Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Hz-U68uxKPArTun8LzAm2CrWBtc.roa
File: Hz-U68uxKPArTun8LzAm2CrWBtc.roa (raw, json)
Hash identifier: XM62wDhF7gddQr+yJYN/pggMlZW1eY7kE7c6EP1q/Gg=
Subject key identifier: 1F:3F:94:EB:CB:B1:28:F0:2B:4E:E9:FC:2F:30:26:D8:2A:D6:06:D7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193C0B4B11E3B6FC46451DD6B59E848E6AC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Hz-U68uxKPArTun8LzAm2CrWBtc.roa
Signing time: Fri 13 Dec 2024 15:48:07 +0000
ROA not before: Fri 13 Dec 2024 15:48:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41745
IP address blocks: 193.124.33.0/24 maxlen: 24
194.87.35.0/24 maxlen: 24
194.87.62.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
194.87.219.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.133.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:b4:b1:1e:3b:6f:c4:64:51:dd:6b:59:e8:48:e6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 13 15:48:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f3f94ebcbb128f02b4ee9fc2f3026d82ad606d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:79:ac:d7:4f:78:69:b8:6b:09:a9:d7:d8:
75:3e:f9:cd:91:05:67:00:8e:4d:eb:44:13:21:68:
10:9e:c8:84:f7:3d:4d:73:a7:52:dd:1d:f0:9c:44:
3c:24:e0:a0:7b:b1:bc:e7:34:6d:96:df:5e:eb:94:
2a:81:b1:ad:e3:73:a3:5c:68:60:67:bc:1a:ba:cf:
42:b1:91:9d:fc:08:6f:e6:39:e9:d2:ff:0f:87:50:
7b:b9:3e:33:8a:65:d4:df:fd:e1:5f:8c:71:be:6f:
7a:1e:99:d9:5e:c8:b0:39:ac:6e:c9:0f:6f:e2:4a:
9b:c0:57:42:14:8b:b4:3e:3c:54:2f:40:7d:7d:0b:
e9:a8:e6:bf:e3:64:19:ab:b7:8e:c2:d7:32:b4:5a:
15:b3:1a:34:2a:e6:53:50:c1:06:5d:39:d1:6e:eb:
c0:d6:dc:9a:46:99:71:a9:d7:62:25:e9:be:66:01:
65:fb:5d:36:d2:80:25:99:37:c5:5f:eb:56:0d:39:
1e:18:dd:aa:61:35:5c:2d:0d:1d:64:f6:47:b4:1b:
51:fa:d7:6e:03:58:b5:c3:5a:b8:b1:de:06:15:c2:
46:61:95:1a:a8:25:e5:9a:2d:74:4e:ad:69:f1:d9:
2c:10:dc:02:5d:11:51:26:4c:11:53:95:f0:2c:54:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3F:94:EB:CB:B1:28:F0:2B:4E:E9:FC:2F:30:26:D8:2A:D6:06:D7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Hz-U68uxKPArTun8LzAm2CrWBtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.33.0/24
194.87.35.0/24
194.87.62.0/24
194.87.191.0/24
194.87.219.0/24
194.87.252.0/24
195.58.50.0/24
195.133.75.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1e:d4:cc:a7:eb:4b:15:d4:a3:b8:fd:15:3e:82:d9:f8:86:
ad:4c:ac:68:9a:fe:8f:50:4a:a0:5d:2d:24:e6:9d:6f:c2:d8:
31:cb:71:f5:1d:27:19:41:4f:be:f4:c1:e6:c7:64:dc:9c:50:
51:d3:0f:f7:9b:5c:66:5a:06:d3:05:4c:57:33:1f:c3:34:c7:
59:b9:16:7f:59:d7:45:52:21:86:97:43:db:e5:1c:79:69:a8:
a0:3f:21:ab:a8:54:c4:9a:83:39:a2:fb:00:75:f2:ce:46:1f:
7a:3c:7e:4c:e3:c8:85:fc:23:55:d8:15:cf:6a:62:da:ae:8a:
11:53:4b:4a:cf:39:fa:8d:fa:b2:54:dd:e0:f3:41:27:77:f2:
13:cf:40:b0:1c:ff:58:d8:e3:13:6f:84:b9:ab:6a:da:6b:0d:
3c:1a:d2:09:df:57:25:9d:81:dd:ca:60:c8:42:15:e6:58:fc:
82:6e:c2:d5:ff:58:36:02:04:f5:d5:e1:79:ee:c1:cb:0a:ff:
28:f2:f9:09:fc:22:b8:a4:9e:41:fa:11:03:8e:c2:73:e9:29:
de:71:0b:dd:2a:ec:30:a5:ad:fa:c2:7a:e6:3e:22:10:ba:b9:
3f:72:6b:80:c7:c5:95:83:e7:c8:1d:4c:47:80:85:40:b9:05:
7e:cb:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:19 2025 by rpki-client