Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cNK_V7DiDnJb1KpZUdgx4y2Jh9s.roa
File: cNK_V7DiDnJb1KpZUdgx4y2Jh9s.roa (raw, json)
Hash identifier: CA1DtSXBRBoUBexq9F8nqc9ny6hSfUiuOBbibvCi83I=
Subject key identifier: 70:D2:BF:57:B0:E2:0E:72:5B:D4:AA:59:51:D8:31:E3:2D:89:87:DB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191EAD14618B3BA5D63A97A43F723E2A45A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cNK_V7DiDnJb1KpZUdgx4y2Jh9s.roa
Signing time: Fri 13 Sep 2024 09:57:49 +0000
ROA not before: Fri 13 Sep 2024 09:57:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.203.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.29.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.189.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.28.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 17 Sep 2024 11:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:d1:46:18:b3:ba:5d:63:a9:7a:43:f7:23:e2:a4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 13 09:57:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70d2bf57b0e20e725bd4aa5951d831e32d8987db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:02:45:95:af:e8:04:11:95:ad:57:e7:58:
01:59:da:29:ca:2f:8f:8c:ee:92:9a:64:cc:10:58:
44:24:6b:0e:e4:df:5e:72:aa:2a:d8:a6:ff:4a:4c:
c0:15:1d:e3:c3:01:e0:af:21:19:e2:69:34:df:34:
2c:a0:e0:0a:03:dd:30:cc:20:18:49:f8:24:63:bd:
4b:11:e5:1a:30:f5:19:ec:ce:4d:66:c9:b0:d1:85:
8b:7d:f6:f5:9b:3a:8c:11:50:69:72:e1:89:88:12:
b1:be:a3:4c:c7:d9:c5:e5:90:a8:13:ee:fc:81:b3:
6d:e8:55:50:c1:42:a7:65:2c:2a:5c:2b:5e:08:ec:
0b:8c:86:3c:f1:6c:de:f6:91:11:a0:05:a2:92:aa:
1b:f7:0a:f6:c7:5b:16:14:5b:ec:72:88:94:43:12:
cf:e0:58:52:f9:42:e5:f3:0b:1c:78:a2:ed:59:98:
d2:59:e3:c1:49:e5:08:64:ef:4a:03:81:57:4a:b5:
46:8e:26:f5:82:c7:7c:18:3d:f9:a9:54:a5:06:56:
f9:54:02:a2:31:fa:be:a9:b9:0d:55:95:e9:ad:29:
b8:98:86:05:d7:f8:93:1a:5d:c8:60:06:6d:4d:d0:
df:36:88:0a:12:1a:49:84:92:70:5d:e5:a3:cf:ba:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D2:BF:57:B0:E2:0E:72:5B:D4:AA:59:51:D8:31:E3:2D:89:87:DB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cNK_V7DiDnJb1KpZUdgx4y2Jh9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
194.58.155.0/24
194.87.29.0/24
194.87.82.0/24
194.87.169.0/24
194.87.189.0/24
195.133.24.0/23
195.133.28.0/24
195.133.50.0/23
195.133.92.0/23
212.192.1.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
86:51:20:ff:52:4c:be:0e:44:21:27:0d:92:4e:50:8f:31:3d:
76:47:2b:75:53:46:90:c7:4a:ce:3c:bb:ed:8a:99:bc:35:b0:
02:60:8a:f6:38:4e:d2:c9:99:e0:6f:93:43:ea:26:a8:13:8b:
46:e5:d7:02:65:b3:f0:aa:37:3b:5b:5c:1e:0b:fa:05:74:d6:
ac:8e:d7:83:74:eb:3b:d4:18:89:ff:9c:73:1e:38:61:f9:b4:
76:27:05:38:65:14:05:96:79:29:96:df:d9:a2:86:40:d6:08:
57:5b:24:65:20:02:e7:95:7b:d5:c3:7b:fa:dc:f2:15:5b:7a:
2c:cc:76:a2:3f:31:8d:99:02:bc:b4:eb:c9:3f:b6:ad:03:ab:
bb:0d:9a:6e:0a:10:3d:e3:d6:08:06:32:56:5a:b6:97:d3:fd:
3b:05:46:a8:39:87:00:a1:33:f8:f4:e0:f6:2c:61:38:a6:b6:
d4:76:9c:fd:95:02:a6:1a:45:af:29:06:ca:5c:4e:31:1c:77:
e6:37:df:3a:50:c5:a4:76:5c:42:0f:b7:04:d8:af:a1:46:65:
0c:da:eb:6a:4c:59:f3:61:21:df:1e:7c:d5:52:3c:8a:53:ef:
47:ab:da:5f:85:73:03:f2:ac:a8:c4:6c:bb:38:9b:8d:57:b4:
13:91:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 18:26:52 2024 by rpki-client on console-ams.rpki-client.org