Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zn1YB_-ddQ269BPZEl_tUM1DwhA.roa
File: Zn1YB_-ddQ269BPZEl_tUM1DwhA.roa (raw, json)
Hash identifier: dgyx4ldFDK14DdDOiIXzt9jwP3JXYRKH1JJW9P1n+HA=
Subject key identifier: 66:7D:58:07:FF:9D:75:0D:BA:F4:13:D9:12:5F:ED:50:CD:43:C2:10
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191E0E59A0FA77E62B7D740DCE791529FDF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zn1YB_-ddQ269BPZEl_tUM1DwhA.roa
Signing time: Wed 11 Sep 2024 11:43:49 +0000
ROA not before: Wed 11 Sep 2024 11:43:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.58.155.0/24 maxlen: 24
194.87.29.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.189.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 13 Sep 2024 09:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:e5:9a:0f:a7:7e:62:b7:d7:40:dc:e7:91:52:9f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 11 11:43:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=667d5807ff9d750dbaf413d9125fed50cd43c210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:25:8a:8d:7b:ce:e9:6b:9a:b4:ce:fd:25:
3a:34:b0:2b:50:83:40:c2:df:28:02:a2:5d:f1:0d:
c0:66:c3:07:c2:24:38:d8:18:11:e4:dc:21:b2:36:
d6:fd:28:41:85:44:cf:86:80:32:f9:46:b2:6e:a8:
26:6f:0d:82:b5:f9:90:2b:fa:83:ba:2d:75:be:f2:
4d:52:36:24:cd:99:17:1c:fa:f0:cc:fe:cc:17:e1:
49:9d:0c:a7:4b:e7:c2:aa:91:e5:e2:80:2c:01:fb:
60:4e:fe:53:90:28:89:06:2f:32:32:90:4f:3d:6a:
57:c7:ff:86:5b:fe:8f:da:00:ee:d2:2a:83:ad:82:
43:74:b7:f5:41:6a:8c:e3:0a:05:39:1e:1d:5c:4e:
6a:71:09:74:7a:e2:ff:b3:d5:51:7b:11:4a:1c:0c:
b7:52:0a:3c:b0:88:be:90:30:15:08:1c:54:1f:96:
c1:98:d1:b1:a5:9d:0f:f0:9a:2a:bf:fe:c6:27:c4:
78:57:7a:2a:64:b6:eb:aa:63:e1:02:a7:85:5b:93:
9d:59:f8:ce:57:2c:4b:79:04:d2:62:5c:06:42:ad:
7b:fb:56:58:b9:e4:47:a6:b6:b4:87:6a:5d:07:df:
fb:ac:ff:70:32:be:c4:46:50:c7:5e:77:17:92:eb:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7D:58:07:FF:9D:75:0D:BA:F4:13:D9:12:5F:ED:50:CD:43:C2:10
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zn1YB_-ddQ269BPZEl_tUM1DwhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.155.0/24
194.87.29.0/24
194.87.82.0/24
194.87.169.0/24
194.87.189.0/24
195.133.24.0/23
195.133.50.0/23
195.133.92.0/23
212.192.1.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
06:4c:f7:dc:1f:4f:0c:8b:7d:33:8e:58:d0:ba:e7:af:8e:bf:
84:4c:4d:2e:88:d7:a9:b5:31:73:6f:6b:fe:50:53:82:e4:32:
c3:4d:c8:16:9d:5e:0a:dc:ca:16:fa:48:02:6e:27:e5:21:01:
b1:34:b2:0f:c3:d6:16:55:23:87:b9:a2:02:d8:cc:5b:44:18:
1b:7a:86:f0:a2:22:ed:3a:64:4e:15:c9:7d:b6:4c:82:27:27:
9f:d9:ed:00:c4:19:bd:fd:1a:6c:d8:3a:ef:b6:f5:e7:85:a8:
f5:48:4f:92:2d:cb:a9:6b:ce:d7:f0:d9:79:71:54:57:32:55:
e2:52:08:3b:f4:b7:04:ad:3d:0e:16:a0:12:b1:12:4f:31:03:
df:5f:5d:95:6e:22:02:f8:11:83:12:97:81:67:5c:0a:08:31:
2d:9c:0a:59:b9:f3:6c:e1:b3:23:19:63:dd:21:09:9f:38:46:
69:fe:47:d1:63:d9:c8:f3:69:88:54:f9:9a:53:31:40:b2:61:
c4:00:1f:97:7f:44:56:c3:0d:23:4c:3b:9a:dd:86:99:13:d4:
9d:96:a3:7d:e1:ee:41:4e:b3:29:1d:70:bf:0d:60:ec:87:43:
34:a3:60:cd:73:c5:98:7f:8a:9d:50:59:50:80:e0:6c:32:fd:
aa:11:32:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 12:22:10 2024 by rpki-client on console-ams.rpki-client.org