Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RnImPbdCL97CQlg66CJfBqmv0WY.roa
File: RnImPbdCL97CQlg66CJfBqmv0WY.roa (raw, json)
Hash identifier: CZ1FOhPWC9AWdnvqfhBbWSRDaDru4CVZcqe4ierDe0s=
Subject key identifier: 46:72:26:3D:B7:42:2F:DE:C2:42:58:3A:E8:22:5F:06:A9:AF:D1:66
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66FC9AE163EDAFD857AC2FB4156AB5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RnImPbdCL97CQlg66CJfBqmv0WY.roa
Signing time: Sun 01 Jan 2023 22:14:58 +0000
ROA not before: Sun 01 Jan 2023 22:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 194.87.207.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 09:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:fc:9a:e1:63:ed:af:d8:57:ac:2f:b4:15:6a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4672263db7422fdec242583ae8225f06a9afd166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:34:be:48:30:1e:f8:1c:87:df:82:76:ea:6b:
de:97:6a:2f:cf:9b:3a:0c:e9:f4:32:79:06:5d:47:
25:e4:37:8b:c0:88:ac:60:cc:ba:38:d7:85:45:1a:
35:6f:ce:04:a8:36:3b:7a:9f:bd:ad:65:70:46:51:
c8:8d:fd:1c:ef:da:74:93:15:b9:c9:7f:17:8f:77:
90:5a:8e:4d:9f:2b:d9:1e:7f:3b:13:b0:b4:1d:16:
2a:1c:74:9d:4a:bd:d5:0e:b7:d1:00:9c:ff:85:46:
91:db:23:20:b7:d4:75:87:79:c7:22:e3:f2:2a:9e:
c4:27:9b:be:95:3a:12:53:f4:8f:41:b5:8c:fc:dd:
5d:5d:0c:0e:b5:8b:71:72:68:33:73:81:c2:76:f1:
91:fe:0c:74:b7:21:95:58:cc:ea:c6:61:a6:ad:7e:
44:9f:e0:6a:f9:de:6e:d9:ec:7e:8a:e9:16:e0:45:
db:a2:3d:79:11:07:25:96:5e:d0:9f:04:71:ba:e3:
24:1f:78:7a:7f:73:35:dd:30:47:5d:cf:db:1a:2a:
1c:6e:10:20:d0:d7:3e:cd:58:3d:fa:d9:67:5c:20:
e3:13:2c:53:79:5f:bd:18:94:aa:ca:af:c4:c0:57:
db:88:de:02:ad:56:75:33:e5:ba:ef:e6:29:d6:ed:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:72:26:3D:B7:42:2F:DE:C2:42:58:3A:E8:22:5F:06:A9:AF:D1:66
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RnImPbdCL97CQlg66CJfBqmv0WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.205.0/24
194.58.43.0/24
194.58.46.0/24
194.87.64.0/24
194.87.108.0/24
194.87.161.0/24
194.87.207.0/24
212.192.7.0/24
Signature Algorithm: sha256WithRSAEncryption
24:00:d8:1b:1b:31:c3:44:fe:6a:f7:f0:89:8e:3d:96:7e:26:
9b:e4:02:da:e2:ed:5b:60:e4:61:eb:52:83:0a:77:d1:07:b4:
5c:9f:13:4a:99:1c:9e:a2:62:14:e2:53:1d:37:05:61:ca:73:
5c:98:3a:09:48:b8:11:5e:79:7a:84:c6:8a:32:a8:f8:19:b4:
88:34:0d:93:7a:38:20:de:21:13:ca:4b:dc:1a:3c:79:8e:fe:
58:fc:77:17:79:6a:b6:6c:a7:77:e6:30:c8:09:80:28:5e:07:
71:6b:6a:e0:a7:02:23:84:5a:64:08:a9:43:58:80:ac:bf:fb:
f6:55:5d:82:3a:79:b4:af:26:c0:93:17:6d:24:db:00:58:3e:
4e:1e:37:cd:1f:ff:27:07:f4:98:a2:aa:3c:c9:e9:91:e9:7e:
f2:96:32:62:bf:81:8c:ce:a4:3f:12:8c:71:8d:0b:23:d0:68:
51:83:52:6d:db:71:30:d2:27:09:6e:f0:73:b3:6a:54:6d:22:
59:3e:52:9b:b1:58:b8:86:4d:e8:31:74:c4:95:0a:45:6d:9e:
07:18:60:74:3d:be:7f:39:4c:9d:72:35:c2:34:60:6a:f1:b4:
d5:ee:1f:fa:ea:1a:fe:29:fc:e6:bd:ae:44:5f:c3:f6:7a:27:
03:89:f7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:16 2024 by rpki-client on console-fra.rpki-client.org