Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ECnnTUccT3jfsgHFxBnov0yWckc.roa
File: ECnnTUccT3jfsgHFxBnov0yWckc.roa (raw, json)
Hash identifier: jCe1EmgBQp/8MvVy5MIuQwCeg2Ofs9wcKnCarimLtkA=
Subject key identifier: 10:29:E7:4D:47:1C:4F:78:DF:B2:01:C5:C4:19:E8:BF:4C:96:72:47
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B5CFC89A2D6E92A3EF2EEB47CB4E490BC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ECnnTUccT3jfsgHFxBnov0yWckc.roa
Signing time: Mon 23 Oct 2023 14:42:16 +0000
ROA not before: Mon 23 Oct 2023 14:42:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203639
IP address blocks: 212.193.14.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
185.72.11.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 05:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:fc:89:a2:d6:e9:2a:3e:f2:ee:b4:7c:b4:e4:90:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 23 14:42:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1029e74d471c4f78dfb201c5c419e8bf4c967247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:26:79:d2:de:fa:1b:4e:5d:a0:df:b0:f0:
d3:d6:a9:8f:0b:75:0f:c8:6c:bb:72:ac:45:c2:26:
71:54:1d:0e:71:f9:a5:e6:7d:ed:38:fd:5a:90:9b:
9b:43:d6:ca:33:70:53:42:b8:68:8e:79:af:16:a0:
55:d6:93:2a:f1:2f:17:d3:7a:02:3b:16:fc:72:af:
04:26:a7:7e:6e:a6:aa:54:5d:61:1c:f2:ab:9e:64:
3f:e4:25:19:04:b9:bc:63:6b:b7:16:c2:09:dd:37:
db:a7:58:8e:d5:60:ec:c4:24:1a:a6:1a:dd:f3:62:
bf:fd:aa:b6:fa:20:a6:76:6e:d8:81:6e:50:15:c5:
b6:59:a9:d9:02:79:c8:ae:65:40:c5:ec:10:5f:6f:
90:47:a9:67:07:f9:27:b9:c2:b6:59:61:a0:45:74:
f5:12:28:e9:c4:1e:d6:dc:b7:8c:39:be:e9:87:ed:
0a:e4:48:19:be:5f:f6:4c:a4:d2:e7:65:a2:ae:67:
ed:0f:58:59:07:2c:ba:9f:11:ba:54:d1:fc:e5:b2:
df:91:ba:49:d5:98:cd:81:62:ca:72:93:08:7b:7a:
75:2f:9a:ff:41:ca:20:b1:1d:df:6a:78:cc:a9:3c:
8a:a7:98:7b:2f:e5:e3:49:c1:6a:1f:32:92:a8:aa:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:29:E7:4D:47:1C:4F:78:DF:B2:01:C5:C4:19:E8:BF:4C:96:72:47
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ECnnTUccT3jfsgHFxBnov0yWckc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.11.0/24
192.124.180.0/24
193.124.17.0/24
193.124.90.0/24
194.58.42.0/24
194.87.2.0/24
194.87.76.0/24
194.87.81.0/24
194.87.136.0/24
194.87.172.0/24
194.87.208.0/24
194.87.226.0/24
194.87.231.0/24
195.133.14.0/23
195.133.25.0/24
195.133.27.0/24
195.133.35.0/24
212.192.4.0/24
212.192.8.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c6:7e:34:28:46:67:79:55:1c:7e:0c:23:80:f7:9d:02:a9:
64:0d:37:a4:a6:bd:16:21:bf:9a:4a:98:42:bd:bc:4e:d4:e2:
81:ee:31:cb:95:3d:e2:77:e1:f4:ce:8b:d3:71:d3:80:86:2c:
8a:8e:9f:e5:51:7d:d5:a4:87:08:71:c2:18:4d:32:4b:53:fe:
6c:4d:d1:fd:32:63:3f:93:7b:11:4b:63:cb:d4:97:9a:ee:37:
21:1c:0f:ed:38:8b:30:21:01:23:92:fb:79:e5:be:11:eb:d3:
6d:eb:03:89:81:01:e6:62:9d:7e:5d:2d:83:d6:d2:a6:5d:00:
b8:c7:7f:d1:26:f1:16:06:02:44:cd:ce:12:b7:5c:95:48:9a:
79:63:35:87:be:a3:a6:16:8d:46:35:08:e3:e5:c2:1c:47:01:
e9:4e:c2:38:f3:0b:f8:72:1f:e9:e3:48:16:bc:d7:cd:a2:4e:
10:ff:d2:18:4b:d8:89:b2:33:16:ad:8b:c9:10:04:d9:6f:02:
de:ee:4b:da:11:6c:55:a2:17:9e:99:28:2a:b4:9c:b0:49:68:
99:b5:86:34:ae:3a:ef:0e:ae:56:7e:0e:dd:5b:23:af:b8:40:
6d:52:63:2f:60:e1:37:e2:ff:b0:d9:0e:ef:18:9b:f6:bf:8e:
f4:5e:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:10 2024 by rpki-client on console-fra.rpki-client.org