Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oaOFDwNSKXgRRkC3RekiQf2q6tg.roa
File: oaOFDwNSKXgRRkC3RekiQf2q6tg.roa (raw, json)
Hash identifier: HW0CJZOnW3YQu/KjmXb+OrleVjGq5e7SttRezoRCVKQ=
Subject key identifier: A1:A3:85:0F:03:52:29:78:11:46:40:B7:45:E9:22:41:FD:AA:EA:D8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01872E0F571B419E5BCBDDBB36E0B5B50541
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oaOFDwNSKXgRRkC3RekiQf2q6tg.roa
Signing time: Wed 29 Mar 2023 15:49:29 +0000
ROA not before: Wed 29 Mar 2023 15:49:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209043
IP address blocks: 62.76.233.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.24.0/24 maxlen: 24
195.133.24.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 10:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2e:0f:57:1b:41:9e:5b:cb:dd:bb:36:e0:b5:b5:05:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 29 15:49:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1a3850f03522978114640b745e92241fdaaead8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:c5:ff:38:b8:fd:a1:18:9d:0b:71:3c:a9:
a2:fe:92:85:62:f4:6e:68:fd:21:c1:65:cb:31:96:
49:20:b7:51:8c:3c:3b:26:5a:ff:3a:5f:62:fd:bb:
c8:8a:16:35:32:38:04:11:b7:50:fd:ae:02:22:85:
78:76:07:ed:44:f2:06:6a:c1:18:67:77:ab:ab:fc:
81:88:42:43:46:c3:a5:53:c0:2e:3c:62:07:c6:53:
d7:da:40:e7:1e:1e:73:49:72:76:3c:a3:c3:f8:35:
95:93:3b:ef:b8:6a:69:d1:52:66:c1:e1:cc:ea:52:
0a:57:0c:f9:9c:22:b9:e1:d8:05:58:ad:10:91:bc:
3f:a5:3d:b4:2c:dd:b8:ab:b6:c8:96:26:ee:db:64:
3e:7c:76:68:9b:98:e5:34:24:36:be:51:43:85:2f:
4f:5d:64:4d:ec:26:c2:6f:c6:ef:78:e2:ff:09:e0:
51:18:27:8b:2c:89:17:0d:a7:a1:97:97:b4:95:6f:
f1:5c:2a:6b:c3:a7:12:02:5a:9d:d9:85:c4:f8:d9:
9e:fe:b7:9f:d8:9d:28:5d:23:b0:c4:5f:65:bd:1e:
f4:e0:0d:fe:31:8a:be:14:8f:b6:5c:31:a8:35:41:
3a:2e:cb:a3:cf:d7:db:79:b5:f4:f9:59:13:a0:cc:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A3:85:0F:03:52:29:78:11:46:40:B7:45:E9:22:41:FD:AA:EA:D8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oaOFDwNSKXgRRkC3RekiQf2q6tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.233.0/24
193.124.207.0/24
194.87.24.0/24
194.87.115.0/24
195.133.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:84:18:fe:19:d9:c3:41:fc:35:82:73:8b:05:01:7e:dc:64:
31:63:1d:58:29:42:cc:9b:a2:d5:46:81:99:b3:30:9a:9d:4a:
50:d8:92:a3:65:aa:ea:ad:52:06:98:13:0f:bd:42:7d:88:20:
fe:8d:dc:aa:5b:8e:69:32:38:f8:dd:88:e7:57:66:18:01:63:
8b:fd:7f:84:0a:55:10:8a:d9:57:f5:73:a4:43:e5:8f:36:65:
f0:b4:94:ef:de:d1:f5:2b:b3:cf:a8:19:f6:f8:eb:d1:d2:39:
66:36:6c:18:46:9c:56:85:f7:55:bc:a2:1d:68:b2:67:19:3c:
35:52:66:71:13:f2:d5:a0:1c:7b:87:12:0e:96:31:3b:63:29:
cd:f0:26:de:51:5c:88:65:75:b3:db:f8:ae:0c:5d:89:87:e3:
09:c5:c7:95:7c:cf:da:60:ed:e9:9a:05:6a:b4:61:67:81:86:
9b:85:fe:ef:22:7f:5a:53:96:aa:a2:0e:58:7d:a4:4b:e4:ad:
37:6e:cc:3f:63:ba:eb:c7:2e:58:f5:15:2b:41:24:4f:55:71:
a8:52:dd:aa:4d:46:f7:ea:f3:91:77:a4:15:97:4f:e3:2f:3f:
aa:61:7d:d6:21:17:fd:0c:71:67:70:7b:63:b6:d4:92:93:a0:
5d:48:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:46 2024 by rpki-client on console-ams.rpki-client.org