Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CYA4CE6lij-dnxta46hd0Khs07U.roa
File: CYA4CE6lij-dnxta46hd0Khs07U.roa (raw, json)
Hash identifier: 3H3pTWnizXQ0POm7SIHNNPxJm7AY5ZDMO1552gYuZGQ=
Subject key identifier: 09:80:38:08:4E:A5:8A:3F:9D:9F:1B:5A:E3:A8:5D:D0:A8:6C:D3:B5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCE9F584AB43E5B4045EA5A5C38C60337
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CYA4CE6lij-dnxta46hd0Khs07U.roa
Signing time: Wed 03 Jan 2024 09:19:58 +0000
ROA not before: Wed 03 Jan 2024 09:19:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210107
IP address blocks: 195.133.2.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 11:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:9f:58:4a:b4:3e:5b:40:45:ea:5a:5c:38:c6:03:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 3 09:19:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=098038084ea58a3f9d9f1b5ae3a85dd0a86cd3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:c1:74:f6:ff:00:95:87:c6:a8:49:25:08:
7c:57:8a:5c:8b:d7:bf:7e:53:49:47:f9:5b:a2:3c:
44:db:dd:a2:c1:b1:53:80:a6:f4:38:2d:a8:15:9a:
4d:38:62:9e:d5:4f:49:0a:08:18:43:30:bd:31:ea:
49:79:09:76:dd:e3:71:bb:bc:ad:95:fc:55:6b:a2:
bb:65:11:6a:d6:83:2e:6a:3c:c2:ab:0a:c5:77:1b:
16:ec:87:03:ed:4e:0c:b8:24:85:13:b5:ce:b7:85:
18:80:ef:ca:6a:09:c7:79:87:c8:a1:5a:64:22:aa:
c4:ab:b9:e0:28:db:e8:b3:b4:2d:37:1b:33:7c:76:
ff:c8:d4:e0:36:3f:74:7a:72:9a:60:b1:ac:f5:63:
de:fd:ab:d3:89:8e:71:ac:64:39:8f:f6:d7:6c:2c:
32:09:29:3d:a9:dc:81:65:19:47:0c:69:65:dd:8e:
df:01:db:4a:7d:ee:53:97:6b:b5:48:b8:52:b7:44:
04:9c:01:60:35:08:7d:78:02:88:e4:0b:4e:30:a7:
37:9e:23:f3:3d:5c:63:66:f8:84:bd:53:5b:fe:ab:
07:03:7a:74:29:68:c9:8c:5c:82:ac:2b:50:6f:89:
f8:f1:60:6e:3d:e6:cb:96:7a:22:57:27:2a:16:e0:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:80:38:08:4E:A5:8A:3F:9D:9F:1B:5A:E3:A8:5D:D0:A8:6C:D3:B5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CYA4CE6lij-dnxta46hd0Khs07U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.183.0/24
194.58.42.0/24
194.87.81.0/24
194.87.149.0/24
195.133.2.0/24
212.193.0.0/24
Signature Algorithm: sha256WithRSAEncryption
09:72:43:db:b4:62:96:61:bf:ef:90:5f:bd:25:19:58:7d:e6:
5f:d0:86:1d:3a:a9:1e:36:14:3c:e9:52:cb:a5:34:b5:8a:ae:
21:c8:ff:4b:6b:2f:d6:91:3a:fb:29:18:b9:78:30:ed:fe:53:
90:bb:2c:95:7d:b8:40:54:34:82:d0:d1:57:7c:c1:b1:ad:b7:
87:76:e3:b0:9c:b7:80:0c:6d:40:2d:1b:b2:5b:35:51:83:37:
2b:94:93:a6:9e:3a:43:4a:98:c6:63:9e:99:fb:45:77:16:19:
cd:95:25:0e:f3:c0:14:92:a1:6e:85:6a:65:f5:dc:a6:d5:41:
70:21:62:ef:1b:d9:49:40:ec:f0:2b:4c:a1:0f:63:9c:10:5f:
8f:db:57:f2:90:49:e4:0f:43:7f:75:42:23:d5:8b:fe:f7:77:
df:a9:63:e8:1e:4d:f8:96:4c:22:f2:66:6d:41:c8:5c:53:03:
ed:0b:78:8a:bd:27:a2:8f:30:b5:4d:99:d9:22:49:4f:89:d9:
49:ea:e5:95:c9:0a:c0:e8:0c:e6:31:0c:b9:92:62:f4:b8:91:
14:fe:fe:58:67:e4:23:be:18:f1:72:39:83:64:f8:49:65:0f:
ae:12:6f:8f:60:c3:1b:2d:1c:8c:a4:1e:43:5c:9f:b5:79:35:
17:ac:ce:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 16:51:17 2024 by rpki-client on console-ams.rpki-client.org