Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/n6V3RkUaqRn6k1vqBa8nptTBp_c.roa
File: n6V3RkUaqRn6k1vqBa8nptTBp_c.roa (raw, json)
Hash identifier: 0lL/UA4xR0bL6Se8bEnQNSm2LX6jnyupVv2XKrIPwTA=
Subject key identifier: 9F:A5:77:46:45:1A:A9:19:FA:93:5B:EA:05:AF:27:A6:D4:C1:A7:F7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCF40524B06C7A9847033B393EC3CF43D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/n6V3RkUaqRn6k1vqBa8nptTBp_c.roa
Signing time: Wed 03 Jan 2024 12:15:48 +0000
ROA not before: Wed 03 Jan 2024 12:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 212.193.12.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 16:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:40:52:4b:06:c7:a9:84:70:33:b3:93:ec:3c:f4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 3 12:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fa57746451aa919fa935bea05af27a6d4c1a7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6e:51:1d:ca:65:a4:12:92:9d:e7:8c:6b:f6:
d7:e3:da:59:b3:b2:c8:f8:ff:d9:4e:5e:97:39:41:
b8:54:7f:28:ca:d2:83:88:7f:0e:80:bc:d8:ce:76:
67:48:94:19:8f:8a:2b:4b:a6:d6:6e:24:41:04:23:
71:74:d4:78:85:4e:fe:ce:d6:ed:59:bb:31:2f:9e:
66:de:9f:05:48:f0:c2:ab:ad:64:86:07:fc:0b:1a:
5f:fe:2a:1a:b9:22:6f:32:39:6a:75:42:3f:5b:d0:
a0:66:9b:3e:62:97:19:01:2a:92:c6:f0:4a:e1:3b:
c4:c9:6e:05:a5:01:b1:13:61:77:9a:15:6f:3a:46:
3b:71:46:8a:10:9d:22:82:28:46:3b:e1:08:cd:7c:
26:cb:3d:67:e9:14:07:7a:69:5d:b6:55:ee:17:0a:
12:b3:c6:ef:d0:af:e6:89:e3:dc:fa:76:fc:92:6c:
58:b6:cb:5a:db:49:41:9f:76:af:c0:45:4c:69:ed:
0d:31:f3:56:7f:3b:93:b7:d4:db:34:53:bf:17:db:
b0:90:3b:99:c4:26:92:c3:65:13:ad:c7:82:16:a0:
4e:84:36:c9:db:95:c9:c3:ad:b3:2e:1f:31:08:32:
84:66:d5:ea:a9:6e:a5:f5:b6:7a:19:9b:7d:ba:b0:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A5:77:46:45:1A:A9:19:FA:93:5B:EA:05:AF:27:A6:D4:C1:A7:F7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/n6V3RkUaqRn6k1vqBa8nptTBp_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
193.124.95.0/24
194.87.26.0/24
194.87.128.0/24
194.87.170.0/24
194.87.224.0/24
194.87.229.0/24
194.135.33.0/24
195.58.54.0/24
195.58.63.0/24
212.192.214.0/24
212.192.222.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3b:f8:30:c4:03:e4:6c:9e:d1:19:bb:c5:e2:e3:ee:7c:5b:
10:dc:2d:9f:47:24:93:4d:8a:cf:33:91:48:1c:e5:eb:c9:44:
b5:04:23:1a:1f:0e:ee:70:07:8c:19:eb:38:bb:9a:6e:c4:63:
ad:fd:c5:4c:59:fb:70:da:c5:d2:4d:e7:b6:56:28:18:c2:f3:
51:54:af:1d:97:c8:37:1f:a4:5f:86:31:29:93:36:d8:46:45:
bc:d0:40:1e:39:80:ee:05:1a:e1:06:4f:75:2c:a8:67:f8:3d:
23:24:5f:ba:4b:3d:27:e7:a4:65:6b:49:14:db:a9:56:df:d7:
d1:2f:c5:68:aa:70:e4:6e:dc:ac:7e:2b:44:0f:c3:86:98:3d:
56:7b:43:99:7d:89:5f:27:b7:c1:7a:b6:c5:64:fb:d8:4e:e2:
73:56:9e:5e:15:15:c7:91:1f:7b:f3:e9:52:1a:55:49:c0:54:
5f:21:43:17:89:3f:2d:af:ad:7b:c1:4d:4e:7d:f5:5c:fc:a2:
aa:03:74:83:22:11:f4:fb:73:4f:38:2d:11:a1:b7:49:66:34:
b5:10:b5:cd:7f:a1:64:41:51:5b:6e:d3:8a:a8:3f:c6:41:6c:
22:32:bd:96:24:00:fc:c0:75:1a:60:36:95:47:49:e0:8c:ba:
ab:24:bf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:45 2024 by rpki-client on console-ams.rpki-client.org