024 by rpki-client on console-fra.rpki-client.org