Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DA7wcI7ehZyT6Jw0vXYZzhPdSwM.roa
File: DA7wcI7ehZyT6Jw0vXYZzhPdSwM.roa (raw, json)
Hash identifier: uC79euz94hvLKAk96DxmJwaJLokn/pnjuPMcKT9Aeyc=
Subject key identifier: 0C:0E:F0:70:8E:DE:85:9C:93:E8:9C:34:BD:76:19:CE:13:DD:4B:03
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185E88ED717C5E9CB01B7ED3115EAC3A64C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DA7wcI7ehZyT6Jw0vXYZzhPdSwM.roa
Signing time: Wed 25 Jan 2023 10:52:33 +0000
ROA not before: Wed 25 Jan 2023 10:52:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 194.87.205.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.139.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Jan 2023 09:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:8e:d7:17:c5:e9:cb:01:b7:ed:31:15:ea:c3:a6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 25 10:52:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c0ef0708ede859c93e89c34bd7619ce13dd4b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:7a:d4:9c:02:bf:42:73:e0:94:b6:7f:47:
dc:d5:ca:7d:8e:75:cf:46:85:f3:88:36:d5:a3:b4:
2d:99:07:5f:72:a8:11:dd:eb:9d:c6:41:4e:41:67:
85:48:7e:94:ba:1b:06:ae:33:d5:b9:86:f6:20:c3:
ae:56:a2:f4:86:34:38:1a:c4:30:ef:2b:93:41:4a:
40:db:9e:a8:e3:01:ec:79:61:9b:c7:a5:f1:b3:cc:
5c:a8:ce:f0:80:3f:1a:c1:09:88:b0:18:1f:b5:f1:
b0:5a:c8:b5:e0:47:9b:ad:24:8d:87:c4:51:4d:50:
fd:c9:a6:76:8d:8c:96:63:40:87:4d:56:f8:35:ac:
df:b1:43:29:f8:44:91:66:63:de:82:14:b7:94:c1:
69:84:cd:84:a7:a1:ae:e9:a8:51:d5:a3:f3:32:3f:
ca:12:5f:25:2c:38:ef:47:66:69:5e:77:b2:96:b3:
3a:5a:1f:36:5b:a9:95:03:6d:fb:76:bb:bf:ef:33:
81:42:47:e0:b0:5e:db:89:b9:72:c7:42:58:11:97:
29:c3:bf:2c:ba:aa:5c:3c:60:fe:d7:9d:30:04:ab:
e1:15:df:d9:bb:45:fa:7a:b1:f0:76:85:4b:fc:34:
93:ab:4d:f8:8c:aa:ad:72:69:60:a4:26:d3:b7:6b:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0E:F0:70:8E:DE:85:9C:93:E8:9C:34:BD:76:19:CE:13:DD:4B:03
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DA7wcI7ehZyT6Jw0vXYZzhPdSwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
192.124.180.0/24
193.124.46.0/24
193.124.90.0/24
193.124.200.0/24
194.58.40.0/24
194.87.2.0/24
194.87.10.0/24
194.87.122.0/24
194.87.124.0/23
194.87.139.0/24
194.87.205.0/24
194.87.233.0/24
194.87.252.0/24
195.58.51.0/24
195.133.76.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
54:6a:9e:69:39:5d:95:7a:9a:e8:9f:60:81:5a:4f:a7:66:3a:
02:85:ab:53:3b:03:22:d7:29:76:f5:67:0e:4f:70:de:00:24:
fc:b4:cd:c9:43:a0:b1:c1:b1:e9:6b:b0:20:17:32:ef:06:36:
85:3f:22:a8:8a:99:38:14:3f:17:bf:0e:63:d9:fa:c6:a4:2a:
4d:a6:c8:2b:9f:40:37:94:78:49:55:e5:d4:50:fc:e9:ae:18:
1f:76:c4:60:a4:f5:c7:ad:ad:4a:aa:be:d1:7f:23:b9:f7:c2:
7a:bc:52:e9:1b:6b:42:cf:bd:5d:07:a4:d7:d6:af:b0:52:9a:
a4:6c:0b:b6:c3:b1:e6:c2:7e:0b:b1:70:ed:d7:d4:8e:39:bc:
df:b9:b2:cc:4a:6b:a1:09:a0:1d:6c:49:b9:ed:5c:af:e5:4d:
2e:6a:12:62:25:c7:73:9c:e2:f1:5d:bc:41:07:de:99:ac:be:
21:1d:21:38:5e:53:13:55:37:f1:09:ab:39:a2:80:9f:d9:ec:
65:31:8b:c5:f1:f8:82:15:c8:f7:e6:b7:1a:6e:de:e7:ed:76:
ba:15:8b:2e:4f:d4:aa:a0:f7:d4:5e:7b:7c:d0:8b:52:18:67:
e9:9d:c7:59:d6:2e:99:b5:39:f9:08:c4:0f:ba:9a:8c:7d:ef:
42:29:e5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:09 2024 by rpki-client on console-fra.rpki-client.org