Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q_6lec1XvyZzxN_0y_CgNcD9zag.roa
File: Q_6lec1XvyZzxN_0y_CgNcD9zag.roa (raw, json)
Hash identifier: 1+hpIHomh/lg/EVynEHLcWYEqT8b+CRslyPp+OLys/M=
Subject key identifier: 43:FE:A5:79:CD:57:BF:26:73:C4:DF:F4:CB:F0:A0:35:C0:FD:CD:A8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C48886128293961DA758260753637C300
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q_6lec1XvyZzxN_0y_CgNcD9zag.roa
Signing time: Fri 08 Dec 2023 08:25:46 +0000
ROA not before: Fri 08 Dec 2023 08:25:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147186
IP address blocks: 194.87.229.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.141.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:48:88:61:28:29:39:61:da:75:82:60:75:36:37:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 8 08:25:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43fea579cd57bf2673c4dff4cbf0a035c0fdcda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:11:f7:ec:20:5b:c3:07:57:ba:d1:1e:75:
bb:51:23:71:96:31:6c:f4:8d:66:c4:da:39:08:1c:
bb:2f:e6:df:f5:ce:2b:82:f7:de:65:2a:14:39:2b:
31:34:98:80:53:f4:0e:2a:9f:a4:69:49:62:4f:6d:
79:3e:49:8d:44:66:ca:2b:c4:f1:99:ad:7c:c6:93:
7f:d6:c8:db:f0:b4:76:8a:c1:60:b5:52:f1:3e:aa:
f9:5a:73:69:37:45:32:b6:9b:4c:9a:aa:ba:a0:0a:
ea:61:c1:09:9d:ce:5c:10:92:98:c2:21:af:ec:e2:
20:4d:78:f9:16:a6:01:b8:81:73:04:f4:a3:ab:a5:
fa:cc:de:6e:14:4f:a1:ae:a6:46:1c:84:b3:bf:aa:
16:e2:06:f0:94:35:86:51:5b:cb:ff:3f:e6:b6:99:
20:bf:da:6a:c0:ba:7a:8b:e8:97:df:e4:4b:11:b5:
10:78:3e:46:b3:24:24:1d:c5:16:42:50:70:8b:a8:
f0:d7:54:e9:6b:6c:28:a1:a1:10:64:6a:23:62:41:
a9:1d:5b:da:b2:86:9f:4a:73:c3:3f:4a:d7:0a:9b:
02:82:ca:a7:46:b9:1c:78:1c:5f:3b:75:c5:ec:bb:
9e:32:55:47:dc:da:47:c3:8b:74:17:a9:32:68:66:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FE:A5:79:CD:57:BF:26:73:C4:DF:F4:CB:F0:A0:35:C0:FD:CD:A8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q_6lec1XvyZzxN_0y_CgNcD9zag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.26.0/24
194.87.33.0/24
194.87.138.0/24
194.87.141.0/24
194.87.168.0/24
194.87.170.0/24
194.87.178.0/24
194.87.229.0/24
194.87.250.0/24
195.58.54.0/24
195.58.63.0/24
212.192.1.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2b:12:34:14:a7:b7:e5:52:bc:a0:55:4f:29:04:55:b8:96:
04:1b:8f:2c:3b:b5:69:4e:9d:8b:da:96:70:f5:ad:76:dc:d3:
45:c3:b0:b5:77:4c:24:7c:ab:d7:30:af:3e:f0:18:6f:1e:39:
0b:ee:d1:95:d6:b9:81:d0:24:95:e2:3e:97:2d:be:6a:b0:02:
8b:32:39:f8:10:4b:22:3f:a6:aa:ca:16:66:89:c1:fc:e1:11:
ed:8c:3a:fb:5b:58:80:37:9f:63:1a:26:0f:46:35:c6:6c:1d:
fa:c3:80:cd:c6:14:76:0a:6e:78:c7:10:42:d5:c7:e3:30:f9:
25:7c:93:f3:99:43:36:ae:f9:17:67:4e:fb:fa:44:61:76:2f:
27:cf:72:6e:74:91:ae:e3:1c:5d:0c:7a:fa:6a:9d:0f:fe:59:
44:cd:5c:e8:f6:5e:2f:e9:32:f7:be:9b:5a:10:f8:be:2e:07:
89:08:89:71:b6:fc:4f:63:f3:24:70:84:b9:43:1e:16:35:18:
35:1f:ad:a3:57:c6:c7:12:be:18:ca:21:6a:d4:fa:e9:31:d3:
57:cf:f3:fe:8f:d1:2c:c4:cb:1a:97:09:f6:2a:7b:d8:25:79:
c1:1a:e1:8c:e7:dc:ee:0f:65:9a:73:cd:17:bc:89:c7:c5:6e:
38:70:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:15 2024 by rpki-client on console-fra.rpki-client.org