Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SjvUDGqZ9DN1_1dvcClt3pAJ_Ok.roa
File: SjvUDGqZ9DN1_1dvcClt3pAJ_Ok.roa (raw, json)
Hash identifier: yypdbQaLgLKafzKa9AfSg8M8gcHOzxpEp21MAj+jxyU=
Subject key identifier: 4A:3B:D4:0C:6A:99:F4:33:75:FF:57:6F:70:29:6D:DE:90:09:FC:E9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018E363A29C0855CDFEEDAA122B1FB67A0BD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SjvUDGqZ9DN1_1dvcClt3pAJ_Ok.roa
Signing time: Wed 13 Mar 2024 05:12:45 +0000
ROA not before: Wed 13 Mar 2024 05:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.7.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 11:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:36:3a:29:c0:85:5c:df:ee:da:a1:22:b1:fb:67:a0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 13 05:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a3bd40c6a99f43375ff576f70296dde9009fce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:92:a9:63:36:a5:08:8e:02:55:67:11:8e:9c:
dc:0c:4e:ff:49:5e:14:e9:bf:66:88:5e:bc:6e:a0:
2c:96:43:1a:94:a2:c7:f2:0f:3c:f9:c2:2d:ef:86:
01:37:1d:f4:5a:0e:15:97:d3:a3:d6:bf:2f:19:df:
6c:91:df:1a:38:c4:09:c3:97:21:cf:38:32:0d:df:
e8:a7:dd:4a:13:59:89:5d:7b:75:26:9c:10:8a:6a:
db:dd:5f:f4:76:43:ca:40:6f:ef:02:3e:e5:5b:d7:
b7:be:4e:f7:13:a1:17:75:c8:e3:82:2f:fd:4b:6f:
7a:c0:74:be:53:86:0b:00:29:3f:67:28:2d:89:cd:
ea:68:8b:26:21:88:94:22:9a:47:fd:8e:66:d2:6d:
81:44:a5:5c:5b:2c:81:ca:ed:b3:4d:a7:bf:d1:1f:
73:b7:c5:e9:74:ee:66:cf:ee:b3:55:05:7f:16:b9:
38:c7:da:2f:10:f1:f9:31:c1:01:a2:46:14:4c:01:
39:24:a2:00:a6:af:be:c8:6f:a0:64:79:ce:f3:ca:
72:3e:33:0c:15:96:f0:12:1d:e2:27:bc:cf:cc:de:
66:1f:3e:d1:d3:e7:4b:76:60:e7:f0:9b:b3:93:0f:
21:ce:a1:50:30:75:5a:97:2b:50:e0:d9:26:13:70:
5c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3B:D4:0C:6A:99:F4:33:75:FF:57:6F:70:29:6D:DE:90:09:FC:E9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SjvUDGqZ9DN1_1dvcClt3pAJ_Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
193.124.207.0/24
194.87.169.0/24
194.87.245.0/24
195.133.25.0/24
212.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d8:16:a1:50:a5:53:c6:0d:65:1f:14:d1:49:99:e0:cd:4f:
a0:40:38:4e:56:5f:4d:ef:4c:63:c4:a4:63:01:22:42:da:cf:
ee:36:65:08:a1:ec:ee:ab:63:f4:a5:5d:d2:4e:64:37:17:c1:
80:23:49:bc:27:36:31:e8:fa:d1:26:ba:9e:88:56:23:f3:0f:
72:05:62:25:38:17:e6:13:60:de:31:25:5b:16:d0:ec:72:6a:
6c:f1:f4:93:25:89:e7:5b:24:1f:b5:c6:29:aa:10:02:70:20:
e4:e9:25:8d:69:79:2a:9b:17:9b:66:6c:5b:5c:f6:a0:f6:b2:
9e:9c:b1:e4:80:e6:fe:29:5b:7f:58:c5:98:58:8b:7b:64:b1:
62:d1:d1:5c:c7:3b:f5:68:d4:79:1b:b9:26:7c:30:5f:0e:a4:
11:c2:4d:ed:95:d2:a5:82:21:bf:42:fd:9d:99:cc:da:5a:55:
13:0f:1e:fa:76:9b:c2:16:0c:63:7f:48:84:ed:88:6b:e3:1e:
b0:e9:b2:4a:13:7b:84:a5:a5:e7:7e:50:a1:ec:19:b4:7a:71:
de:cc:13:0e:47:ea:3a:bf:ab:d0:02:97:c4:c4:ba:b2:6f:c8:
cd:ef:de:97:f2:b2:0d:11:84:f9:f9:cc:c4:89:16:c8:d1:bd:
45:6a:7d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 17:00:28 2024 by rpki-client on console-ams.rpki-client.org