Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/F9vhbH3X6chuOaPt8KEKO0tn7BY.roa
File: F9vhbH3X6chuOaPt8KEKO0tn7BY.roa (raw, json)
Hash identifier: Dkyj8reh3er3mMOMu0kx886joD2h7FeX2g0mAz8tWB8=
Subject key identifier: 17:DB:E1:6C:7D:D7:E9:C8:6E:39:A3:ED:F0:A1:0A:3B:4B:67:EC:16
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0192945BBA0FBC3EFF73A60ACA4C8250DB43
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/F9vhbH3X6chuOaPt8KEKO0tn7BY.roa
Signing time: Wed 16 Oct 2024 08:04:52 +0000
ROA not before: Wed 16 Oct 2024 08:04:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 192.124.180.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
194.87.58.0/23 maxlen: 23
194.87.169.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.31.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.62.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.94.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.193.25.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 17 Oct 2024 06:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:5b:ba:0f:bc:3e:ff:73:a6:0a:ca:4c:82:50:db:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 16 08:04:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17dbe16c7dd7e9c86e39a3edf0a10a3b4b67ec16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:a0:90:07:0f:c2:62:17:3f:8d:2f:9d:75:
ab:e4:57:04:0b:b8:c4:f8:3f:56:74:69:ce:ec:c4:
ab:ca:2f:16:03:e7:bf:14:05:f4:38:4f:26:87:4d:
1e:34:ae:59:76:62:dd:ec:cb:66:02:54:ce:6f:41:
5f:7a:f8:a4:dd:73:02:1c:54:59:b3:9a:d7:8b:a7:
8d:4a:62:7c:98:6c:af:fd:c0:07:07:fa:f0:63:50:
1b:a1:e4:10:1c:d6:de:b1:3a:00:14:83:d8:c5:35:
b7:f7:58:a7:ed:23:70:86:cd:b3:81:5f:d8:b8:aa:
72:95:18:69:a6:ff:c7:be:43:c9:b7:06:1d:fe:7e:
e6:5c:24:34:d2:c9:6d:07:fc:82:a2:64:b1:7c:b3:
37:c8:31:83:33:02:c7:a1:16:00:c8:81:a6:df:eb:
4c:5c:1e:12:a3:5a:cc:e1:e0:53:88:b6:16:45:4f:
1b:2b:83:ae:9f:cc:7c:5a:ad:82:1c:0d:75:ff:e8:
6a:12:be:f4:8d:d4:14:fe:ac:a1:67:0d:98:15:e2:
15:4a:2c:95:40:c4:a4:4c:a1:c9:27:2f:97:1a:61:
fd:90:bc:af:e6:42:1c:75:03:e2:d5:70:db:7d:ff:
b6:4b:5a:4c:a9:12:c6:6c:1b:36:07:a1:c4:54:6d:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DB:E1:6C:7D:D7:E9:C8:6E:39:A3:ED:F0:A1:0A:3B:4B:67:EC:16
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/F9vhbH3X6chuOaPt8KEKO0tn7BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.180.0/24
194.58.155.0/24
194.87.52.0/24
194.87.58.0/23
194.87.169.0/24
194.87.178.0/24
194.87.224.0/24
194.135.33.0/24
195.133.24.0/23
195.133.31.0/24
195.133.40.0/23
195.133.50.0/23
195.133.62.0/24
195.133.92.0-195.133.94.255
212.192.1.0/24
212.193.25.0-212.193.27.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
40:85:7f:31:df:e4:e8:79:1c:b1:ed:47:cd:f4:18:f1:9b:2d:
96:c2:e6:e8:c9:50:a0:60:b8:9e:49:2f:35:f1:ba:cf:ee:40:
44:94:61:b8:c0:51:ed:ad:61:fc:08:50:4e:48:74:17:89:dd:
03:47:fd:86:40:38:8e:f8:94:64:36:97:42:62:a4:91:70:5f:
2f:5c:f6:9b:a6:b5:b3:d8:c0:07:a7:ed:83:11:3f:c5:fc:4e:
79:80:a0:54:70:3b:bb:a0:f4:5c:96:a7:33:cf:a1:da:05:7c:
4e:b3:45:36:62:5b:e0:dc:b2:61:86:16:62:f3:bc:6f:9c:50:
fe:75:e3:f3:9d:ab:2a:64:7b:dd:e6:cc:3a:79:04:f7:0a:60:
20:12:26:31:d2:80:bf:87:95:a7:52:ec:0e:74:a7:8d:07:1d:
c3:15:e1:0e:f9:27:fa:22:c4:d1:0c:0e:02:fd:9a:19:12:b2:
ea:1f:ab:c1:a1:e2:a7:f1:10:50:b2:72:a0:c1:cc:5d:36:e6:
c7:29:d5:0f:ff:9a:88:3a:3a:75:eb:fd:b4:3a:52:80:50:81:
32:20:b2:f6:03:92:6c:a6:8e:37:a7:46:66:62:1e:ad:5d:6e:
4e:7a:57:d1:57:b4:75:b1:96:a4:43:fd:7e:5e:ee:e5:30:f0:
d7:10:0f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 08:44:51 2024 by rpki-client on console-ams.rpki-client.org