Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IQoPFRsTcVrIOnGdYDluEXH9IA8.roa
File: IQoPFRsTcVrIOnGdYDluEXH9IA8.roa (raw, json)
Hash identifier: haruwbR3P9CfkwDb5LR/TX4NnBEBrXHiUGUMbaqrMIA=
Subject key identifier: 21:0A:0F:15:1B:13:71:5A:C8:3A:71:9D:60:39:6E:11:71:FD:20:0F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D6412976605DD970377BAD411EAC024DE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IQoPFRsTcVrIOnGdYDluEXH9IA8.roa
Signing time: Thu 01 Feb 2024 09:49:16 +0000
ROA not before: Thu 01 Feb 2024 09:49:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 192.124.191.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
212.192.213.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 21:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:12:97:66:05:dd:97:03:77:ba:d4:11:ea:c0:24:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 1 09:49:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=210a0f151b13715ac83a719d60396e1171fd200f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:49:1f:07:24:41:af:be:8c:6a:a9:de:6f:
54:ae:ed:60:37:70:8d:3d:d1:85:49:18:7c:15:b3:
08:f9:07:f0:bf:ef:be:de:ab:c7:08:07:fb:0f:4a:
56:19:27:fd:13:28:3f:c0:73:e0:9d:32:bb:19:f3:
62:88:89:2c:2c:d9:ca:7a:c5:64:76:31:a3:b8:d3:
f4:34:94:47:34:30:b5:97:a1:e8:eb:0a:2b:b1:ed:
32:4d:05:0b:e2:cf:3d:36:34:d6:fe:22:cc:ac:c5:
b7:05:9d:23:6b:dc:02:ee:a5:9f:6f:31:fb:49:25:
91:42:ba:a4:5f:fb:70:4c:b3:0c:54:be:42:10:5d:
d7:0d:35:14:fe:ae:fa:4c:84:0c:b0:d2:b9:a0:f6:
2a:2c:63:37:ef:9a:ea:c4:5c:25:a1:f2:f2:12:32:
8d:7d:44:b3:1e:db:3b:12:a1:08:29:f5:b3:57:8e:
93:7d:ae:8b:01:7a:80:f9:8c:6d:3e:fd:fd:96:fe:
17:54:83:fa:4c:48:97:cb:18:3e:59:cd:3a:4d:4e:
9e:41:22:d7:51:c8:fc:58:35:7c:4d:3a:de:03:e1:
51:24:48:4c:8a:36:5c:3c:f7:b7:a5:bb:4c:5d:b8:
f4:85:d3:80:46:c5:8b:3b:c7:69:6b:db:76:03:20:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0A:0F:15:1B:13:71:5A:C8:3A:71:9D:60:39:6E:11:71:FD:20:0F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IQoPFRsTcVrIOnGdYDluEXH9IA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.191.0/24
193.124.203.0/24
194.87.245.0/24
212.192.213.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
23:bb:0c:91:14:d8:d1:03:b8:fc:30:83:06:3f:f5:e8:31:e0:
44:38:c9:b5:30:dc:01:61:1a:78:c4:b6:58:9c:a3:0f:cd:8b:
ae:32:7b:20:60:13:43:aa:8e:b2:e9:53:ca:64:79:f5:a7:61:
38:68:3b:6b:38:6d:21:21:84:ff:55:e3:8e:a3:81:74:62:b5:
56:97:49:7d:99:ef:1a:c5:72:e6:6b:8f:00:87:a0:ee:53:b0:
e1:78:7c:12:9f:a3:14:55:3d:3a:b4:ca:e6:9c:04:9f:a5:58:
65:71:45:da:e0:69:f6:d0:b5:17:d1:c8:0a:2d:93:14:83:c3:
6a:45:62:e3:06:04:b4:fb:7d:83:a7:57:90:e4:d0:94:17:8c:
84:56:28:44:14:05:60:0f:0a:ba:ff:4b:d7:64:15:83:84:c8:
7b:2f:40:1f:b5:be:f0:f8:68:87:bf:d4:53:73:50:6f:e5:d1:
af:c6:37:33:27:34:be:4c:e8:bd:78:25:db:a8:d6:db:54:b9:
1d:13:60:d0:d5:85:3a:4d:44:38:77:86:f2:e9:f9:44:6b:86:
06:2b:6e:d1:17:b2:8b:2b:c6:0f:52:1d:69:2b:05:1b:eb:a2:
37:15:a0:ce:da:25:cd:48:77:fe:6a:15:0a:86:9a:b4:ee:d4:
af:8b:95:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 00:47:36 2024 by rpki-client on console-ams.rpki-client.org