Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CuHbFf1qVabZF1Af6P7LHzBb5Mc.roa
File: CuHbFf1qVabZF1Af6P7LHzBb5Mc.roa (raw, json)
Hash identifier: dT9x03c3h7aX2g5fQ7nTMnqbMMDGQIGIyupsTwF0Qkc=
Subject key identifier: 0A:E1:DB:15:FD:6A:55:A6:D9:17:50:1F:E8:FE:CB:1F:30:5B:E4:C7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C1C34F502EE16A1A58A97DCE55F2C4AE3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CuHbFf1qVabZF1Af6P7LHzBb5Mc.roa
Signing time: Wed 29 Nov 2023 17:51:21 +0000
ROA not before: Wed 29 Nov 2023 17:51:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 212.192.221.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1c:34:f5:02:ee:16:a1:a5:8a:97:dc:e5:5f:2c:4a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 29 17:51:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ae1db15fd6a55a6d917501fe8fecb1f305be4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:b1:a4:fd:a6:fd:06:85:d5:c8:72:f7:af:
ad:20:e6:fa:53:7e:bb:21:ff:d3:42:e4:d6:23:df:
dd:e0:98:3e:cc:40:b8:46:f1:5a:11:36:a3:38:4f:
d1:05:32:0d:16:95:0b:59:89:38:14:87:9a:ca:43:
56:f3:3e:84:30:dd:d7:42:8b:77:e6:34:f5:97:71:
9b:d4:ff:60:99:c0:ba:91:1a:5b:80:db:c6:67:b5:
97:af:f4:d4:b3:e5:00:3a:f9:93:52:c9:89:27:fa:
d0:bb:22:01:46:76:5d:45:ee:81:84:58:09:23:2e:
eb:df:c9:b4:1f:7f:06:06:45:3c:aa:82:0a:51:47:
a1:ed:5a:7e:37:0c:75:38:ff:0c:a4:96:1a:a8:6b:
5e:24:8f:1a:57:58:da:f4:fd:d6:11:53:4f:f3:a8:
c8:07:22:22:01:56:c2:fa:ac:3f:66:ad:41:77:c5:
15:d5:f3:bc:32:52:be:df:dc:7d:1d:19:a1:f0:b3:
ce:89:63:2e:2c:e9:5d:8a:b7:8f:a4:d6:a8:18:d2:
d1:a2:10:9f:f9:ec:9d:fb:7d:cd:34:62:97:96:7c:
aa:9b:a5:69:ef:86:ea:44:df:b7:d8:55:4e:59:89:
98:f8:72:22:07:a7:1d:71:a5:0c:53:c6:67:8b:e0:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E1:DB:15:FD:6A:55:A6:D9:17:50:1F:E8:FE:CB:1F:30:5B:E4:C7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CuHbFf1qVabZF1Af6P7LHzBb5Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.181.0-192.124.182.255
192.124.188.0/24
192.124.190.0/23
192.124.209.0/24
212.192.221.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f1:25:f2:de:8b:01:50:d6:97:24:6f:d5:3a:4b:5a:13:9e:
23:5b:48:10:df:5c:28:08:6c:ab:a4:79:38:62:44:61:8d:23:
51:56:c7:a2:31:d5:ff:f3:08:be:54:1f:d6:95:bc:83:84:e9:
60:4b:43:06:0b:74:e9:c8:b6:b6:e7:b2:d0:f9:06:35:0b:d3:
27:7e:08:c5:a5:4e:db:f8:2d:6c:53:b4:93:f8:87:3b:4c:48:
81:09:1e:af:93:aa:e2:c7:fe:a6:72:03:eb:fd:a5:cb:77:e4:
90:98:f2:47:1c:15:95:cc:e5:a2:22:32:c5:8e:6f:0e:fa:e8:
64:28:c7:6b:bd:2d:6d:2a:31:91:77:87:74:ba:60:14:34:bc:
3e:2f:6a:00:2c:07:20:f4:f8:09:ef:90:65:f5:2e:0b:d4:82:
df:a9:c6:43:8a:2d:16:24:b0:cd:45:a6:bd:a9:a7:cc:bc:e9:
23:81:45:96:60:42:05:83:c7:15:ad:d2:b9:b7:1f:8a:0e:15:
b8:0b:2e:60:d2:65:2b:fd:df:0c:28:52:37:f4:9d:a8:f3:84:
9a:12:41:49:c6:a2:86:e7:9c:4a:b6:3a:24:b3:40:15:56:02:
e7:c9:48:87:ad:1e:a5:43:0a:db:70:2a:8e:d0:55:19:7a:37:
fe:91:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 19:16:26 2023 by rpki-client on console-ams.rpki-client.org