Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fDJUmQE66fKGKSmJHJR2zrM_B68.roa
File: fDJUmQE66fKGKSmJHJR2zrM_B68.roa (raw, json)
Hash identifier: LrXAPbVojwtsYVOxAJ/xsTwozrLHmoVk/krG67Kf7nU=
Subject key identifier: 7C:32:54:99:01:3A:E9:F2:86:29:29:89:1C:94:76:CE:B3:3F:07:AF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191E09E300DD3E521BF1705F97C695FA3AE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fDJUmQE66fKGKSmJHJR2zrM_B68.roa
Signing time: Wed 11 Sep 2024 10:25:48 +0000
ROA not before: Wed 11 Sep 2024 10:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.58.155.0/24 maxlen: 24
194.87.29.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.1.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 11 Sep 2024 11:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:9e:30:0d:d3:e5:21:bf:17:05:f9:7c:69:5f:a3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 11 10:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c325499013ae9f2862929891c9476ceb33f07af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:4f:fe:a9:2d:4e:11:59:bc:a4:ad:84:e7:
8e:4d:7a:ab:3d:a1:06:be:be:a0:19:f4:ca:99:8b:
a7:9f:2b:d3:1f:3d:1f:77:0b:22:63:f9:05:d0:fe:
0b:db:6a:ec:a1:67:22:ed:76:a2:1d:f4:c9:1b:ae:
39:b6:ea:cb:44:1c:d3:4d:f4:a2:1a:9e:a3:41:6b:
4e:4f:34:83:ab:9c:d4:ed:d4:91:3b:8b:37:8a:e6:
3c:83:1b:2a:18:97:7a:f9:c8:50:41:8b:a6:ef:5f:
6f:39:26:df:ad:94:21:3e:5e:a0:48:8b:7c:41:79:
dc:8f:3e:0e:53:82:6f:be:d4:df:53:54:84:76:aa:
13:76:44:97:f8:f2:62:58:07:ea:d8:1a:b7:ca:33:
b3:1c:b4:7d:b6:70:cb:93:a9:d3:6b:a2:fa:09:c7:
e8:c8:56:ab:ef:15:62:35:c8:88:8a:17:31:f3:c2:
54:8c:87:dc:d4:bf:38:f1:6f:fc:53:ef:09:31:e6:
13:7f:1f:c0:18:ef:00:fd:58:c1:da:47:df:50:9f:
22:bd:ab:50:2e:f3:bb:94:e2:86:24:dc:bc:5e:5a:
de:bc:5c:80:e8:f8:b5:f9:ee:22:69:81:26:40:62:
ca:af:f3:80:49:64:c6:f3:53:49:fc:d5:e1:f9:2b:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:32:54:99:01:3A:E9:F2:86:29:29:89:1C:94:76:CE:B3:3F:07:AF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fDJUmQE66fKGKSmJHJR2zrM_B68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.155.0/24
194.87.29.0/24
194.87.82.0/24
194.87.169.0/24
195.133.24.0/23
195.133.50.0/23
195.133.92.0/23
212.192.1.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
64:dc:cf:0e:54:76:4b:fe:60:4b:7a:0a:fb:ba:3a:88:c9:83:
a1:0f:8f:53:44:b4:6d:ab:ca:c2:70:90:3f:ea:c6:b6:51:fc:
9c:6c:fa:60:f7:8e:0a:a8:b7:07:61:71:69:8a:2e:fd:5e:59:
30:f9:06:20:57:37:d2:9a:d6:1d:3d:38:ac:fd:3f:74:39:a8:
91:62:66:21:36:ce:76:b7:e1:04:69:a3:f4:d8:e9:49:e4:c1:
89:05:26:09:bb:36:11:79:e9:d7:7f:46:46:1b:d3:66:17:5b:
11:1f:9a:4f:39:12:47:29:1e:8f:d9:4a:86:7d:e2:47:df:bc:
2e:84:c3:26:ef:be:13:fc:de:5a:c1:d4:1c:04:a5:b7:0c:35:
a9:5b:0b:d5:70:96:f1:a3:73:00:df:88:4a:12:54:6a:68:b0:
4e:b4:90:bf:0b:c1:69:68:21:f2:8e:df:26:43:00:c6:5b:ca:
c0:5f:9b:c9:57:9a:07:54:98:c5:2d:51:cd:b9:0e:6a:c5:a7:
dc:08:e3:ac:85:0c:ca:0a:2a:d4:29:6b:3e:90:86:89:03:cc:
3c:b8:63:e3:58:45:04:72:1d:9f:2b:2b:56:c4:ae:1f:62:29:
b1:52:15:af:81:44:be:62:f7:96:2d:02:d3:ff:1e:eb:0e:d9:
60:f6:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 16:18:56 2024 by rpki-client on console-ams.rpki-client.org