Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eFqeaYssIUQ1MUAyNEgQw7QjN2A.roa
File: eFqeaYssIUQ1MUAyNEgQw7QjN2A.roa (raw, json)
Hash identifier: Ddt3uwbB+Ajm/PsjETIt+6RD+o/TFWoHbFh7XsBcEe8=
Subject key identifier: 78:5A:9E:69:8B:2C:21:44:35:31:40:32:34:48:10:C3:B4:23:37:60
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B291AACA4B5673FEDA96B88D5F1FD65F7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eFqeaYssIUQ1MUAyNEgQw7QjN2A.roa
Signing time: Fri 13 Oct 2023 12:54:55 +0000
ROA not before: Fri 13 Oct 2023 12:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 194.87.118.0/23 maxlen: 24
193.124.254.0/24 maxlen: 24
195.133.10.0/23 maxlen: 23
194.135.32.0/24 maxlen: 24
195.133.26.0/23 maxlen: 24
195.133.52.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 13 Nov 2023 10:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:1a:ac:a4:b5:67:3f:ed:a9:6b:88:d5:f1:fd:65:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 13 12:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=785a9e698b2c214435314032344810c3b4233760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:36:2f:92:b6:82:f5:ca:92:e6:45:3a:4e:
4e:7e:4c:d8:b7:7d:9c:00:6f:80:7b:32:bb:8d:db:
d3:ce:e4:61:92:9f:a7:04:a9:e4:4c:54:42:19:24:
3d:ea:c8:c6:ba:39:18:75:b8:e6:71:1f:a0:7d:16:
aa:a2:0b:25:68:5e:4b:25:71:df:33:79:89:7f:c8:
4e:b1:c2:77:df:df:6f:d7:a9:63:53:f9:be:e5:d5:
92:9b:5a:9c:d6:d7:41:94:5c:51:8f:43:76:f5:db:
77:8d:07:02:a2:0e:46:73:bc:ea:56:26:f1:8e:19:
b9:b5:d2:4a:cb:a5:d6:08:64:b6:bd:04:f7:b1:04:
41:39:2b:e9:24:b2:2f:af:97:e2:0a:a9:3f:46:d2:
56:54:71:24:4c:e4:ef:80:a6:1f:94:c7:0f:43:75:
d0:c7:e3:28:e4:84:dd:13:60:ae:4e:98:70:6e:c7:
83:2a:89:27:ed:4f:a8:2a:57:a4:72:81:f4:42:96:
82:72:8d:75:f1:5f:f7:f2:79:98:83:95:47:e7:6d:
49:f1:42:45:1e:30:34:2b:f8:63:9b:00:4a:a3:54:
96:4b:2e:8d:26:32:a3:07:28:48:b6:20:e7:b9:0b:
e4:4c:60:9b:17:ac:6d:23:d4:24:44:95:77:5e:ce:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:9E:69:8B:2C:21:44:35:31:40:32:34:48:10:C3:B4:23:37:60
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eFqeaYssIUQ1MUAyNEgQw7QjN2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.254.0/24
194.87.118.0/23
194.135.32.0/24
195.133.10.0/23
195.133.26.0/23
195.133.52.0/23
Signature Algorithm: sha256WithRSAEncryption
21:0d:0c:d7:a4:c4:c9:c7:48:0a:c0:75:da:d4:20:a2:9d:e2:
2e:ff:57:95:35:7f:9d:46:94:38:b2:0e:4c:70:7b:22:4c:79:
3b:ea:a2:85:d8:82:95:26:ec:59:ac:27:76:64:9d:f4:74:3f:
81:bb:46:34:74:91:d8:45:16:b6:00:83:02:38:28:9f:0c:53:
db:e8:6e:0b:04:fc:e2:25:ba:c1:32:42:09:11:7a:fd:b5:c1:
d5:fa:c1:03:b0:41:ea:cb:1e:ae:b8:43:f3:ad:1f:06:01:2d:
c6:bd:22:b3:78:5d:c5:02:c0:bd:d6:2b:af:78:44:8e:64:a4:
79:b1:a9:2b:fe:d5:4d:cb:f5:f8:77:f8:80:a2:64:6d:7b:6e:
c3:26:4e:52:6c:2d:a5:17:af:12:d5:c9:45:58:ae:e6:2c:07:
4a:c7:1d:f0:87:a7:79:0e:67:04:e4:28:a0:0e:b0:24:f6:ea:
ac:81:23:9b:46:f0:8b:6f:fa:1c:c6:f9:d8:7c:6a:da:f8:c4:
1a:9c:3d:c8:43:94:f1:36:58:bd:9f:76:55:69:3e:c9:0b:db:
94:2b:97:d8:41:31:81:f0:6e:ef:e9:f7:5f:ff:b8:54:51:3c:
b5:73:9b:bd:f4:f7:eb:ee:dc:a3:88:6a:15:c3:92:93:1d:c8:
0f:8c:62:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:22 2024 by rpki-client on console-fra.rpki-client.org