Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/P-IQqYXvMCfPCv5n31kPn08UnM0.roa
File: P-IQqYXvMCfPCv5n31kPn08UnM0.roa (raw, json)
Hash identifier: 1y8TjF4qW3ENUwxNaOrzNep5KCT6ZQViPeLGOPxbKtk=
Subject key identifier: 3F:E2:10:A9:85:EF:30:27:CF:0A:FE:67:DF:59:0F:9F:4F:14:9C:CD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01912C7A668FE7B97071E0E9024F71221935
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/P-IQqYXvMCfPCv5n31kPn08UnM0.roa
Signing time: Wed 07 Aug 2024 10:55:04 +0000
ROA not before: Wed 07 Aug 2024 10:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15731
IP address blocks: 194.85.251.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.134.0/23 maxlen: 23
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
212.192.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 11:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:7a:66:8f:e7:b9:70:71:e0:e9:02:4f:71:22:19:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 7 10:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fe210a985ef3027cf0afe67df590f9f4f149ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:78:23:ce:38:bc:c3:09:9c:8f:3e:96:15:
77:14:67:4b:ca:d7:90:fc:07:29:47:22:e2:48:d1:
42:12:4a:fd:60:da:23:6b:f7:de:c8:0f:e4:63:25:
ac:97:13:a5:cf:2f:e3:a7:4b:b2:7b:23:fb:19:b9:
aa:e6:10:e3:02:66:fe:82:6a:73:b2:a5:e2:ca:46:
39:33:70:06:14:42:49:94:ab:5f:74:b3:f8:4b:c8:
f2:ad:17:40:15:b9:ae:64:18:de:b6:ac:62:a4:93:
67:24:40:a9:93:61:ec:ac:5c:08:4d:d3:45:17:d8:
16:8e:0f:a0:59:f3:fd:d4:8a:1b:a7:23:1d:d5:cc:
b3:4b:6e:22:44:3a:69:51:fe:c2:09:32:2b:d1:6d:
aa:ae:ef:ba:4f:06:c6:cf:49:f1:af:35:15:c7:66:
a7:93:64:3f:e8:da:56:b4:03:35:6b:f2:4a:c5:c3:
82:4c:65:82:de:fd:6b:f2:b6:9e:f2:00:91:25:29:
a8:e3:8f:99:a6:9d:5b:56:cb:e6:81:d0:46:3b:f1:
70:fd:44:43:34:11:57:e7:99:53:33:ff:0d:f9:fd:
de:4c:48:77:f3:1e:86:e4:7e:d3:a3:93:4d:32:33:
78:b9:08:23:7c:0b:80:68:bd:66:97:38:ce:fd:30:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E2:10:A9:85:EF:30:27:CF:0A:FE:67:DF:59:0F:9F:4F:14:9C:CD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/P-IQqYXvMCfPCv5n31kPn08UnM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.251.0/24
194.87.21.0/24
194.87.114.0/23
194.87.134.0/23
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.84.0/23
212.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:51:a2:7f:a3:92:14:3a:1a:f1:47:63:d9:ab:6f:74:13:8e:
62:dd:50:f6:1c:fb:a4:54:0e:34:9e:eb:b4:41:ff:24:19:4a:
d1:c6:a2:70:f0:68:8d:9a:26:3d:5b:23:6b:9b:03:32:ec:de:
0b:d5:f0:27:91:e1:43:30:6b:0d:db:26:09:34:12:9e:ef:04:
a3:79:2d:fc:b5:d7:fc:1f:2d:b8:4b:27:9b:2c:f5:7e:17:3e:
15:4a:80:19:12:bf:99:40:dc:51:e7:3d:5f:02:90:d1:c6:9d:
23:72:14:9f:2c:b8:dd:b1:31:fd:6f:f6:c1:8c:e6:b9:f5:a6:
d4:00:d8:71:60:96:bd:10:2f:f6:9b:93:ae:ad:01:62:b3:a2:
a8:af:65:67:aa:35:10:75:d5:39:13:f1:0f:a2:c5:bd:4a:a9:
ae:c5:a1:d5:f2:45:05:05:83:86:f6:8c:2f:bb:05:13:8f:09:
f9:da:94:04:91:df:bc:76:8d:65:e7:0d:4c:0c:d6:50:48:d8:
40:f2:0d:2d:67:5a:93:e1:04:23:08:33:a8:ff:77:8c:b0:24:
25:f5:97:dd:25:af:b1:ed:17:2d:53:89:b5:8d:34:ab:36:7a:
06:c1:b7:1b:56:fd:a4:4c:d4:6b:9c:d3:a1:15:bc:39:09:95:
09:b8:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 14:38:24 2024 by rpki-client on console-ams.rpki-client.org