Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Sf2wt_RTptSmFBXEei3RBnljTLE.roa
File: Sf2wt_RTptSmFBXEei3RBnljTLE.roa (raw, json)
Hash identifier: fEEW9rob4njZme3PYz+UscFbnZ385Ah7x9gnjBkYe7M=
Subject key identifier: 49:FD:B0:B7:F4:53:A6:D4:A6:14:15:C4:7A:2D:D1:06:79:63:4C:B1
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187032A774A041DADABD66907EFF62A9515
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Sf2wt_RTptSmFBXEei3RBnljTLE.roa
Signing time: Tue 21 Mar 2023 07:55:27 +0000
ROA not before: Tue 21 Mar 2023 07:55:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 62.76.226.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:2a:77:4a:04:1d:ad:ab:d6:69:07:ef:f6:2a:95:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 21 07:55:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49fdb0b7f453a6d4a61415c47a2dd10679634cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:59:ca:4a:36:08:85:8d:69:ee:ae:b6:69:
d9:d9:af:dc:c8:88:cf:f4:df:db:e1:e7:b5:cd:46:
e7:17:9d:31:a2:80:2f:ec:a4:44:bb:ca:3d:94:5a:
71:30:08:c9:7d:9c:74:1d:48:3f:8d:6b:04:5c:2e:
af:3c:34:ce:8d:70:5b:0f:93:66:ff:1d:05:61:b1:
ea:79:25:fc:bc:02:47:91:d5:ca:fa:e0:ec:6f:4e:
04:ef:84:84:2e:1d:c0:6e:c4:5e:a3:37:0f:60:4a:
8b:f3:5a:03:34:f0:b0:3a:59:49:ff:6c:ff:89:3a:
c7:b6:dc:e6:56:59:81:eb:27:e3:5b:6d:01:ac:b6:
76:9e:d0:44:68:9f:df:bb:0a:0b:09:c1:94:98:96:
0c:7b:44:f0:fd:76:64:f7:80:bc:7f:0c:cf:01:e1:
16:bd:53:21:35:d3:2c:7f:84:d9:3d:69:42:fe:df:
6f:ed:89:f9:67:6a:0a:4d:c9:59:5c:da:77:89:69:
59:f3:31:b8:80:51:7a:5d:db:9f:80:61:7b:46:4e:
a9:72:05:d9:fb:ca:93:a7:a3:79:70:89:e3:91:60:
bc:cf:de:12:b3:ec:10:db:51:e1:67:b5:3a:40:52:
1a:32:ec:f4:b2:08:39:c6:44:7b:13:27:97:95:25:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FD:B0:B7:F4:53:A6:D4:A6:14:15:C4:7A:2D:D1:06:79:63:4C:B1
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Sf2wt_RTptSmFBXEei3RBnljTLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
192.124.180.0/24
193.124.90.0/24
193.124.200.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b5:1f:b4:7c:af:0e:cd:a7:7e:d9:1e:ee:1b:bd:ab:92:93:
41:c3:2c:21:94:e0:09:98:52:f3:72:80:d7:91:04:79:d2:62:
56:19:9c:d0:b8:b5:8b:28:c6:31:dc:3f:17:28:21:0b:91:eb:
0c:f7:5f:54:02:ad:a2:94:5d:d5:12:32:7a:74:63:51:5b:a9:
20:81:9c:a2:6b:91:63:80:04:b6:ed:c2:ca:ee:0a:ca:ca:50:
cf:df:04:6f:f9:d2:6b:de:91:b0:dd:b9:70:87:94:d1:31:73:
0f:69:a7:80:c3:2e:7f:8c:71:f1:6e:12:48:2b:aa:0d:a9:b9:
75:84:d0:59:c5:02:d6:29:32:3d:c5:b4:b1:e0:c4:2e:f0:5b:
aa:79:95:44:89:e2:5f:a0:a0:47:7b:04:5a:a1:6b:49:10:4a:
b5:bd:68:33:68:3a:ff:6a:0c:ca:7e:4c:8b:0a:2e:85:04:f5:
d5:3c:3e:24:0d:1b:a8:31:3c:82:f0:1e:5d:c6:d7:78:37:40:
96:6b:f6:15:d0:20:df:ae:9f:80:9a:d9:6c:a9:e6:20:c0:62:
3d:3c:72:0d:0f:10:28:f3:9f:6f:7f:7b:2e:89:16:ee:f8:27:
fd:8d:a9:9d:e5:b8:c9:f7:e3:d0:6d:82:48:4d:67:ce:b8:f1:
e7:11:51:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:03 2023 by rpki-client on console-fra.rpki-client.org