Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QoCxVn1YMhwQ8XWfYo0T5b7ZWIU.roa
File: QoCxVn1YMhwQ8XWfYo0T5b7ZWIU.roa (raw, json)
Hash identifier: 7s43lqhu+r8avEwzYvh8XWrJHmL6ymTI0w0+tRDVTdo=
Subject key identifier: 42:80:B1:56:7D:58:32:1C:10:F1:75:9F:62:8D:13:E5:BE:D9:58:85
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01922E86F3CE3CFC00F6870485A8F55BCCA5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QoCxVn1YMhwQ8XWfYo0T5b7ZWIU.roa
Signing time: Thu 26 Sep 2024 13:30:49 +0000
ROA not before: Thu 26 Sep 2024 13:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398343
IP address blocks: 193.124.15.0/24 maxlen: 24
193.124.24.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
194.135.104.0/24 maxlen: 24
195.133.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 09:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:86:f3:ce:3c:fc:00:f6:87:04:85:a8:f5:5b:cc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 26 13:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4280b1567d58321c10f1759f628d13e5bed95885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:60:d9:97:ac:7f:a7:4c:e3:8b:5d:1b:f5:
29:4a:03:60:4c:a9:4e:e5:66:53:e7:10:2b:60:d3:
74:97:66:3b:26:07:f2:ea:e4:9b:f8:db:66:ff:fa:
2e:64:77:50:80:22:03:82:1c:20:e5:92:82:3b:6b:
07:33:43:b7:b8:64:fb:2a:9b:ce:96:64:54:28:86:
a3:d9:22:9d:45:e0:61:d5:25:ec:10:3b:3a:fc:d0:
b9:d3:7b:0d:ac:84:04:31:9e:51:46:18:c2:1c:69:
dc:c2:c5:a2:f7:44:8a:3c:18:82:ff:fb:22:b3:78:
32:b1:e1:92:c4:aa:20:24:56:1c:39:8d:2b:d8:d9:
08:ee:da:29:a2:6e:2a:d3:42:35:c3:7d:23:9c:9b:
d9:8b:56:41:e8:5a:3e:5e:35:9c:49:6a:c0:76:9e:
ea:ec:0f:ab:fb:3b:3e:9f:59:0a:3d:ce:6b:b6:0c:
7d:96:89:99:67:74:93:06:6b:01:7e:8e:e1:36:38:
18:42:4f:9d:fe:7b:3e:09:51:1e:7c:ab:28:97:ab:
74:9c:a3:6b:30:09:4f:cf:d6:4e:63:c8:f0:3a:b4:
fc:52:eb:97:a9:99:20:87:e8:4b:b8:38:e0:94:ae:
64:a5:f9:de:61:26:20:03:dd:ba:c1:96:2c:1f:0f:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:80:B1:56:7D:58:32:1C:10:F1:75:9F:62:8D:13:E5:BE:D9:58:85
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QoCxVn1YMhwQ8XWfYo0T5b7ZWIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.15.0/24
193.124.24.0/24
194.87.123.0/24
194.135.104.0/24
195.133.83.0/24
Signature Algorithm: sha256WithRSAEncryption
86:48:0f:d5:20:dc:49:e6:8d:cc:da:52:c7:a0:1d:ee:f6:a8:
e5:0e:2f:c7:ec:81:89:1d:5f:1e:a3:93:f6:8a:f1:eb:94:2b:
19:e1:99:a7:db:9c:a2:7d:53:52:93:53:a8:a2:cc:3e:5b:24:
a2:d5:69:af:ef:d1:4a:7b:3c:75:5a:dd:7a:27:49:9c:42:6e:
6b:f2:a9:b9:f5:52:0c:91:a3:ef:ca:76:23:75:a5:72:d2:3a:
dc:07:cb:d5:a7:06:9b:98:d8:0b:ea:e5:f1:7b:7b:b1:ec:61:
44:69:e1:7c:d2:ab:9b:53:46:12:3d:47:33:14:97:d2:20:de:
7c:37:d2:e8:11:46:f7:d1:7e:db:1c:83:12:28:a0:ff:84:5e:
bc:77:2b:92:a2:3e:a9:f3:e3:24:e1:93:31:f0:c3:05:af:ee:
68:44:23:20:74:0a:34:b8:6d:e6:42:91:0c:f4:61:be:14:00:
de:58:c8:ed:78:3a:df:56:3f:3a:cc:56:54:8c:0e:4d:f6:17:
ad:89:50:b5:6b:a4:ff:e4:90:86:81:27:57:8d:40:4f:53:82:
fc:50:3f:12:62:2b:c2:38:e0:89:ce:0d:d0:18:3e:1f:4b:fa:
47:65:3c:2e:b8:d1:6c:a7:90:5e:40:4d:85:cd:5a:e3:96:ef:
c4:16:a5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 13:10:14 2024 by rpki-client on console-fra.rpki-client.org