Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UCgCM78hGTndY6hkaLNZcCgjAlI.roa
File: UCgCM78hGTndY6hkaLNZcCgjAlI.roa (raw, json)
Hash identifier: zJFNB2Aa8urXRksqt6bjMEuvIJU0MYZPjPi5yY8YkQ8=
Subject key identifier: 50:28:02:33:BF:21:19:39:DD:63:A8:64:68:B3:59:70:28:23:02:52
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A82AC38FDB8AC4CA92AD856BFD387
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UCgCM78hGTndY6hkaLNZcCgjAlI.roa
Signing time: Tue 02 Jan 2024 12:33:52 +0000
ROA not before: Tue 02 Jan 2024 12:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200482
IP address blocks: 212.193.13.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 13:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:82:ac:38:fd:b8:ac:4c:a9:2a:d8:56:bf:d3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50280233bf211939dd63a86468b3597028230252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:75:13:01:02:33:b2:c1:43:97:3d:3d:30:
b7:a1:ec:64:8a:10:94:13:c7:f4:41:a7:1a:ff:c0:
e0:52:3c:6e:60:ea:80:9c:fc:b2:18:f8:f6:5a:c2:
d5:3e:f3:1f:2a:52:f8:6c:6e:ae:16:11:d0:97:47:
a8:a2:20:07:26:40:8d:2e:b9:f4:74:a3:12:f8:dd:
9e:58:a1:cf:8b:7d:00:11:dd:c1:97:c7:21:23:bb:
88:ac:db:01:57:13:61:23:6a:f7:16:2e:1e:f6:21:
6c:ce:17:9d:76:9e:21:fe:8d:ae:9f:fb:9e:9f:23:
9c:88:41:1e:30:1b:94:5a:cf:71:81:ee:82:b1:78:
92:4c:9f:d8:84:77:00:bc:22:be:22:d1:a5:1b:0c:
c2:da:f0:45:c7:82:ab:9b:0c:60:c6:bb:1d:5b:12:
ef:e8:82:d7:f1:1f:57:8f:f0:79:d7:a1:56:e8:41:
51:4a:7a:e8:8f:d0:39:a2:e3:05:db:18:82:0d:75:
fb:64:4c:44:c6:72:29:f5:41:fe:1e:fd:e5:39:76:
cf:70:e4:37:89:47:35:c0:b4:3f:cb:63:fb:d2:bb:
8d:31:0b:e4:cf:4b:8d:0a:37:42:ff:a8:6e:df:3e:
06:bd:4d:58:1b:37:7c:b2:87:27:31:91:bf:a5:93:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:28:02:33:BF:21:19:39:DD:63:A8:64:68:B3:59:70:28:23:02:52
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UCgCM78hGTndY6hkaLNZcCgjAlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.202.0/24
194.87.76.0/24
194.87.172.0/24
194.87.231.0/24
195.133.15.0/24
195.133.81.0/24
212.193.13.0/24
Signature Algorithm: sha256WithRSAEncryption
29:eb:0b:32:ab:d5:e3:50:fe:a8:b6:96:52:a6:13:47:7a:f4:
0b:33:47:be:56:4d:d4:78:2e:2a:a2:ae:2f:51:df:3e:e9:47:
da:ae:0a:10:6d:52:68:b9:f5:b5:fc:47:0b:90:4c:6b:6c:c1:
8e:16:9b:77:dc:56:72:53:18:07:7d:e8:02:de:7c:90:be:9f:
67:ce:9d:4a:ab:ce:98:d2:86:6e:6f:ca:19:6e:0b:30:a4:ae:
7e:10:37:fc:a3:3c:b0:57:3b:ee:fa:30:af:4a:3b:57:22:5b:
3b:10:8e:0a:95:b2:6e:c9:cb:32:76:f9:d7:02:92:e6:9d:12:
7d:29:b5:1f:91:0e:6f:05:32:e0:2d:30:38:be:76:56:48:b0:
00:d7:a0:6d:c8:bf:d4:56:58:61:f1:cd:b0:b4:6b:01:78:45:
0b:41:69:20:ae:58:0f:91:0a:be:b0:8b:be:16:1f:2a:15:8f:
7f:59:9d:46:66:e7:d3:44:19:57:5b:c6:46:8b:d0:ee:3b:eb:
df:b9:ef:90:49:21:83:56:d0:40:94:84:81:8d:0b:4e:50:52:
2e:23:32:71:1f:bb:5a:49:20:c4:89:4d:4f:6d:d1:dc:d8:8f:
fb:f9:a6:e3:ee:3b:3d:4f:50:d2:42:53:79:19:c1:97:0c:29:
9b:be:ea:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:17 2024 by rpki-client on console-fra.rpki-client.org