Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_jPOn9LPXUaEpIVwddtBT-MBnV8.roa
File: _jPOn9LPXUaEpIVwddtBT-MBnV8.roa (raw, json)
Hash identifier: gxEgTH6Wu/8yBE/6Tz/cdFBPrNWhvfGtMmpOoyj2v5s=
Subject key identifier: FE:33:CE:9F:D2:CF:5D:46:84:A4:85:70:75:DB:41:4F:E3:01:9D:5F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018EBC1CE5E8C15C2F78BC513097363881D4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_jPOn9LPXUaEpIVwddtBT-MBnV8.roa
Signing time: Mon 08 Apr 2024 05:09:54 +0000
ROA not before: Mon 08 Apr 2024 05:09:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 192.124.172.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 08 Apr 2024 10:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:1c:e5:e8:c1:5c:2f:78:bc:51:30:97:36:38:81:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 8 05:09:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe33ce9fd2cf5d4684a4857075db414fe3019d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:7a:66:c0:ad:fe:f5:83:ee:1d:ba:e6:6a:
08:67:c8:13:99:9f:ed:b8:44:46:89:70:b1:60:47:
0a:ae:75:c5:a6:67:98:d5:04:c9:43:ff:09:27:3e:
df:df:84:3b:a1:0c:26:f9:7d:ad:40:a9:1b:ff:64:
4f:b9:8d:d6:24:ff:0a:af:9f:70:0f:70:76:44:ef:
fd:02:70:8e:83:99:c5:42:0b:dd:a3:fd:3f:6a:de:
6b:e1:eb:6d:d9:43:69:de:16:1b:5f:5d:33:2d:1c:
45:8c:65:61:d3:d4:4b:30:5d:9b:ef:2a:5d:b9:cb:
b7:f4:7b:2e:f5:e7:5f:5e:b5:71:61:42:40:2a:e6:
3f:ff:b6:fa:da:c8:1f:f2:0d:04:17:6f:66:5e:bd:
bb:44:4e:7f:4e:9b:2c:9e:ca:2d:24:32:d2:5b:e3:
a8:b4:eb:0e:96:ca:bf:57:df:c1:e6:59:3f:07:e2:
d4:98:81:61:8e:16:66:82:ee:00:b6:47:3b:ca:67:
f6:10:4a:c9:11:df:c0:40:06:a0:56:41:d0:b5:f7:
51:ac:19:5e:ac:6e:de:b4:3d:f3:44:86:a0:99:57:
4b:21:a7:68:af:98:35:93:e0:a8:a8:37:de:d4:31:
db:a7:42:54:ab:d5:2e:67:6b:dd:6f:28:4b:e0:67:
d9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:CE:9F:D2:CF:5D:46:84:A4:85:70:75:DB:41:4F:E3:01:9D:5F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_jPOn9LPXUaEpIVwddtBT-MBnV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
193.124.7.0/24
194.87.73.0/24
194.87.169.0/24
194.87.245.0/24
195.133.25.0/24
212.192.1.0/24
212.192.208.0/24
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
56:2c:aa:6b:bf:d5:d7:67:a8:9c:90:44:d5:4e:f2:56:78:81:
67:07:10:82:c9:38:6b:cb:58:19:97:cb:ea:4b:60:79:38:ab:
4b:c5:4a:e3:91:b2:4d:5c:06:15:e6:64:b9:4b:b2:95:50:bf:
b2:17:85:f5:18:2b:c7:fa:ab:1f:a9:98:b5:65:59:c9:bc:5d:
3a:47:6d:c8:6e:af:7f:52:29:cf:82:12:5e:ce:34:e0:40:98:
e7:6c:15:e7:61:d9:93:33:a8:cc:dd:29:c5:00:79:1d:4b:dd:
11:64:0a:89:a4:d6:b7:df:d3:ec:db:be:42:c6:02:bb:f1:0e:
1f:e6:38:8c:16:25:dd:f0:8f:5a:ce:88:07:ab:c6:24:90:ac:
91:54:4f:d4:30:91:ae:4d:52:e5:f0:c0:0f:f9:9b:4f:ac:ad:
0a:01:63:8f:8d:f9:14:8f:12:ce:a6:c3:f4:50:77:f4:6d:2e:
34:0a:f3:27:2c:28:b0:d4:e6:73:1d:d9:4c:04:0f:63:38:6e:
30:86:9f:f0:df:3c:65:7d:25:15:ee:a9:bc:d4:f3:ad:9a:fd:
69:ff:15:24:ac:93:90:2f:b2:ae:8f:e8:f7:5d:17:f9:7b:43:
f1:1b:ae:b9:8a:0d:6c:ad:1d:19:0b:67:1a:fd:12:58:a1:8a:
6a:93:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 14:28:31 2024 by rpki-client on console-fra.rpki-client.org