Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Qc0_3TeF2zJr0tOLjhWANrVxOq8.roa
File: Qc0_3TeF2zJr0tOLjhWANrVxOq8.roa (raw, json)
Hash identifier: tehWXIcfu5e4ecugmIndSjLZ+lukDICgBAyXSB8FHe8=
Subject key identifier: 41:CD:3F:DD:37:85:DB:32:6B:D2:D3:8B:8E:15:80:36:B5:71:3A:AF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019266B40D413B8EE015F8074078051733A6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Qc0_3TeF2zJr0tOLjhWANrVxOq8.roa
Signing time: Mon 07 Oct 2024 11:18:48 +0000
ROA not before: Mon 07 Oct 2024 11:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.58.155.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.193.25.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 07 Oct 2024 18:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:b4:0d:41:3b:8e:e0:15:f8:07:40:78:05:17:33:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 7 11:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41cd3fdd3785db326bd2d38b8e158036b5713aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:f3:97:f3:c4:f1:f1:1a:c5:79:f7:76:92:
c5:57:12:f2:9e:60:7b:71:88:9a:b2:73:ec:d2:5f:
81:f3:60:10:2d:1f:c6:71:35:f2:d9:85:f9:54:b5:
7b:53:3b:cd:3a:e2:bb:98:15:a2:01:21:40:50:50:
46:c5:71:30:9b:20:5f:c0:ca:1c:53:31:a7:84:65:
f7:53:e1:9d:98:ac:9f:bb:87:a8:d8:ac:cf:3d:70:
2f:f8:81:4c:53:05:b8:38:9f:5a:73:ae:15:44:ee:
bc:64:45:8a:5d:4e:81:fd:33:0d:8a:64:8b:c4:d5:
31:b7:2b:6e:8d:c4:39:91:03:14:6c:57:07:de:2f:
6b:14:7c:52:9b:71:66:67:fb:af:ca:e7:12:b9:f5:
5f:8e:d1:02:12:9c:5f:d0:c8:74:22:e8:e0:55:80:
45:fd:c8:df:ca:69:55:b3:8e:0f:26:e7:60:f0:76:
01:27:4b:6f:36:8c:9f:02:ab:70:01:49:67:9f:4b:
05:0f:f5:e4:07:ed:99:74:59:aa:94:b9:dd:d2:d6:
e0:0a:ca:66:23:8e:13:01:7f:5c:16:21:2b:e4:fe:
49:fe:9d:2c:f8:88:38:16:ea:4e:9a:94:7e:b1:03:
f6:03:b7:c9:f3:9b:e6:06:46:e1:ac:91:97:a7:64:
7c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CD:3F:DD:37:85:DB:32:6B:D2:D3:8B:8E:15:80:36:B5:71:3A:AF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Qc0_3TeF2zJr0tOLjhWANrVxOq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.155.0/24
194.85.251.0/24
194.87.17.0/24
194.87.169.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.192.1.0/24
212.193.25.0-212.193.27.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
2c:7b:72:0e:08:22:fb:00:87:05:c6:76:30:a2:76:9f:7d:68:
60:7e:87:6f:91:00:55:4c:a5:e9:1f:69:4e:a7:13:27:e8:df:
df:80:d3:e8:6b:d8:6a:ad:c3:5e:ed:1f:06:77:5e:79:1a:90:
f0:e4:af:6c:68:20:f7:23:1c:c9:1e:97:a9:15:0a:e0:a7:74:
e1:b1:e8:5d:8d:ca:7c:61:6d:95:e8:c1:da:7c:86:0d:78:0b:
bc:50:d6:fd:df:c3:a9:47:85:8e:0a:49:7e:a5:e2:6d:54:a7:
72:05:c2:9a:5a:6a:a1:2e:04:81:0b:3d:18:15:6f:80:c0:29:
a2:d5:b0:a2:a0:a8:81:e3:30:96:31:d6:6d:b2:d4:ed:25:32:
ab:2f:56:91:57:fa:a9:ca:75:a3:13:24:14:cb:19:89:f8:3f:
06:8d:32:0e:2c:e8:06:29:a7:16:b4:be:75:92:f3:0e:d0:c1:
ba:5d:f9:87:2b:1c:e5:8b:fd:ef:f5:a5:00:c5:ba:ed:f7:aa:
b0:c5:5a:8e:16:5e:35:fa:74:b5:45:8e:88:25:be:3f:55:43:
11:4a:3a:11:16:78:e8:68:39:91:9e:d9:ed:fc:5b:dc:32:48:
7e:52:1d:f0:66:6b:81:7f:dc:b7:28:cd:88:78:13:0f:76:3e:
e8:21:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 23:07:56 2024 by rpki-client on console-ams.rpki-client.org