Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DwmhRueUnmLunMrcjIuyIf3eGRw.roa
File: DwmhRueUnmLunMrcjIuyIf3eGRw.roa (raw, json)
Hash identifier: WeArbpCgPX+3qMHUQGp6Y58DxVmGQSz14OXaVMsw/Pk=
Subject key identifier: 0F:09:A1:46:E7:94:9E:62:EE:9C:CA:DC:8C:8B:B2:21:FD:DE:19:1C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188B9DFAD0C491C6E2FD08CC87BBADCC59D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DwmhRueUnmLunMrcjIuyIf3eGRw.roa
Signing time: Wed 14 Jun 2023 12:27:03 +0000
ROA not before: Wed 14 Jun 2023 12:27:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 195.133.82.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Jun 2023 13:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:df:ad:0c:49:1c:6e:2f:d0:8c:c8:7b:ba:dc:c5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 14 12:27:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f09a146e7949e62ee9ccadc8c8bb221fdde191c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:ac:39:9c:f3:74:a0:19:84:98:dd:38:98:
29:52:d0:99:94:e5:89:f1:fe:c0:3c:05:79:80:2d:
53:f4:4e:53:e1:b6:8b:00:89:09:15:82:96:8d:d8:
88:c3:ea:be:97:0b:01:cb:ce:42:1a:e5:d7:e6:35:
84:c7:fc:7f:d3:22:4c:23:42:ec:73:fc:5e:6e:d3:
d9:79:90:a5:72:be:a2:82:32:07:44:92:fd:ae:b8:
f3:ef:ae:4d:6f:ec:34:09:a3:4a:17:c8:2a:e0:5c:
7a:47:36:f8:4c:56:4a:8d:22:e2:d2:e9:af:b2:75:
7e:ec:d2:eb:76:6d:33:c9:64:7a:33:9e:50:45:08:
d5:58:9a:67:7a:59:ad:9d:25:60:7d:33:f4:40:e0:
86:5a:c1:d5:d3:9e:9b:e2:da:d6:32:a2:d3:3b:df:
b8:e3:f1:23:97:f8:8c:0b:f3:09:a6:1d:aa:bd:eb:
e4:ef:d0:7c:89:2c:c7:9e:59:d6:71:f9:c9:6a:d4:
1a:d4:12:bf:7b:19:7a:2f:2a:40:09:a5:d7:92:2a:
da:27:11:eb:f5:bb:d5:03:a3:57:88:aa:55:dc:cd:
02:03:96:32:53:9d:65:18:f7:b9:5c:5e:73:55:6f:
2c:e9:bf:e2:28:b5:56:42:0e:d0:a8:df:96:77:c5:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:09:A1:46:E7:94:9E:62:EE:9C:CA:DC:8C:8B:B2:21:FD:DE:19:1C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DwmhRueUnmLunMrcjIuyIf3eGRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.183.0/24
193.124.45.0/24
194.58.58.0/24
194.87.44.0/24
194.87.121.0/24
194.87.165.0/24
194.87.171.0/24
195.133.82.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2d:55:88:13:55:f5:e1:21:41:db:0c:b7:ef:0e:0a:e8:8a:
66:61:fd:5a:7f:77:00:cc:48:e9:6b:4b:8c:b8:1b:08:17:f0:
f3:07:99:03:55:e6:d8:6a:e5:cb:ab:bd:b7:e8:63:10:df:6f:
50:e5:a5:d7:67:6d:38:89:da:b8:44:cd:a3:7a:ce:ba:3c:ae:
1a:86:18:0d:7c:cf:40:4c:33:e5:bf:41:10:af:bc:45:e0:6c:
91:96:93:ba:48:ef:e6:bb:bc:63:36:e3:cd:3c:79:ee:b5:79:
11:06:c4:35:94:0e:e1:39:09:27:2a:89:ac:88:f9:bb:57:55:
65:68:ae:5a:85:cd:5b:cd:60:82:f7:d6:2d:a9:19:4c:79:74:
07:7a:5d:2f:9a:87:80:23:45:d2:99:b7:91:72:ad:18:06:0e:
d7:29:07:b7:c1:23:59:41:96:12:60:01:08:9d:a8:42:25:f5:
61:06:c4:bf:9a:09:fd:d1:ce:85:d8:fc:9d:80:f4:67:9d:4a:
ab:33:b2:32:85:4f:b8:4d:91:57:3c:8f:2e:f4:b7:e8:21:8d:
95:11:fb:3b:ac:2f:01:60:9a:b7:54:aa:d8:84:b1:6d:93:60:
45:7c:d5:46:f0:59:60:b9:d8:26:f7:23:7d:75:03:41:b9:d3:
29:a0:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:10 2024 by rpki-client on console-fra.rpki-client.org