Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eh2JKwusVVPxcaSD3tI0jQkRgIg.roa
File: eh2JKwusVVPxcaSD3tI0jQkRgIg.roa (raw, json)
Hash identifier: F7UhGZamJybvrnfHvRKyUPy1sz8/MAkbjD7xudn1PHI=
Subject key identifier: 7A:1D:89:2B:0B:AC:55:53:F1:71:A4:83:DE:D2:34:8D:09:11:80:88
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018E2E3CE02A797FED367E2E30C6BF390C76
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eh2JKwusVVPxcaSD3tI0jQkRgIg.roa
Signing time: Mon 11 Mar 2024 15:58:45 +0000
ROA not before: Mon 11 Mar 2024 15:58:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.7.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 05:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:3c:e0:2a:79:7f:ed:36:7e:2e:30:c6:bf:39:0c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 11 15:58:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a1d892b0bac5553f171a483ded2348d09118088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:42:dc:d5:0d:f2:fe:0c:d6:b0:e1:b5:f4:
12:73:d4:00:a0:60:7e:95:de:71:65:18:cd:77:aa:
29:31:28:ed:fd:dc:11:40:d0:60:2d:59:55:a5:bc:
89:fd:55:38:33:42:2c:e7:df:4f:df:93:5e:4b:e7:
d5:db:4e:88:32:88:51:c9:8e:5a:7b:e0:03:d1:de:
b9:0a:80:bf:61:87:f3:2d:c5:9e:0a:8d:75:67:4b:
44:c3:fa:bb:64:34:50:58:ea:39:b3:43:00:b7:52:
e4:05:45:1f:c4:de:e5:e9:95:a9:e9:68:a8:98:10:
c5:d7:f0:bf:4e:74:65:e4:10:5f:17:3b:27:41:c8:
10:33:54:42:cc:c9:b1:2a:a9:fb:05:aa:4b:3c:48:
8a:a2:0f:02:44:92:5e:7f:ce:e3:ec:35:eb:b5:1a:
94:30:7e:c9:15:07:f3:71:2c:49:54:e7:cf:0e:f3:
a9:42:e3:56:d0:5d:bd:94:ce:75:6e:09:b6:73:10:
16:09:a9:c0:c3:4b:9d:3a:fa:12:77:48:e7:2c:0e:
56:d9:dd:0a:cb:34:d8:11:85:ac:31:7a:77:fa:d7:
0c:ec:4b:68:5c:05:23:9b:d8:76:8a:22:bb:2a:e0:
e0:c7:e2:67:00:5f:db:da:8e:f2:5c:a4:c0:3f:fd:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1D:89:2B:0B:AC:55:53:F1:71:A4:83:DE:D2:34:8D:09:11:80:88
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eh2JKwusVVPxcaSD3tI0jQkRgIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
193.124.203.0/24
194.87.169.0/24
194.87.245.0/24
195.133.25.0/24
212.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
43:15:85:9e:35:2e:b2:b5:9d:40:51:de:6b:4f:dd:9c:29:8a:
d1:14:53:be:61:b6:20:41:79:5f:79:f7:79:13:53:88:02:09:
d9:e6:e5:97:bf:4c:3d:64:71:03:8d:6a:3c:4f:49:52:b6:32:
71:d6:72:62:34:b0:a0:68:8a:3a:4a:67:00:2c:ba:97:5d:df:
58:5e:0e:a8:81:1d:b9:6e:25:1f:5a:f5:0d:b5:c2:22:f4:02:
92:79:0c:cb:c2:35:1c:0d:03:9b:e7:38:e7:78:f4:9b:fa:36:
22:6c:3f:a3:0f:8b:e0:4c:b2:17:8c:8b:c6:a5:0f:03:bc:10:
d6:7a:38:1b:f9:1a:07:02:54:4a:15:7f:ab:d8:3a:49:6b:51:
a7:43:61:54:f9:cc:10:bd:e2:e9:81:53:a4:c5:d6:64:1c:64:
87:fd:17:26:a8:cc:0c:20:28:dc:2e:04:8b:52:4f:2b:73:33:
b6:59:ed:75:52:fb:32:ff:ab:04:23:bd:74:9a:f9:29:90:4d:
dc:bc:6a:19:da:7e:bf:cc:6b:d4:09:24:5c:a6:0a:5b:43:a6:
c1:b4:b2:5c:ae:2c:fc:df:cd:88:c0:5f:7e:d3:a7:b0:52:f5:
81:52:3f:e2:f1:ce:79:5d:21:10:45:64:7f:0e:1c:bb:61:2f:
1e:7f:80:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:22 2024 by rpki-client on console-fra.rpki-client.org