Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/llXeefcOiAUI66fzhYyyQ-8L9Qo.roa
File: llXeefcOiAUI66fzhYyyQ-8L9Qo.roa (raw, json)
Hash identifier: yJim05MJ/rgojRqS/14GhvA0wi7v55BoSwFbs9bZ2Tk=
Subject key identifier: 96:55:DE:79:F7:0E:88:05:08:EB:A7:F3:85:8C:B2:43:EF:0B:F5:0A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CD9D9F1E10F18314DA2D499C221D4FC14
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/llXeefcOiAUI66fzhYyyQ-8L9Qo.roa
Signing time: Fri 05 Jan 2024 13:39:48 +0000
ROA not before: Fri 05 Jan 2024 13:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 195.133.84.0/24 maxlen: 24
62.76.227.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 19:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:d9:f1:e1:0f:18:31:4d:a2:d4:99:c2:21:d4:fc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 5 13:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9655de79f70e880508eba7f3858cb243ef0bf50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:f1:2a:87:3b:c6:15:b4:26:8c:4a:7a:f2:
40:9f:e3:5c:8b:9f:2f:b2:a7:5c:a4:b2:65:dd:22:
78:49:35:cc:49:fe:4f:97:d8:47:05:de:91:13:cd:
e2:a8:6b:1e:f0:c2:26:7b:e2:7e:55:55:f3:b4:32:
a3:b8:65:e8:e0:1f:76:ee:ed:0a:13:7f:70:a1:98:
2d:90:92:12:dc:ce:d6:bc:46:70:21:01:cd:e3:35:
34:cb:af:d0:f1:b6:1a:af:65:f9:85:cc:0d:74:93:
20:df:a6:69:8e:39:00:c8:0b:e3:50:8e:3c:59:a4:
d5:1b:ac:83:c6:f5:18:e3:9a:30:3e:b4:33:60:0c:
b8:8a:4a:66:25:c6:30:28:55:cb:93:92:5f:99:42:
3c:2b:8f:68:27:00:c1:22:a3:c6:3d:c0:87:a0:5c:
8a:7a:05:30:be:50:89:74:ea:39:c7:30:8c:b6:2e:
d0:5a:39:2f:b4:9c:82:6a:79:6f:63:1d:c8:f0:33:
1e:7d:27:fc:60:2f:bc:22:58:92:14:0a:47:6e:df:
49:dc:ae:d3:cb:f2:8d:ab:bb:38:b4:be:e7:ce:d6:
2e:b8:b7:a5:6e:be:d9:ec:ec:e9:3c:f7:75:a4:36:
69:37:ee:52:3b:87:4c:db:91:38:8b:ec:23:57:51:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:55:DE:79:F7:0E:88:05:08:EB:A7:F3:85:8C:B2:43:EF:0B:F5:0A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/llXeefcOiAUI66fzhYyyQ-8L9Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.227.0/24
193.124.47.0/24
193.124.95.0/24
193.124.200.0/24
194.58.66.0/24
194.87.26.0/24
194.87.128.0/24
194.87.170.0/24
194.87.224.0/24
194.87.229.0/24
194.135.33.0/24
195.58.54.0/24
195.58.63.0/24
195.133.25.0/24
195.133.27.0/24
195.133.84.0/24
212.192.1.0/24
212.192.214.0/24
212.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
71:66:a3:7d:57:bf:a5:f0:0f:e7:dc:7e:98:fc:8a:7f:f6:2b:
bc:0e:c1:70:20:94:0b:a8:e2:06:07:5b:0e:e9:84:ec:d4:5e:
10:33:dc:e7:17:36:88:1e:b0:2b:1b:d4:08:3a:31:e0:8e:33:
80:fb:6b:c8:da:af:bc:86:0c:69:eb:8d:24:e0:08:92:c1:07:
bb:a4:8f:c6:2a:81:a6:9b:c2:f0:c0:4e:7f:01:fd:6b:73:4d:
e0:3b:b4:73:da:ee:b1:dd:23:76:a4:b6:e0:de:c9:0d:02:8b:
5c:c6:14:df:af:29:81:b5:75:ca:0d:8c:11:82:74:ec:65:7a:
83:cf:0f:35:73:de:c6:b1:02:7d:c5:7c:e8:10:53:c0:fe:31:
f9:a9:32:48:1c:f3:66:0b:32:29:fd:a1:17:13:62:bb:66:4b:
b0:c9:cf:03:d8:1c:f4:fd:ea:f4:d6:d4:c9:42:3f:d8:5a:70:
ab:17:72:11:88:e4:7e:04:d5:ac:f1:b2:d5:8f:8f:aa:5e:a5:
9a:4b:74:92:97:6b:2e:04:4c:29:dd:ca:b6:ea:85:00:23:d8:
68:b4:92:3a:3b:e8:ae:ce:09:85:f4:cb:8e:34:ce:6d:34:0a:
bb:dc:7d:3a:d6:bf:2d:c1:7c:43:de:0d:34:68:b2:42:04:d0:
08:13:d7:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:45 2024 by rpki-client on console-ams.rpki-client.org