Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c-EFV590E_94OBye6SyyXQHb2DA.roa
File: c-EFV590E_94OBye6SyyXQHb2DA.roa (raw, json)
Hash identifier: dVhXWWJ3+/LcduGxpb02Gw4aU6asiPfx3fKjFboBwog=
Subject key identifier: 73:E1:05:57:9F:74:13:FF:78:38:1C:9E:E9:2C:B2:5D:01:DB:D8:30
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0192DD156FF7508EF924FCE5FD884D1EABDB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c-EFV590E_94OBye6SyyXQHb2DA.roa
Signing time: Wed 30 Oct 2024 11:00:22 +0000
ROA not before: Wed 30 Oct 2024 11:00:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 62.76.230.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.193.25.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 30 Oct 2024 13:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dd:15:6f:f7:50:8e:f9:24:fc:e5:fd:88:4d:1e:ab:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 30 11:00:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73e105579f7413ff78381c9ee92cb25d01dbd830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:0e:e6:c5:3a:c8:ab:03:cc:bf:b4:b7:21:
a4:84:60:35:d5:48:33:a7:f8:a6:45:14:9a:4e:71:
eb:12:22:27:0a:04:0b:ef:c7:cd:95:99:0f:b3:4d:
a7:3c:2c:07:1e:b7:33:06:e1:26:2f:14:a1:6d:ad:
d6:fb:f5:ff:dd:fe:dd:2f:81:8f:b1:b5:54:19:89:
39:1a:65:51:e6:b3:09:e5:3c:37:e1:33:80:5e:21:
37:7d:71:d3:60:7d:20:8d:c9:9a:f0:3a:8e:a0:81:
b2:62:07:09:71:c3:79:6c:ee:34:eb:bf:46:d3:8d:
a1:6a:b0:2b:41:a2:b1:fb:4f:b5:81:8a:66:65:1f:
11:9f:c0:15:cf:21:c5:09:29:8a:db:be:d2:85:b7:
0a:d5:a4:45:78:74:98:75:79:d6:5b:db:30:90:93:
c3:cb:2c:d9:7f:e8:67:eb:2a:6c:ab:e8:c3:cf:84:
e9:f1:8a:83:a8:53:5e:8e:70:05:d4:ee:11:b1:f3:
9f:f3:f4:e0:e9:6b:c5:93:96:0d:ac:c3:47:e6:0b:
de:47:fc:16:ed:91:52:06:19:8b:ad:ce:39:d3:44:
51:92:45:3f:8c:2e:d1:da:c5:5e:b6:6f:22:18:40:
60:46:56:a0:b5:f3:9c:8f:65:8e:aa:58:b7:9b:ac:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E1:05:57:9F:74:13:FF:78:38:1C:9E:E9:2C:B2:5D:01:DB:D8:30
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c-EFV590E_94OBye6SyyXQHb2DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
192.124.180.0/24
194.58.155.0/24
194.87.169.0/24
194.87.178.0/24
194.87.224.0/24
194.135.33.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.192.1.0/24
212.193.25.0-212.193.27.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
3b:1c:15:da:db:2e:98:07:b6:0a:ef:3f:91:1b:0d:4e:82:9e:
dd:bb:fc:cd:18:40:ad:69:0e:38:d0:9f:a7:1e:6e:8e:7e:f8:
f2:c2:8a:85:64:b6:df:62:de:d2:49:c3:ff:c9:59:74:17:ed:
3a:e8:a0:28:14:22:69:5f:bd:a5:c9:48:f4:e3:1f:ab:50:50:
01:f2:10:7f:df:0f:f9:26:bf:03:0c:2f:b5:93:36:3a:8d:29:
6c:5d:e5:3a:f6:c7:83:95:f9:79:d2:cd:b4:82:ad:d5:53:00:
4a:77:b4:ca:ad:a6:39:db:5b:64:3b:59:44:69:39:d8:1f:75:
4f:ef:25:15:ab:94:11:b7:37:d1:34:60:1c:ff:0b:29:c2:4f:
61:73:8b:b4:e8:53:14:54:cd:6b:f7:f6:02:13:0a:76:e8:fb:
c2:37:61:e6:d9:0d:2a:f3:c9:45:9d:75:03:06:d9:63:69:2c:
6d:73:e8:01:61:34:2f:b7:a3:d4:29:45:46:b8:5f:cf:a5:87:
d8:c9:ba:fc:c8:67:1f:09:27:16:00:5c:05:38:9c:6d:34:25:
7e:3a:5a:e9:24:4b:2b:9d:53:1a:e4:57:08:af:ca:f5:2c:b1:
29:e4:ba:1b:62:b8:13:43:94:1f:9d:b0:47:34:23:2f:ee:c9:
02:e6:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 16:45:47 2024 by rpki-client on console-ams.rpki-client.org