Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Db8AVsVAcGojUwRZUiN-P-wAYMc.roa
File: Db8AVsVAcGojUwRZUiN-P-wAYMc.roa (raw, json)
Hash identifier: B2bGnq1jt1M7P2CE5Hkq4MLF1GjxiRFYSAv1zpIVZPc=
Subject key identifier: 0D:BF:00:56:C5:40:70:6A:23:53:04:59:52:23:7E:3F:EC:00:60:C7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185736E88C3CE7451F7819EF98CFF65437B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Db8AVsVAcGojUwRZUiN-P-wAYMc.roa
Signing time: Mon 02 Jan 2023 17:01:41 +0000
ROA not before: Mon 02 Jan 2023 17:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 194.87.205.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.139.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 13:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:6e:88:c3:ce:74:51:f7:81:9e:f9:8c:ff:65:43:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dbf0056c540706a2353045952237e3fec0060c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:d6:a3:3e:d8:3b:13:72:ad:5f:46:b2:36:
0f:2f:07:f6:60:51:89:fb:9b:80:1b:aa:28:56:04:
ea:1c:e4:62:5f:bd:10:04:81:6d:48:6c:bb:13:e2:
f1:4d:8d:11:6f:1a:3d:3c:dd:fb:fe:0c:92:d7:8d:
c4:7e:74:46:91:2e:cb:a3:0f:a9:38:62:cc:01:f5:
60:07:68:fd:4f:7a:b8:1b:e6:bb:91:ad:86:29:cd:
03:77:94:56:73:07:fc:ba:ef:92:3f:26:15:a1:bb:
34:5f:56:a6:1d:62:31:6e:bc:97:40:5f:c7:54:7d:
0f:cb:a8:7f:8e:bb:42:a4:89:7d:17:da:83:8b:3e:
6c:3c:b8:7d:3c:0e:cf:3d:89:ab:5f:75:ad:bb:fc:
e5:3d:18:dc:5c:0c:49:24:f2:e0:70:4d:59:48:92:
87:12:79:cd:72:24:b1:f8:83:00:f5:43:98:90:d7:
a6:6b:71:1d:93:c4:a7:7c:ff:54:78:36:c5:43:34:
9b:ce:0f:3b:4a:2a:bb:1e:b7:b7:6b:c1:ae:84:83:
ac:21:42:bb:d9:f3:0c:f8:04:de:47:7e:b6:9b:a0:
77:d2:ec:c5:2b:8e:ef:81:74:0c:6e:b3:80:f7:b8:
54:2d:df:df:bf:cc:80:9f:57:a3:3b:03:20:e9:17:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BF:00:56:C5:40:70:6A:23:53:04:59:52:23:7E:3F:EC:00:60:C7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Db8AVsVAcGojUwRZUiN-P-wAYMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
192.124.180.0/24
192.124.183.0/24
193.124.18.0/24
193.124.45.0-193.124.46.255
193.124.90.0/24
193.124.200.0/24
194.58.40.0/24
194.87.2.0/24
194.87.10.0/24
194.87.122.0/24
194.87.124.0/23
194.87.139.0/24
194.87.170.0/24
194.87.205.0/24
194.87.233.0/24
194.87.252.0/24
195.58.51.0/24
195.133.76.0/24
195.133.193.0/24
212.192.1.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f5:9c:55:9d:ad:c3:20:3d:9f:5e:60:da:a2:e5:3d:cb:dc:
1d:b5:27:dd:dc:e3:f8:e1:9b:91:bb:56:f0:f1:8b:b8:53:04:
01:6d:f3:29:84:55:15:ac:f8:1e:65:2b:2c:ee:fe:0d:a3:12:
9b:f3:13:8f:3d:6a:56:3a:09:68:e9:24:f9:5f:bd:77:ae:9e:
9b:4d:a0:3c:0d:2a:a3:cf:ad:af:d9:30:28:8f:e1:c7:11:74:
19:de:97:0b:4d:1d:75:b4:c5:1f:aa:30:6f:2c:c5:60:31:b6:
16:97:89:53:1e:2e:39:cf:bb:1e:bb:72:a4:d5:c1:fd:7c:24:
19:7c:9c:f6:25:dc:14:89:5c:f4:1b:96:54:3b:78:bd:d1:71:
a0:61:99:ea:92:9c:38:4a:a8:e2:a8:ec:bf:f2:6a:46:13:ae:
00:72:53:0b:ad:54:77:9b:02:15:0a:87:03:38:90:31:f2:16:
b1:e6:4c:bd:36:58:8e:00:20:a0:3d:05:db:02:ab:3d:30:25:
ed:55:11:34:99:ca:31:43:fd:03:04:e9:90:fd:55:be:27:ea:
75:8f:aa:81:93:f3:9b:e1:f3:08:52:6d:76:6a:84:4b:02:95:
40:a8:ed:12:07:ff:ab:fa:af:2d:bf:01:ba:44:93:56:38:ee:
6d:be:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:10 2024 by rpki-client on console-fra.rpki-client.org