Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xd4aX_Hvu88E8dCmNZMee_PBZ0I.roa
File: Xd4aX_Hvu88E8dCmNZMee_PBZ0I.roa (raw, json)
Hash identifier: QcMbB9tpmjhyk4YcR0WHD8MQxtP2zzwpVUQE6Geer38=
Subject key identifier: 5D:DE:1A:5F:F1:EF:BB:CF:04:F1:D0:A6:35:93:1E:7B:F3:C1:67:42
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191FFC9EC3DCD888E5497A8FC799CB22266
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xd4aX_Hvu88E8dCmNZMee_PBZ0I.roa
Signing time: Tue 17 Sep 2024 11:41:48 +0000
ROA not before: Tue 17 Sep 2024 11:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.203.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.29.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.189.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.28.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 17 Sep 2024 18:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:c9:ec:3d:cd:88:8e:54:97:a8:fc:79:9c:b2:22:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 17 11:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dde1a5ff1efbbcf04f1d0a635931e7bf3c16742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:94:8e:35:bd:f5:36:23:06:03:cc:aa:d6:42:
5f:7c:a3:11:cf:15:44:b9:aa:d7:a5:6a:46:8d:9c:
48:79:f5:37:7e:72:54:e5:9b:e4:3a:42:92:34:73:
f0:f4:33:7f:fe:01:c3:14:9b:d9:2b:ea:64:a9:cd:
26:25:83:57:07:a5:39:3a:1a:5b:05:42:43:8f:77:
89:a7:81:b1:1b:f7:8f:df:06:53:69:ab:d7:9c:c8:
f0:aa:95:dd:23:43:6e:0e:f6:12:0d:a4:24:2f:2e:
bd:67:11:a2:80:79:de:cd:79:72:dc:cb:01:8e:34:
bd:1d:03:8a:45:97:ec:00:99:cf:c4:43:32:46:0b:
5e:42:b8:98:f0:f6:83:1e:6f:3c:19:d5:7b:aa:94:
13:89:ac:a0:29:00:71:41:d4:70:bf:76:44:ca:e0:
83:85:ed:ec:c2:9f:78:e8:dc:04:cd:5a:b4:e2:71:
29:5a:1c:6b:fd:a9:a0:22:0a:f1:ca:65:d2:26:9c:
7a:fe:bd:3e:00:30:1f:07:3d:89:00:bc:66:f2:38:
c3:a6:96:0d:22:68:04:d8:ab:e8:31:4b:52:1b:38:
2c:c6:e1:0f:15:8a:4e:7d:f8:65:75:25:97:4b:33:
71:c8:52:07:bb:3e:ea:cf:4d:3f:86:70:07:8b:da:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DE:1A:5F:F1:EF:BB:CF:04:F1:D0:A6:35:93:1E:7B:F3:C1:67:42
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Xd4aX_Hvu88E8dCmNZMee_PBZ0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
194.58.155.0/24
194.87.29.0/24
194.87.82.0/24
194.87.169.0/24
194.87.189.0/24
195.133.24.0/23
195.133.28.0/24
195.133.50.0/23
195.133.92.0/23
212.192.1.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
06:75:c5:89:7c:6d:43:59:aa:d5:65:c3:da:89:b2:55:4f:49:
2f:12:75:aa:44:f5:b6:5d:d3:d5:6b:60:86:4d:23:41:3d:9b:
d2:48:61:13:9c:ab:1f:66:07:44:f9:7a:4b:61:16:eb:5c:ff:
6e:40:58:8e:20:bf:e2:a5:7d:ca:c8:80:78:c1:dd:35:ec:26:
11:8f:94:64:e0:71:bf:76:63:43:7f:4f:41:8d:ef:0b:61:14:
21:c5:0d:30:89:da:e1:65:df:69:b0:c6:0d:07:e4:32:f1:bb:
47:73:f4:fc:4a:87:5c:d4:f8:ed:00:8a:28:d7:bd:ca:93:09:
a5:a7:96:17:7f:71:fe:fa:62:3c:9b:af:04:70:d7:1c:8f:2e:
ee:9b:23:2a:40:71:ba:7e:3a:7d:ae:85:ac:75:12:ad:c5:26:
75:af:fc:af:35:79:e4:b9:a6:9c:56:57:c4:4b:c2:bc:da:cf:
74:a6:56:d0:0a:28:04:2b:10:a7:49:90:c0:55:cd:f0:16:74:
13:a3:f6:4c:e6:5f:6d:a0:e2:28:af:d0:bc:35:17:11:90:7e:
02:c8:43:ab:3a:76:3b:59:2d:56:8b:61:51:00:8e:25:d9:e5:
ae:af:31:21:aa:c9:49:8f:90:61:ef:90:ab:48:5a:71:7a:d7:
f6:84:a3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 21:03:17 2024 by rpki-client on console-ams.rpki-client.org