Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/V3VG3Co-jFurR2i9ejLqJ6ULZZA.roa
File: V3VG3Co-jFurR2i9ejLqJ6ULZZA.roa (raw, json)
Hash identifier: daxhbrstndtp8l9VNG0P/CQEhvE/q3KNlr+Qp5YnZ4o=
Subject key identifier: 57:75:46:DC:2A:3E:8C:5B:AB:47:68:BD:7A:32:EA:27:A5:0B:65:90
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018E31FD44DD9DBEE1DA44B647E3AABC7991
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/V3VG3Co-jFurR2i9ejLqJ6ULZZA.roa
Signing time: Tue 12 Mar 2024 09:27:45 +0000
ROA not before: Tue 12 Mar 2024 09:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 194.87.31.0/24 maxlen: 24
194.87.71.0/24 maxlen: 24
194.87.216.0/24 maxlen: 24
195.133.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 12:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:fd:44:dd:9d:be:e1:da:44:b6:47:e3:aa:bc:79:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 12 09:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=577546dc2a3e8c5bab4768bd7a32ea27a50b6590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:7a:f2:c2:73:60:66:ae:f7:5a:2c:06:24:
bf:02:3f:1a:68:52:78:8e:4b:f8:a5:ab:f9:8e:a0:
f1:93:8d:6a:7d:52:73:8c:9c:95:51:54:20:06:c9:
cb:04:53:99:45:6f:05:1c:1b:44:db:ca:0b:4d:47:
37:2f:d9:d6:1d:75:a3:2d:67:6b:ac:06:72:0d:0b:
82:a1:10:19:1d:87:5f:50:d7:83:d4:07:d0:d2:60:
d7:c6:c3:6f:ca:d5:92:b6:4e:ec:54:5e:b7:55:24:
d4:c8:0e:d9:24:be:f4:b7:ec:d5:38:9c:d1:ad:58:
65:a8:7a:ce:01:64:07:10:f0:8c:57:24:89:45:db:
99:95:13:6f:6e:cc:32:31:05:06:43:ba:6c:df:b6:
ac:c3:c8:4e:08:6b:b1:aa:38:66:0b:61:13:8c:d1:
eb:9f:50:a7:d5:ce:dd:9b:7f:a7:15:54:c6:12:dc:
87:63:f0:49:3b:8a:85:d6:76:3d:10:b0:be:8a:3c:
52:e3:9d:96:59:b9:d9:c3:f2:36:3a:e7:62:b4:fd:
42:7e:f7:93:35:67:bd:04:6b:b6:5c:77:ee:09:20:
30:3b:5f:54:f8:19:cb:bc:31:c3:3b:e3:9a:e7:09:
fc:d9:d8:40:bd:2b:53:7a:7b:5f:22:40:0f:33:fa:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:75:46:DC:2A:3E:8C:5B:AB:47:68:BD:7A:32:EA:27:A5:0B:65:90
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/V3VG3Co-jFurR2i9ejLqJ6ULZZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.31.0/24
194.87.71.0/24
194.87.216.0/24
195.133.88.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e2:e3:92:38:2b:73:d1:ec:7c:ce:be:59:23:2c:58:25:46:
37:f4:1e:9d:df:c2:81:94:84:43:90:5c:e3:a3:82:6d:32:ee:
af:d8:bb:b2:84:1b:99:a0:01:a2:df:8c:62:db:64:ff:1a:d6:
15:18:8f:8f:eb:2c:54:ba:85:85:c5:9c:35:44:04:76:ff:1e:
ed:17:cc:68:80:bd:30:f6:d1:eb:03:75:9b:d6:c2:e8:05:d9:
23:64:06:68:1e:77:d1:2d:a8:7e:43:1b:47:fe:3c:10:42:f6:
1e:72:15:62:d3:e6:26:fc:2a:36:ab:6a:46:3e:26:aa:1d:50:
e7:be:ea:2f:c2:d7:0c:33:d1:f2:21:ef:fe:a6:34:5c:63:9e:
58:c1:b8:87:d8:88:58:fd:bc:dd:0b:26:eb:45:21:e3:9a:a5:
30:5b:ec:4c:97:ef:65:e9:26:72:0a:be:7b:5c:e0:c7:25:55:
a0:8a:d2:5e:5f:ab:93:d3:87:dc:4c:dd:a1:cb:2e:97:68:93:
33:61:af:4f:cc:31:aa:4b:62:67:fa:e2:7d:dd:2f:8f:0e:f8:
d9:29:56:06:7a:b8:c7:a9:5d:7e:5f:21:64:d2:f2:1e:53:df:
99:5d:f5:38:bf:34:57:47:51:48:87:4e:68:3c:83:0a:53:af:
30:8c:d4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 17:24:38 2024 by rpki-client on console-fra.rpki-client.org