Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ogKEdK985QUK_-vVj78qibjlVg8.roa
File: ogKEdK985QUK_-vVj78qibjlVg8.roa (raw, json)
Hash identifier: T+NOwG6H2Vq44dlkevDuNXW1kHbn6q4BYGjG78KhH5k=
Subject key identifier: A2:02:84:74:AF:7C:E5:05:0A:FF:EB:D5:8F:BF:2A:89:B8:E5:56:0F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BFBC608FA8BFFB3F25AEDD8CFB1981E83
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ogKEdK985QUK_-vVj78qibjlVg8.roa
Signing time: Thu 23 Nov 2023 10:42:21 +0000
ROA not before: Thu 23 Nov 2023 10:42:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
192.124.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Nov 2023 14:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:c6:08:fa:8b:ff:b3:f2:5a:ed:d8:cf:b1:98:1e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 23 10:42:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2028474af7ce5050affebd58fbf2a89b8e5560f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:52:5b:41:43:07:f3:d0:7c:af:31:f5:fd:
b8:19:81:a8:d7:d6:89:53:0b:86:f4:58:06:71:28:
81:80:b5:c1:d5:91:ae:7d:12:27:a1:14:57:74:d7:
c6:39:9d:f0:0f:36:36:78:45:82:f2:09:83:27:df:
fb:49:30:fe:a0:ba:04:71:46:7a:99:86:61:e9:4d:
e3:f2:af:ee:a3:c7:7b:99:22:8b:66:0e:38:ae:f2:
fb:59:2f:56:58:fa:20:b8:ec:75:97:b8:2a:de:c7:
dc:a0:fb:22:7d:6c:bb:63:de:6d:55:d6:f1:f2:56:
e6:dc:3b:fc:95:ae:de:7b:45:dd:f4:96:ae:eb:23:
14:5b:98:54:07:44:05:6e:58:45:eb:8d:ee:ff:6f:
d2:9e:87:1a:bc:53:c7:66:c9:05:17:ad:45:d3:ce:
fe:1d:0b:e8:9c:71:66:3c:ab:0a:9f:d4:4a:80:5d:
c3:55:0e:55:53:3f:15:ed:d2:f0:14:59:4f:1a:f9:
c4:72:fb:3f:08:f5:96:5a:7b:61:bc:dc:8b:ec:56:
49:f2:9b:72:08:4e:ee:33:0a:3b:06:cf:d5:a1:8b:
b4:0f:0f:4f:a2:c1:31:28:ee:e3:65:72:fe:8f:b2:
c6:71:1f:61:0b:16:18:6f:ca:c4:d7:c9:1b:5e:0e:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:02:84:74:AF:7C:E5:05:0A:FF:EB:D5:8F:BF:2A:89:B8:E5:56:0F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ogKEdK985QUK_-vVj78qibjlVg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.179.0/24
194.87.200.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
01:08:fe:a6:59:5c:d8:ed:ed:03:3e:6b:8f:aa:1d:11:b8:f6:
db:9b:fa:7c:05:5e:70:d7:b7:62:37:27:40:54:85:91:4b:43:
28:d5:d2:4f:26:9e:9f:56:eb:e2:9e:32:f7:bc:d4:b2:0a:49:
d7:32:25:0f:58:99:6c:5f:99:f7:00:54:c5:0e:f0:83:02:0c:
7d:c3:83:29:73:66:35:86:41:c4:c3:20:b8:6e:e8:1e:05:2e:
1e:5c:d1:ee:bb:a2:cb:74:cb:c5:c8:1a:20:16:68:8e:9e:70:
8e:bc:6c:53:da:25:5a:52:40:39:57:48:57:e6:e0:c0:94:22:
45:cb:84:9d:27:3d:e3:59:0a:ea:89:a5:4a:b0:ef:36:25:f8:
04:07:bf:1e:3a:0e:dc:82:6c:f2:b9:3f:a8:c1:2a:ab:65:5f:
ec:1d:fa:2e:8d:10:20:23:3e:84:f6:ea:34:fc:25:76:a1:2a:
d6:6e:c6:a5:a1:0b:c6:dc:eb:fb:c2:b2:7d:2d:69:05:fc:01:
f0:1f:16:72:13:31:43:6a:ff:c4:69:f0:c4:6c:64:18:e8:39:
ed:1f:30:51:8d:1e:17:47:f3:e5:6f:1b:86:af:96:d1:07:84:
bc:af:b2:aa:57:34:e7:f8:03:c6:48:56:2b:45:b3:79:40:72:
84:05:9e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:46 2024 by rpki-client on console-ams.rpki-client.org