Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/G144bQ2o8GbRvfH-jcjnHuvp9Wo.roa
File: G144bQ2o8GbRvfH-jcjnHuvp9Wo.roa (raw, json)
Hash identifier: 4xajERSNXF1qXi9R31zXRpJJjH4SDQzDVCufDR1W8SE=
Subject key identifier: 1B:5E:38:6D:0D:A8:F0:66:D1:BD:F1:FE:8D:C8:E7:1E:EB:E9:F5:6A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191FAF50B679A29325F9F394CC3DF176771
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/G144bQ2o8GbRvfH-jcjnHuvp9Wo.roa
Signing time: Mon 16 Sep 2024 13:10:48 +0000
ROA not before: Mon 16 Sep 2024 13:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214238
IP address blocks: 62.76.226.0/24 maxlen: 24
62.76.227.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.4.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.24.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 08:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:f5:0b:67:9a:29:32:5f:9f:39:4c:c3:df:17:67:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 16 13:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b5e386d0da8f066d1bdf1fe8dc8e71eebe9f56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:14:12:2d:65:84:1e:c9:46:2e:06:63:8f:
32:3a:ac:ad:76:8c:e0:7a:99:bb:14:d7:c8:eb:9a:
7b:d1:1c:9c:a6:bb:74:81:75:08:09:b7:e3:b2:f5:
3c:d6:62:67:83:c1:13:f8:91:7a:c9:a3:ae:c9:4a:
79:aa:42:97:93:86:e3:99:19:f1:5f:46:66:fc:7a:
45:fc:12:a9:d9:67:3d:d1:d2:71:c9:9e:8f:e0:a0:
32:78:9f:16:d8:0e:af:5f:19:aa:35:6b:18:be:40:
bf:68:ef:7a:62:e6:19:3e:94:de:75:16:ea:6e:ee:
49:50:5c:05:93:62:6f:d8:bd:c5:e9:a7:b8:c8:34:
cc:11:8b:d2:98:35:08:27:f2:4c:4c:59:c5:e3:d9:
a3:1a:3b:b7:da:4e:d7:ca:51:ac:9f:45:83:dd:8b:
2b:6d:3b:65:06:31:a1:74:a9:ff:a9:2a:6f:98:a6:
ae:4d:0e:c2:7c:21:45:fc:46:0d:e5:9f:01:25:6b:
ec:a6:f1:4d:61:f7:9d:93:ed:f4:29:8d:10:08:8c:
d8:12:45:8b:5c:60:1f:83:fe:fd:ce:ef:44:91:14:
a8:7f:81:4c:ee:44:66:d0:26:0d:e5:0e:74:c0:f2:
b9:8b:72:8f:34:48:73:2b:e3:6e:99:ec:68:d8:62:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5E:38:6D:0D:A8:F0:66:D1:BD:F1:FE:8D:C8:E7:1E:EB:E9:F5:6A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/G144bQ2o8GbRvfH-jcjnHuvp9Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/23
185.72.10.0/24
192.124.180.0-192.124.182.255
192.124.188.0/24
192.124.190.0/24
193.124.4.0/24
194.87.3.0/24
194.87.24.0/24
194.87.33.0/24
194.87.36.0/24
194.87.165.0-194.87.166.255
194.87.178.0/24
194.87.224.0/24
194.87.229.0/24
194.87.231.0/24
194.135.33.0/24
195.133.31.0/24
195.133.35.0/24
195.133.94.0/24
212.192.8.0/24
212.192.242.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b1:21:38:fd:d0:2a:44:50:be:58:85:5a:fe:53:3d:41:f6:
af:35:d9:f7:83:8c:88:52:30:f8:bd:c4:ba:d3:4e:98:3c:4f:
df:43:f4:02:6f:e3:40:9b:3b:93:c2:99:81:ff:f5:55:61:d9:
b5:78:c5:0b:2e:24:12:21:85:9e:e1:96:7a:43:11:13:f5:cb:
a4:08:b4:eb:5d:d2:df:06:9d:26:86:82:ce:34:29:a6:05:85:
b6:00:b8:9d:14:0d:d8:83:7b:73:1d:28:b3:e3:3b:30:78:a7:
f1:2f:3b:9e:7d:aa:2b:ca:9b:4f:12:56:28:d6:ca:eb:f3:34:
f8:f5:1c:99:1d:03:18:fb:73:78:47:44:8f:ba:42:3d:71:3c:
32:a4:c6:73:43:6a:d5:8f:85:16:8e:08:56:26:4f:6e:7d:01:
61:57:e9:4b:b5:0e:9e:dd:97:81:98:b5:1a:89:7a:04:fa:fc:
75:2d:d1:49:2e:86:06:e0:2e:cb:93:66:2f:f6:93:01:c3:99:
f9:ef:13:81:b5:7c:b1:8e:2b:cc:8e:6e:c3:d7:0d:3d:4c:58:
33:08:0e:18:c6:56:74:11:a2:c4:64:87:2f:2b:ff:25:d6:c0:
42:9f:4d:3b:5e:cb:97:b9:01:22:5a:1e:db:7e:fa:f9:26:f7:
40:fe:13:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 10:55:43 2024 by rpki-client on console-ams.rpki-client.org