Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b15_w2obPzK3bq2X3J2OURTNW5Q.roa
File: b15_w2obPzK3bq2X3J2OURTNW5Q.roa (raw, json)
Hash identifier: btEhYirkhdRR7SnVzyVhYTt62DONu7yAudlaRmkJMfA=
Subject key identifier: 6F:5E:7F:C3:6A:1B:3F:32:B7:6E:AD:97:DC:9D:8E:51:14:CD:5B:94
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01926BCFC8F26F6D893C6B27E89A9701F512
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b15_w2obPzK3bq2X3J2OURTNW5Q.roa
Signing time: Tue 08 Oct 2024 11:07:12 +0000
ROA not before: Tue 08 Oct 2024 11:07:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 192.124.180.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
195.133.56.0/24 maxlen: 24
195.133.57.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
195.133.61.0/24 maxlen: 24
195.133.62.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 07:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:cf:c8:f2:6f:6d:89:3c:6b:27:e8:9a:97:01:f5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 8 11:07:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f5e7fc36a1b3f32b76ead97dc9d8e5114cd5b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:0a:d7:ac:5a:bf:af:10:30:07:0f:c2:cb:
df:f1:fa:fb:cd:09:81:25:43:bb:84:22:f2:56:bd:
75:63:52:15:62:c5:ff:c2:6f:10:90:a4:73:48:bf:
92:a4:6d:91:5f:79:69:d4:e2:7f:f6:d5:33:5a:08:
de:38:c1:27:28:bc:e8:8b:01:27:9f:f5:f3:df:f7:
91:8b:c7:c5:d6:d9:a1:87:de:81:6c:fd:56:4c:77:
70:e3:02:b7:c2:4e:48:38:33:c1:ec:93:f8:ce:f8:
e8:16:26:42:6c:71:f3:8b:c0:3f:ff:7c:df:15:56:
b3:c0:a2:30:b8:08:de:be:12:b9:35:05:e9:bf:c0:
8e:83:69:b9:6c:ec:92:15:65:be:a9:52:a4:fd:a1:
ad:9a:7b:bb:7c:16:db:6d:8f:cc:b4:19:a4:a7:94:
5f:45:50:b6:27:47:a9:b8:10:1d:ae:0a:9c:d6:32:
99:d6:b0:d0:03:49:4d:cf:42:55:8c:43:19:fb:01:
a7:77:ff:01:06:b9:ce:c0:d9:96:19:c5:a4:a4:51:
fd:49:e7:2f:49:60:92:37:57:4f:7d:04:ca:a4:72:
c1:c4:e3:81:f4:2d:d4:5d:2b:5a:0a:1f:e1:aa:79:
c6:f0:54:ff:07:27:ad:82:61:60:21:4d:9e:2a:69:
56:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5E:7F:C3:6A:1B:3F:32:B7:6E:AD:97:DC:9D:8E:51:14:CD:5B:94
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b15_w2obPzK3bq2X3J2OURTNW5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.180.0/24
192.124.183.0/24
194.87.178.0/24
194.87.224.0/24
194.135.33.0/24
195.133.31.0/24
195.133.56.0/23
195.133.60.0-195.133.62.255
195.133.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d7:4e:e3:a3:2d:cf:30:6a:1d:3f:42:5a:6a:53:0a:e9:78:
2f:a9:df:85:35:a5:e4:35:82:82:3c:50:5b:99:9b:f5:55:77:
73:7b:e2:a3:52:de:7e:65:8c:e1:3a:8e:f4:67:51:a0:3b:fd:
b0:5e:da:fb:bc:bf:17:e9:9c:ca:9b:9f:46:f9:14:2c:fa:ac:
21:2e:21:d3:b7:fb:36:16:0d:14:66:ee:f0:c4:d8:ca:bd:54:
06:25:78:9e:8c:92:f3:68:a2:a2:ba:18:3e:8b:32:94:32:1f:
da:87:af:26:57:3d:5e:44:62:77:95:89:cb:aa:c1:c7:b5:23:
3c:df:e3:8d:8a:f7:03:cd:c4:4c:40:d4:08:0b:2d:08:a1:74:
00:a3:3f:e0:b6:3a:e1:37:22:17:3b:c1:fe:38:d9:d4:9a:c6:
2d:5c:a4:60:1e:64:4a:64:86:3b:bf:8a:3c:fe:13:39:1a:74:
39:6b:b1:fb:3c:9b:a7:9d:ad:bc:7e:af:f1:a7:f2:73:f1:de:
48:2b:bb:82:f7:c7:02:5a:10:4b:56:e0:c8:b7:94:39:89:84:
9a:d4:03:5a:98:55:32:05:50:6a:8d:72:f1:04:5a:12:98:c4:
f8:8c:e5:f7:c1:d9:94:3e:58:eb:a5:06:12:10:f9:fd:64:6c:
8e:dc:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 09:30:34 2024 by rpki-client on console-fra.rpki-client.org