Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J0hpkxezLEn75z1BHjUTJdN4y0k.roa
File: J0hpkxezLEn75z1BHjUTJdN4y0k.roa (raw, json)
Hash identifier: 8SmHjZGw4jAhEUf8ouBxxmGY2kdUy40Fp0/M+GGG/eg=
Subject key identifier: 27:48:69:93:17:B3:2C:49:FB:E7:3D:41:1E:35:13:25:D3:78:CB:49
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018728C8EF90171891E5D3C310D04F058436
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J0hpkxezLEn75z1BHjUTJdN4y0k.roa
Signing time: Tue 28 Mar 2023 15:14:29 +0000
ROA not before: Tue 28 Mar 2023 15:14:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 194.87.151.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.38.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
194.87.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 16:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:c8:ef:90:17:18:91:e5:d3:c3:10:d0:4f:05:84:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 28 15:14:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2748699317b32c49fbe73d411e351325d378cb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:86:df:f3:c7:9f:b7:f9:48:7b:c3:4a:e5:
66:79:e7:a1:8a:70:2f:40:5a:09:90:29:77:7f:af:
35:52:1f:48:9a:f4:86:d8:0e:ac:0f:43:15:38:9a:
a3:da:32:08:73:d7:f2:c7:11:fa:34:22:99:ca:7a:
84:56:5a:3d:de:78:63:06:a4:f6:05:65:3f:a0:00:
b0:e7:4f:42:fb:03:e8:6a:49:68:a2:3b:c4:47:3b:
76:aa:c8:c4:f6:2f:e1:16:72:8d:33:bc:d3:69:db:
c9:28:d7:96:30:e3:32:64:84:42:c9:04:df:eb:88:
b1:e3:b6:57:83:81:b1:61:58:b2:4a:ee:35:7a:10:
d4:53:e6:25:2a:53:31:74:a6:3b:a5:84:81:69:a5:
fa:a5:f5:e7:9e:27:27:5a:3c:ab:86:a4:45:54:fc:
a2:ea:72:c6:73:2b:17:86:bc:50:9f:dc:6e:36:3e:
8a:66:e7:d0:64:5f:cd:96:2f:96:fa:f1:05:ed:29:
0e:c8:87:7f:ef:dc:28:48:75:1c:79:b6:62:ed:ba:
02:a4:48:0e:e0:5b:57:4c:5e:c4:50:39:de:60:f7:
dc:4f:e3:dc:22:dd:32:45:2b:05:c8:5d:4e:1b:8a:
6e:4e:c6:a4:62:07:6b:93:85:e1:fc:1c:a0:80:f7:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:48:69:93:17:B3:2C:49:FB:E7:3D:41:1E:35:13:25:D3:78:CB:49
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J0hpkxezLEn75z1BHjUTJdN4y0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.84.0/22
194.87.151.0/24
195.133.18.0/24
195.133.38.0/24
212.192.241.0-212.192.242.255
Signature Algorithm: sha256WithRSAEncryption
1d:31:41:42:60:4b:32:76:9d:cf:0d:49:3b:0b:52:1a:ab:90:
19:a0:cd:b8:79:04:70:65:75:bd:f1:56:20:45:fa:54:ea:3a:
00:70:17:a2:1b:02:e4:76:f4:86:20:08:fb:0e:ab:e6:43:90:
f9:93:46:c8:55:05:55:36:1b:51:72:bf:47:8e:0c:b8:cc:61:
fa:59:a0:a7:f2:95:31:0c:c1:54:d4:30:af:10:ed:a4:97:72:
c6:7a:37:7d:4a:c6:f0:29:5b:38:92:71:ed:bc:f4:99:8c:96:
13:0e:95:79:6e:5f:36:1c:a2:d7:e7:35:25:ab:a0:a0:79:6f:
3c:1a:5d:a2:9c:12:2d:e5:b1:ff:e9:98:68:67:83:62:b6:ba:
8d:1c:6a:b5:7a:d7:e7:ea:84:e4:cd:9a:b0:7e:b6:56:4f:74:
1d:b5:48:4a:18:46:4f:69:14:c8:d0:3f:59:d0:ad:5b:43:79:
63:47:30:eb:79:00:23:b8:e7:e1:34:25:58:45:da:76:d5:6a:
a8:57:74:4d:08:64:18:5e:53:9f:79:63:08:c8:26:59:04:95:
a9:c2:98:9c:ea:99:b6:04:02:af:89:9f:ac:2e:fd:69:c6:34:
61:a7:00:6f:a0:5c:f4:45:66:8d:3b:20:63:58:76:46:92:58:
c5:c0:c4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:12 2024 by rpki-client on console-fra.rpki-client.org