Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z1VBYHn8kuH3ov-QX8Y6h0AmWdU.roa
File: Z1VBYHn8kuH3ov-QX8Y6h0AmWdU.roa (raw, json)
Hash identifier: sPvQhhzNf090DBSvN+zQa8JuCEm8mqmpVkH5cIphJXY=
Subject key identifier: 67:55:41:60:79:FC:92:E1:F7:A2:FF:90:5F:C6:3A:87:40:26:59:D5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0192909A6B4077C11D19BE4E45F9B471F2BC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z1VBYHn8kuH3ov-QX8Y6h0AmWdU.roa
Signing time: Tue 15 Oct 2024 14:34:52 +0000
ROA not before: Tue 15 Oct 2024 14:34:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 192.124.180.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.31.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.62.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.94.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.193.25.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 16 Oct 2024 07:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:9a:6b:40:77:c1:1d:19:be:4e:45:f9:b4:71:f2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 15 14:34:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6755416079fc92e1f7a2ff905fc63a87402659d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:6b:a0:67:49:b4:ea:59:73:ea:2f:fd:e0:
9a:9b:35:de:4f:76:61:ab:88:fc:ae:42:dd:97:0d:
56:a1:18:85:fd:98:89:7f:05:fe:c5:82:f4:2e:07:
3d:63:63:7e:92:7f:5f:85:ac:d1:69:95:4c:4e:9d:
13:9f:fc:b0:e1:33:c3:2b:12:55:35:ce:d4:fe:86:
ae:69:a0:df:c6:f1:b3:2f:ca:aa:81:7f:fa:ce:ae:
79:63:bd:23:a1:f2:ad:8c:a7:9f:f4:a0:19:63:3a:
5d:c2:7f:34:bd:df:48:d6:94:59:aa:c2:2c:0e:e3:
3f:42:d7:37:97:3b:22:1b:4d:06:b4:e8:3e:10:e8:
f1:8c:7c:40:6f:ff:b3:ae:2d:d4:b0:d7:72:d2:47:
2e:17:8a:d7:e5:97:8b:7f:5a:62:c9:5f:91:38:b6:
12:5d:82:67:3b:57:3a:70:e4:76:b8:8a:6b:30:3c:
fd:ee:5b:ad:f3:37:62:3c:1b:f9:d1:d8:e8:dd:36:
db:05:13:42:18:ca:78:25:0d:d0:f6:9f:7b:e7:73:
51:8f:5e:6a:55:34:f8:e1:16:97:eb:61:33:38:ae:
d7:b7:db:85:49:f8:82:42:6d:2b:73:94:34:9a:33:
47:cb:20:af:bc:53:fc:24:43:14:14:95:9b:e0:7b:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:55:41:60:79:FC:92:E1:F7:A2:FF:90:5F:C6:3A:87:40:26:59:D5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z1VBYHn8kuH3ov-QX8Y6h0AmWdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.180.0/24
194.58.155.0/24
194.87.169.0/24
194.87.178.0/24
194.87.224.0/24
194.135.33.0/24
195.133.24.0/23
195.133.31.0/24
195.133.40.0/23
195.133.50.0/23
195.133.62.0/24
195.133.92.0-195.133.94.255
212.192.1.0/24
212.193.25.0-212.193.27.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
65:2c:e2:f4:7e:75:20:67:b3:56:8b:96:6b:84:9c:f2:2c:b1:
91:9c:ba:06:2a:1a:f0:4a:e5:36:14:37:6c:a1:9e:c8:d1:47:
26:81:51:40:f9:4d:aa:eb:b5:a2:0f:d3:5f:73:97:85:a8:d3:
c5:0c:03:97:15:bf:80:5c:23:86:fe:fe:ea:e4:2e:38:ec:87:
d9:86:e1:55:00:2e:ca:8c:2d:34:02:a5:20:70:fb:ab:22:52:
0f:26:f8:e2:75:92:56:5c:b8:57:6b:9b:b4:01:ce:af:40:64:
e1:3e:1b:d8:32:a7:e5:f9:f2:f5:76:71:97:a6:bd:f9:a7:78:
f6:36:c1:df:34:b9:7f:ee:18:67:c0:d7:57:84:ce:31:e2:ec:
68:48:d2:ce:be:b5:86:56:e9:50:0c:fc:a6:92:2d:ab:de:65:
6e:42:bb:21:c3:02:58:9b:57:2a:6a:dc:4b:9f:ba:64:8f:86:
ce:98:2e:5f:ab:3e:43:ea:d1:85:01:2f:29:e3:bf:57:1f:0c:
ca:03:93:df:45:d2:4e:9c:15:10:36:0e:c4:0e:d3:f2:88:bb:
31:e3:d8:d8:0c:7b:64:5e:59:35:ec:07:42:ce:14:09:70:ca:
89:bb:2b:e0:21:34:97:ac:98:e3:ad:0a:d2:ba:30:ba:41:e1:
8d:f2:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 09:53:48 2024 by rpki-client on console-fra.rpki-client.org