Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b4Xc4JmfjArkRU_QamNy7h77_Fk.roa
File: b4Xc4JmfjArkRU_QamNy7h77_Fk.roa (raw, json)
Hash identifier: XEwlJYruwl0xCWft+N8qrLzjHzgleHQ11EiU57+5jtI=
Subject key identifier: 6F:85:DC:E0:99:9F:8C:0A:E4:45:4F:D0:6A:63:72:EE:1E:FB:FC:59
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DA62F1E114B6DE0B3A95D720EF395B440
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b4Xc4JmfjArkRU_QamNy7h77_Fk.roa
Signing time: Wed 14 Feb 2024 05:55:22 +0000
ROA not before: Wed 14 Feb 2024 05:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 05:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:2f:1e:11:4b:6d:e0:b3:a9:5d:72:0e:f3:95:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 14 05:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f85dce0999f8c0ae4454fd06a6372ee1efbfc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2b:30:96:07:b9:06:98:51:d7:4a:d9:a1:6c:
e3:81:53:e7:65:44:9d:32:b7:33:f0:dd:42:ad:6f:
33:f8:23:9a:06:2b:e5:9f:a7:39:49:e3:51:d9:36:
4b:57:b8:e3:6f:f1:11:7e:9c:4c:32:b8:58:51:36:
da:5b:37:fb:94:c4:df:59:01:be:b8:e3:8c:54:7b:
aa:93:20:47:b9:75:71:8b:84:bd:33:d7:71:1b:b6:
e1:3f:88:5d:2f:94:83:ac:29:be:13:6c:68:fb:bc:
44:5f:bb:53:70:02:67:8a:09:b1:a2:1c:30:aa:2d:
dd:79:17:fb:59:66:1e:e2:10:c6:e5:e9:c8:84:e5:
76:db:73:06:14:7b:37:24:65:5d:c2:44:56:48:b5:
13:2e:49:e0:5d:b4:78:ce:9b:64:2f:ed:ff:c2:22:
ca:8c:a0:48:a2:f3:1d:44:a6:4b:2b:fd:cd:d0:c9:
6c:3b:d5:9a:79:a5:08:b6:53:74:3b:f4:da:0f:cd:
1a:52:b4:ad:10:be:4b:7d:15:10:6d:c6:99:48:22:
86:15:bf:f9:a9:f4:9a:82:1f:01:b5:b7:6c:2b:d0:
de:b1:98:a7:82:93:d5:9a:7a:56:b8:20:0b:a7:a7:
7a:c0:c8:6e:2f:82:5f:f1:5a:f6:c9:77:36:70:5a:
f8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:85:DC:E0:99:9F:8C:0A:E4:45:4F:D0:6A:63:72:EE:1E:FB:FC:59
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b4Xc4JmfjArkRU_QamNy7h77_Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.5.0/24
193.124.7.0/24
194.87.22.0/24
194.87.32.0/24
194.87.201.0/24
195.133.25.0/24
195.133.72.0/24
195.133.85.0/24
195.133.192.0/24
212.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a2:38:60:69:89:42:a9:15:c0:6a:1f:40:89:66:99:2d:f6:
2e:dc:e0:c8:5c:1b:14:38:f6:5f:3a:ff:f8:09:f5:5a:d5:89:
2a:d7:7b:b1:18:82:7c:de:5e:4a:b1:99:8a:98:a1:f6:e7:a8:
26:87:76:4d:bb:b9:4c:91:09:53:f3:1d:03:5b:96:b4:7b:dc:
e5:60:61:22:a3:53:16:8a:ec:cb:db:db:ae:8f:a8:ef:3e:36:
77:b0:a4:ac:b9:f0:d4:71:82:fa:97:40:8b:e2:7c:d7:af:61:
72:79:4f:68:21:4e:95:a7:79:60:83:5c:a6:f2:ca:9f:28:e7:
3f:34:b1:8d:a9:82:fb:b2:9b:5b:62:05:39:19:79:65:a2:c1:
75:e4:1f:9b:7c:07:ed:1c:b3:cc:9e:d9:f6:7c:ec:33:62:0e:
e3:70:20:d4:02:ef:f6:c9:3f:8e:da:4f:e6:71:b3:c6:ae:70:
64:b7:68:a2:c8:73:f3:4b:e6:5b:96:07:76:d6:00:b9:5f:84:
da:be:ad:f6:6f:fa:68:7b:31:40:7b:21:17:51:12:f1:ef:04:
a9:8b:23:51:76:8f:01:a6:4f:3b:fa:fd:98:3a:fe:5b:1c:07:
1c:bf:d3:b4:44:92:e0:44:98:2d:ca:19:1c:72:fd:f0:7e:9b:
ee:08:14:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 07:19:45 2024 by rpki-client on console-ams.rpki-client.org