Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8sjdPZ3vQEpNV8fxj5552swmBD8.roa
File: 8sjdPZ3vQEpNV8fxj5552swmBD8.roa (raw, json)
Hash identifier: 70U0YflBEgfUjj/b2G1l902ReNSw8AACxE+UC3ly5k8=
Subject key identifier: F2:C8:DD:3D:9D:EF:40:4A:4D:57:C7:F1:8F:9E:79:DA:CC:26:04:3F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01887190C1F950B97726E07EAB6C2676F794
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8sjdPZ3vQEpNV8fxj5552swmBD8.roa
Signing time: Wed 31 May 2023 11:28:12 +0000
ROA not before: Wed 31 May 2023 11:28:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53850
IP address blocks: 62.76.224.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
185.72.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 05:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:90:c1:f9:50:b9:77:26:e0:7e:ab:6c:26:76:f7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 31 11:28:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2c8dd3d9def404a4d57c7f18f9e79dacc26043f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:12:90:f1:cd:71:9e:7d:92:cb:81:2f:21:cd:
dc:9e:e5:ee:0b:ae:a3:b7:9a:79:6f:09:29:36:9b:
3d:e8:99:5f:e3:08:fb:0b:3b:48:ea:18:46:4b:7a:
60:51:04:6f:94:7e:ec:3a:96:f1:ec:47:f6:42:10:
03:d7:04:31:9c:e6:3e:3f:9a:a8:d2:c9:85:a1:28:
d3:c7:11:45:b3:8f:d6:a2:9d:4f:e3:d8:b2:1c:f6:
3c:bc:34:6b:f7:9e:03:87:4c:d2:79:9b:70:8b:28:
bb:a2:9a:72:1d:51:24:8e:f9:7e:1d:04:94:58:68:
c8:e1:41:e1:19:45:a0:31:74:0a:93:02:46:7a:33:
6e:fd:a5:24:12:e4:53:d4:60:26:17:f6:ac:c2:93:
df:26:8d:e9:91:58:bf:33:f2:95:71:e4:93:3d:4a:
31:19:0c:d0:bf:d6:80:b0:fe:e7:34:fa:ba:fd:a5:
af:7d:fd:c5:25:c2:a4:96:d3:33:93:f9:a8:a0:68:
99:90:b7:79:b1:cb:5a:d9:af:d2:16:b2:90:14:fb:
c4:af:f4:aa:75:c3:8c:6a:d7:91:da:dd:46:b0:ec:
02:00:c7:7f:5e:ac:9f:4f:f5:53:61:3b:cf:23:8e:
27:a0:0b:2b:25:2c:05:1b:12:12:99:cf:db:a2:d8:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C8:DD:3D:9D:EF:40:4A:4D:57:C7:F1:8F:9E:79:DA:CC:26:04:3F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8sjdPZ3vQEpNV8fxj5552swmBD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
185.72.11.0/24
194.87.32.0/24
194.87.34.0/24
194.87.39.0/24
Signature Algorithm: sha256WithRSAEncryption
34:55:be:2b:b7:dd:ad:60:ef:e3:1b:b4:2c:d6:ea:60:68:55:
1a:84:5a:9b:8f:45:de:38:74:fb:c9:f1:5c:bf:3f:80:6f:7e:
5c:e3:01:8e:0f:a9:a6:51:93:e1:ba:d0:a4:f3:0e:df:b9:02:
21:54:9e:e7:7f:aa:ed:9c:ea:38:11:49:0c:84:0a:f6:22:6b:
d9:7f:6f:75:d9:c2:d5:12:55:b5:87:02:90:79:e9:b4:4c:fd:
5b:8f:b1:c8:3c:2e:3d:b6:0d:58:50:5b:c8:92:02:6e:ca:a3:
45:53:96:8c:42:4d:ba:b1:d7:8c:d2:af:52:81:ca:ec:7c:47:
60:1b:d3:74:44:c0:98:45:89:6b:ac:87:af:5e:1d:6e:56:8a:
1d:77:8e:d3:db:22:f1:f8:1b:83:b5:ef:aa:3e:4b:90:5b:85:
bb:85:52:fb:35:c3:b2:6d:98:63:eb:71:0d:57:5c:bc:9a:6e:
3f:36:d4:3a:7e:99:a5:1e:ce:bd:fd:f5:a9:db:5c:67:76:39:
a2:24:38:64:a1:a4:94:1b:54:c3:94:54:62:9e:62:34:1c:be:
0b:c7:17:5c:2a:ff:e7:0c:32:ec:a7:45:4e:a9:fa:46:75:3a:
b6:43:eb:ff:fa:2b:8d:1b:04:34:3b:e6:30:13:f6:ef:49:c2:
dd:b3:47:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:07 2024 by rpki-client on console-fra.rpki-client.org