Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RukdAjdo-EWH9dbXoVbpzJrxTu0.roa
File: RukdAjdo-EWH9dbXoVbpzJrxTu0.roa (raw, json)
Hash identifier: 6JHrG4RqH9BKEm0/Eem6gx4JlOhxOn0pjCN6+fMPpJU=
Subject key identifier: 46:E9:1D:02:37:68:F8:45:87:F5:D6:D7:A1:56:E9:CC:9A:F1:4E:ED
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01863A1EE32870FC6135DD6490FCB608D323
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RukdAjdo-EWH9dbXoVbpzJrxTu0.roa
Signing time: Fri 10 Feb 2023 06:59:08 +0000
ROA not before: Fri 10 Feb 2023 06:59:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 194.87.205.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.139.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Mar 2023 04:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:1e:e3:28:70:fc:61:35:dd:64:90:fc:b6:08:d3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 10 06:59:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46e91d023768f84587f5d6d7a156e9cc9af14eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:20:f0:9c:e5:27:53:11:57:5a:2a:f8:f8:
0e:d9:fe:b0:9a:68:bc:6c:a3:aa:a7:50:0f:50:23:
c8:ba:40:02:b7:d7:41:75:2f:13:12:c5:ac:fa:c6:
7f:35:b0:f4:cd:0e:7b:f7:7c:0b:dc:22:3e:0f:b2:
97:17:80:72:dc:95:65:6b:ca:07:2d:df:51:09:8e:
b8:f3:ca:39:83:4f:2c:6d:57:d5:2d:e0:46:11:9e:
3d:cb:22:12:4b:3c:00:14:99:7c:f6:1f:e8:e4:9a:
d4:73:0e:ff:8a:d2:7b:fd:ed:b2:8f:22:cc:53:2d:
19:54:6c:c0:84:2a:b9:6a:07:32:7f:0f:8b:06:4a:
d3:59:3e:3a:a2:97:35:1c:16:99:e8:0f:5f:06:dd:
c7:af:15:d4:50:6b:10:6c:fb:05:82:47:2f:d4:2b:
39:48:0c:63:68:cd:80:82:de:82:e1:d3:68:54:01:
64:0a:75:b3:7c:69:ac:1c:72:17:ab:85:9f:10:72:
d6:1b:4d:0f:42:3f:37:0f:b6:54:35:3b:72:61:c2:
c5:0d:52:40:f6:49:f4:87:2a:49:fd:e2:0c:e7:37:
4a:1d:03:4b:47:5a:5f:98:3e:8f:5f:45:08:13:c5:
02:4f:33:c0:6c:21:84:49:ab:80:14:2f:bb:10:89:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E9:1D:02:37:68:F8:45:87:F5:D6:D7:A1:56:E9:CC:9A:F1:4E:ED
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RukdAjdo-EWH9dbXoVbpzJrxTu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
192.124.180.0/24
193.124.46.0/24
193.124.90.0/24
193.124.200.0/24
194.58.40.0/24
194.87.2.0/24
194.87.10.0/24
194.87.124.0/24
194.87.139.0/24
194.87.205.0/24
194.87.233.0/24
194.87.252.0/24
195.58.51.0/24
195.133.76.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ca:6e:ea:53:ed:b8:bf:3a:b1:69:8a:55:aa:f9:47:44:d0:
0c:2d:79:7a:da:30:e0:f3:f3:09:1c:6b:ab:4d:b7:75:a7:bc:
77:31:7c:ec:dc:cb:24:1b:22:c3:6b:f7:da:5a:06:5b:29:d0:
56:7e:e2:3a:18:e6:5f:ed:53:0d:58:be:7d:d2:61:7f:0c:00:
59:6a:12:ce:84:2c:e0:19:5c:98:35:27:32:cc:6c:b6:2b:9c:
43:cb:b1:ab:c6:2d:2e:87:98:c8:2f:4a:6a:59:73:28:b7:b4:
cd:26:68:51:ab:58:45:73:8a:1a:09:d9:58:71:b6:55:5f:12:
eb:48:bc:c7:26:07:34:dc:77:88:10:fe:86:fb:8c:17:84:f5:
dc:08:bf:e3:5e:75:e8:9d:f6:be:db:6b:68:c9:2d:ad:69:c8:
c7:22:5e:67:4e:dd:bd:25:09:44:f7:7b:ea:59:99:28:b1:c8:
02:51:b3:98:54:ce:fb:b8:5b:3f:ef:61:f0:17:97:04:3e:e4:
c7:67:13:09:7b:fe:8b:b5:46:a0:ce:b2:71:95:d9:b6:e6:18:
fd:08:79:c9:0a:67:e6:1c:c3:c6:19:da:c4:18:b1:12:ec:83:
be:62:62:21:1e:cb:7d:ae:07:a5:38:b7:2d:61:93:28:81:17:
78:de:40:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:16 2024 by rpki-client on console-fra.rpki-client.org