Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Opxq6SgXEza0bBOawGlg1mjDHHk.roa
File: Opxq6SgXEza0bBOawGlg1mjDHHk.roa (raw, json)
Hash identifier: oLT9uWm2YyS6plGS/aObmmjwCvHx0zjUHRw4UpO4kgw=
Subject key identifier: 3A:9C:6A:E9:28:17:13:36:B4:6C:13:9A:C0:69:60:D6:68:C3:1C:79
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018ABC7FA88CA8EEEE7EC1564601CAB295F9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Opxq6SgXEza0bBOawGlg1mjDHHk.roa
Signing time: Fri 22 Sep 2023 10:46:37 +0000
ROA not before: Fri 22 Sep 2023 10:46:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205007
IP address blocks: 193.108.115.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:7f:a8:8c:a8:ee:ee:7e:c1:56:46:01:ca:b2:95:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 22 10:46:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a9c6ae928171336b46c139ac06960d668c31c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:a2:fc:74:18:b0:28:1d:d4:89:83:34:72:
9c:67:e9:5f:2c:bf:51:37:b5:e2:93:b8:5f:1a:e9:
e5:c2:eb:f9:49:33:63:5f:f1:29:89:4b:e1:a9:1a:
6f:ee:96:1a:b6:5a:59:91:e5:cc:1f:09:6f:78:4e:
0c:f0:2a:a0:07:ec:18:6b:9a:87:22:e9:f8:dd:aa:
33:63:40:46:a9:99:29:71:e9:8d:cb:4f:d1:b4:64:
61:2b:07:30:e7:57:e5:44:18:52:6e:45:6c:95:19:
83:d8:ea:6f:18:52:0f:f6:7f:cd:1d:61:09:3d:c0:
da:29:98:a8:74:fc:55:9b:12:93:02:57:22:f7:fb:
a5:0b:5c:7c:2a:f4:42:74:a1:00:e9:90:16:05:ed:
d9:b2:25:88:ec:af:97:8d:36:b7:04:37:9b:f3:dd:
3d:26:ac:2b:f5:a0:4c:d9:a1:29:5c:b0:28:dc:92:
9f:65:e1:6d:6f:d6:51:eb:ee:63:1e:05:6b:1e:80:
69:20:41:0d:aa:9d:36:95:4f:f1:0a:8c:3d:11:fd:
44:f5:d1:22:a7:16:e3:09:da:1b:3a:17:72:c0:d4:
df:e1:12:b9:f4:8c:38:21:8b:43:97:c6:2c:5b:81:
b5:54:23:13:36:e8:1d:58:06:b6:c7:cb:cc:55:fe:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9C:6A:E9:28:17:13:36:B4:6C:13:9A:C0:69:60:D6:68:C3:1C:79
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Opxq6SgXEza0bBOawGlg1mjDHHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.115.0/24
194.87.43.0/24
194.87.240.0/24
194.87.243.0/24
195.133.26.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6f:57:e3:d3:eb:8d:79:d1:1d:77:87:56:ce:7e:c3:68:e6:
43:41:c3:12:24:d0:5a:0c:d1:17:47:ff:f7:42:97:b7:bf:97:
d1:7d:44:7e:04:00:76:50:04:5b:e0:c5:42:d0:70:8c:91:86:
13:cf:01:12:63:14:2b:56:3c:2d:53:d9:60:ef:81:b5:80:a4:
78:fd:3b:fb:db:8a:16:3a:e8:86:10:4a:42:94:80:2a:38:f9:
9e:1d:88:df:5c:7b:6f:d0:b8:3b:52:ea:23:ad:1f:6f:84:47:
82:c7:74:04:96:27:f8:e4:44:f5:b6:77:5b:6e:12:14:0e:7e:
5b:b9:ca:2a:c3:8c:67:fa:1d:dd:65:bc:62:4c:ea:11:dc:55:
12:bb:83:04:ee:5e:34:20:cd:68:7d:66:85:58:e2:ef:d1:0e:
5d:03:a8:bd:fa:56:7a:c1:77:f8:f0:1c:84:91:59:8f:f3:36:
2d:ab:d7:0f:7e:55:38:b1:2b:f9:e8:00:14:3d:8f:18:4e:03:
58:a3:71:80:93:c3:7f:3f:64:c9:eb:93:59:4f:f4:ab:a7:ff:
53:d2:b5:1c:94:9f:21:3f:ac:5a:a7:07:c5:f4:b5:4b:34:cf:
a0:3b:58:cc:b6:1e:3b:c2:d9:13:14:4d:21:8c:74:f2:81:a2:
9b:36:7a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org