Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gOAwhW7WgDDfSq6DeoZna79enTo.roa
File: gOAwhW7WgDDfSq6DeoZna79enTo.roa (raw, json)
Hash identifier: jDVRICyz0iZF4oc4YXCh86q7Tw5Zob3MUvKiEa2MIBo=
Subject key identifier: 80:E0:30:85:6E:D6:80:30:DF:4A:AE:83:7A:86:67:6B:BF:5E:9D:3A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DA21E2B2E49F531BEAB8DE4B40D274462
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gOAwhW7WgDDfSq6DeoZna79enTo.roa
Signing time: Tue 13 Feb 2024 10:58:22 +0000
ROA not before: Tue 13 Feb 2024 10:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15731
IP address blocks: 192.124.178.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.114.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.179.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.84.0/23 maxlen: 23
212.192.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 04:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:1e:2b:2e:49:f5:31:be:ab:8d:e4:b4:0d:27:44:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 13 10:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80e030856ed68030df4aae837a86676bbf5e9d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:11:26:89:d0:70:e1:70:65:c1:9b:fc:7d:
29:51:17:fc:0f:6f:88:48:5e:d1:f0:02:8c:67:f1:
ab:bb:0b:e9:ce:c9:5d:be:ab:fa:e3:81:ec:63:d9:
51:a2:31:5b:36:ef:0a:77:4d:35:52:d4:bd:cd:15:
1b:8d:87:00:38:5a:f0:46:85:4c:68:97:27:0d:3e:
56:44:94:be:85:7d:3f:2c:f6:80:15:4d:58:e1:71:
b1:3c:a1:33:b8:c5:07:ce:78:1f:e5:88:6f:f9:18:
dd:1c:38:3a:90:a8:66:4b:e5:3c:3c:9e:b9:2e:34:
13:3e:df:7e:8d:4f:84:79:5a:52:76:be:91:18:da:
29:95:81:82:0f:4f:97:7d:0a:39:e8:2f:7a:95:1a:
de:87:73:a8:22:ae:6b:7a:20:ce:d5:17:fb:dc:aa:
b7:4d:2c:ec:3f:dc:e5:68:c1:2b:6b:4b:23:39:36:
10:97:45:75:01:13:fc:66:bf:e7:31:03:52:62:7c:
50:df:7d:0d:f5:97:78:6f:15:a2:f9:2c:30:74:7e:
1e:ae:f0:b0:f9:46:0d:b7:4d:04:d3:9f:d3:06:0c:
00:26:71:9f:cb:92:50:37:e0:c9:f1:2e:03:de:59:
e0:d9:35:d8:c2:3b:a5:d2:d5:a1:00:27:89:f1:81:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E0:30:85:6E:D6:80:30:DF:4A:AE:83:7A:86:67:6B:BF:5E:9D:3A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gOAwhW7WgDDfSq6DeoZna79enTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.179.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.40.0/23
195.133.84.0/23
212.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
96:8e:c2:a1:ad:ff:93:61:ad:04:20:0b:e4:64:a3:2d:1e:90:
ed:3e:da:2d:1b:9c:ff:04:c0:8a:ba:60:5c:52:f1:06:fc:68:
5d:19:91:97:64:16:e8:db:02:92:62:f1:a4:1a:e7:a1:98:31:
3e:b0:24:61:5d:4d:dd:61:81:98:7b:e3:ff:23:5e:0c:cc:51:
97:ab:bd:7c:f2:36:ad:d3:1e:ae:cc:2f:54:f7:29:f4:69:4d:
fe:5a:cc:13:ce:56:56:2a:2b:5f:22:d9:b0:37:4c:80:71:b8:
d0:fe:6a:dc:6d:e2:b3:e1:f9:28:d2:13:ba:27:98:cf:55:03:
dc:b8:7d:e8:8b:3e:a2:4e:bb:ca:f2:aa:a5:3f:a1:0e:aa:9b:
71:ff:93:6e:14:bc:d4:18:3a:1c:5f:6b:58:4c:67:39:7f:b1:
72:28:a0:4d:52:f5:cf:b6:b4:93:7c:87:e9:4a:0f:13:de:91:
13:c2:80:8d:68:36:11:a6:e3:2d:d1:49:93:e5:25:cc:16:7e:
45:87:d7:95:a8:2d:d4:c7:1a:98:24:a2:25:12:b6:27:56:a9:
fd:aa:38:6f:bc:15:b7:11:71:f1:53:7c:ea:15:33:a0:6f:90:
e6:f7:56:6d:9e:43:1b:57:1c:3a:2c:b6:3c:9a:77:1c:85:04:
32:00:4d:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 21 07:21:22 2024 by rpki-client on console-fra.rpki-client.org