Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UDB7jkIxNG8DR0KlIlwyuS8Kw2s.roa
File: UDB7jkIxNG8DR0KlIlwyuS8Kw2s.roa (raw, json)
Hash identifier: kvbI1mHf81WjhMXx9GCzLpmmXM1jgLTVMBBtf53v5k4=
Subject key identifier: 50:30:7B:8E:42:31:34:6F:03:47:42:A5:22:5C:32:B9:2F:0A:C3:6B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01902EBE30C62E29C3DE85E7E7DA84DB6C91
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UDB7jkIxNG8DR0KlIlwyuS8Kw2s.roa
Signing time: Wed 19 Jun 2024 04:25:34 +0000
ROA not before: Wed 19 Jun 2024 04:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.58.56.0/23 maxlen: 23
194.87.169.0/24 maxlen: 24
195.58.39.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.193.4.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 24 Jun 2024 10:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2e:be:30:c6:2e:29:c3:de:85:e7:e7:da:84:db:6c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 19 04:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50307b8e4231346f034742a5225c32b92f0ac36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:21:f0:be:2b:13:c5:bd:43:7e:86:d4:8c:
d2:3e:85:0b:c2:90:3e:ef:b5:0b:e6:06:5e:03:aa:
a7:a5:5a:76:db:92:4e:9b:d2:2a:2b:22:8f:42:f0:
d3:8a:78:98:0d:8c:73:27:62:7a:d2:d3:7f:df:35:
3b:38:e7:25:a4:d6:a0:22:4a:62:69:4a:a5:f0:71:
0f:b1:9a:a8:2c:98:99:7c:e6:63:d5:a1:40:35:76:
b1:34:39:e4:ec:e1:e1:bc:0e:ad:c1:9c:78:57:68:
90:89:23:ff:1d:60:6e:4f:19:73:40:00:8f:79:23:
6e:70:39:ac:91:7f:b6:fd:80:56:83:1e:50:bf:03:
7b:4f:f5:cf:1c:5e:3b:9d:9c:dd:3b:94:9d:3c:3a:
93:bc:96:36:e7:20:a0:6d:ce:04:96:59:30:95:54:
e8:30:6b:23:42:b9:a7:0f:c7:24:2c:14:f7:91:67:
43:61:3d:cf:72:02:b5:12:24:04:bd:29:42:0b:a2:
e4:da:06:33:00:58:42:c0:1b:65:35:db:67:7f:6f:
d2:a9:5f:bc:9b:c2:3f:a3:e5:b7:ee:b0:07:c8:67:
48:57:46:d7:6f:7f:db:04:b4:e3:41:88:c0:81:a5:
8e:ae:b5:c9:3c:85:36:9f:cb:82:cd:0e:bf:d1:7b:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:30:7B:8E:42:31:34:6F:03:47:42:A5:22:5C:32:B9:2F:0A:C3:6B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UDB7jkIxNG8DR0KlIlwyuS8Kw2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.56.0/23
194.87.169.0/24
195.58.39.0/24
195.133.25.0/24
195.133.50.0/23
195.133.92.0/23
212.192.1.0/24
212.193.4.0/24
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
46:73:c1:bc:54:a6:cb:e7:88:af:d6:7c:6d:65:9e:5c:ac:01:
33:4c:4b:f8:6e:3f:c1:7b:a7:f7:09:32:bc:6b:c2:eb:a2:f9:
79:e4:97:31:48:dc:9f:1f:41:4f:d0:b0:47:ed:19:d1:00:3d:
d8:a0:ee:1f:10:eb:6a:da:45:a3:b1:c5:de:a0:7f:97:be:d8:
38:01:75:74:de:09:d2:f0:b2:03:24:55:84:ee:d8:4b:1f:88:
de:9d:40:99:00:fd:f5:29:6d:23:fd:3c:01:9f:5e:76:54:f1:
a0:c6:ee:60:fd:2c:31:a5:72:a8:4f:7a:19:75:0f:6f:81:b3:
9b:f4:41:c0:5f:e2:dc:61:64:b4:53:45:95:84:76:b0:81:20:
42:6c:49:15:e5:fe:60:bf:44:e1:93:53:59:c5:78:9b:60:f3:
b7:3f:a2:f1:3b:6a:6b:21:c5:7b:94:74:ce:c0:30:d1:cf:95:
c3:c3:14:f9:ea:fd:bc:bf:10:66:56:76:fa:d0:8e:f2:81:a3:
11:5b:d4:8d:ae:f3:a0:57:00:bc:26:fe:2d:a5:ad:bd:ef:bf:
64:9e:90:b0:a1:54:07:e6:d2:81:61:77:2b:b8:ba:92:88:db:
24:91:4d:a3:b2:a6:6e:8c:cb:d3:0b:79:91:7f:dd:11:6c:c5:
df:74:fd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 13:02:52 2024 by rpki-client on console-fra.rpki-client.org