Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dlVFesBGftZ9GRg8sZd_oT7ui4Y.roa
File: dlVFesBGftZ9GRg8sZd_oT7ui4Y.roa (raw, json)
Hash identifier: jMuBJ386QVnf/oriaKB32/TfQkxo9K79AKBiXqENWxQ=
Subject key identifier: 76:55:45:7A:C0:46:7E:D6:7D:19:18:3C:B1:97:7F:A1:3E:EE:8B:86
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018E37A68B253AEE61316366AA89779DAEA6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dlVFesBGftZ9GRg8sZd_oT7ui4Y.roa
Signing time: Wed 13 Mar 2024 11:50:45 +0000
ROA not before: Wed 13 Mar 2024 11:50:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.7.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 08:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:a6:8b:25:3a:ee:61:31:63:66:aa:89:77:9d:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 13 11:50:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7655457ac0467ed67d19183cb1977fa13eee8b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:60:c3:33:bc:18:24:66:2b:ad:5a:fd:ad:
3a:bd:20:72:e6:5d:9a:ec:78:59:98:50:44:e8:b6:
23:bb:2b:f4:c6:a4:35:c0:79:9b:5f:75:0c:77:8f:
61:3d:f9:0d:bc:53:d8:8c:37:98:18:84:76:7a:71:
d0:e9:94:da:4b:cb:3c:7c:d8:4b:57:2a:55:74:15:
f7:f1:da:39:07:be:19:b0:b5:22:44:8a:ff:b2:99:
33:ed:0e:c0:ea:8a:e0:e0:c5:77:85:1d:80:c0:d9:
45:e4:26:fc:c5:34:e4:5c:b1:65:b8:9f:66:f1:bd:
cb:eb:83:25:19:56:fa:40:35:d4:c7:74:43:16:ea:
ef:f0:bb:21:42:7d:2f:3c:70:39:66:d9:a1:1e:90:
26:15:36:b9:d0:6d:db:83:5d:d7:81:fd:e1:cc:4d:
e2:e7:27:a8:ae:71:98:20:4c:cd:b9:d7:36:3d:89:
bd:7b:4b:4a:16:ee:90:0d:88:74:30:30:b2:01:82:
27:d8:87:fd:b2:04:e7:50:76:96:35:6b:c5:3a:5e:
43:9e:d0:a7:b9:bc:29:4d:35:5c:a6:30:79:c8:da:
4e:36:43:1c:3b:3a:77:c8:ed:f3:f2:6d:03:11:5f:
a3:c9:5e:34:13:4d:9e:16:98:4c:ea:7d:80:bd:93:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:55:45:7A:C0:46:7E:D6:7D:19:18:3C:B1:97:7F:A1:3E:EE:8B:86
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dlVFesBGftZ9GRg8sZd_oT7ui4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
194.87.169.0/24
194.87.245.0/24
195.133.25.0/24
212.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
98:be:36:0e:7f:45:14:09:cd:39:e4:78:f8:50:70:59:4a:ce:
3d:76:7e:87:f2:36:98:16:f9:37:52:24:de:61:06:e1:5e:b8:
a2:46:47:46:eb:7b:1c:c3:13:54:ab:76:a2:75:85:5b:92:39:
e6:6e:21:86:80:d6:ac:01:21:9c:ae:a9:2f:bd:b6:02:79:bc:
c1:32:de:7e:13:d0:ca:80:42:e6:1f:90:bd:7d:2a:7f:91:8d:
72:6e:bf:ad:4b:67:6d:4a:44:7b:87:76:87:49:17:69:7f:99:
f1:a6:87:92:b1:09:d8:57:e2:5e:26:b8:2a:ae:9c:2a:ca:dc:
9e:24:d9:ce:d6:34:c8:8e:94:d3:47:c7:b3:1c:8b:7b:10:83:
7c:6a:d7:28:30:65:65:54:c4:de:16:93:b0:07:7a:e9:f7:3f:
60:a7:85:d6:eb:2a:e0:17:1a:e8:00:fa:5c:34:eb:05:28:28:
63:67:c5:f8:49:37:6c:bb:70:5d:ce:01:35:41:82:65:68:8b:
81:8f:14:10:aa:6c:0d:f6:5f:de:bc:49:28:09:e6:61:c8:b5:
be:03:2b:57:72:d6:4b:de:84:59:31:3c:3c:01:5f:26:ac:77:
b1:3e:b5:d6:78:d1:94:ff:86:3e:03:f3:60:e8:b0:31:98:a1:
a8:09:89:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 13:41:23 2024 by rpki-client on console-ams.rpki-client.org