Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/omSjzqh6rBeRG94rDssALmBhKE4.roa
File: omSjzqh6rBeRG94rDssALmBhKE4.roa (raw, json)
Hash identifier: 6Zd5KsxGidx5DqCDEhdn2hzQTKoWXLA/9baYcIJjhHA=
Subject key identifier: A2:64:A3:CE:A8:7A:AC:17:91:1B:DE:2B:0E:CB:00:2E:60:61:28:4E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DC7110E63D505E79618B6E5E308EC8419
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/omSjzqh6rBeRG94rDssALmBhKE4.roa
Signing time: Tue 20 Feb 2024 15:10:00 +0000
ROA not before: Tue 20 Feb 2024 15:10:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.78.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 16:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:11:0e:63:d5:05:e7:96:18:b6:e5:e3:08:ec:84:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 20 15:10:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a264a3cea87aac17911bde2b0ecb002e6061284e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:df:f3:d9:35:a8:72:7d:f7:a7:d8:60:03:
be:58:07:d1:7b:b1:78:56:a4:d0:cc:b8:5c:20:ac:
cd:97:bc:85:e5:c7:e7:28:e5:dc:37:c5:a1:f8:c9:
22:43:65:b6:64:39:72:0e:b5:ee:72:59:26:fc:f8:
c6:c2:5a:c6:3d:48:a4:c1:43:fd:f9:d7:8e:bf:c2:
12:34:da:e7:9d:1b:17:80:a2:63:40:22:77:30:d9:
bb:2e:24:79:68:87:d2:8e:0c:d0:7f:8a:24:0f:55:
76:d1:8b:91:fe:d9:4c:72:b8:8b:0b:36:33:cc:f2:
36:aa:9a:50:6f:fe:15:58:e7:a7:da:5a:da:f7:05:
49:5f:29:81:76:10:78:f4:4b:5f:be:af:a4:92:1c:
12:3d:85:24:35:ac:20:15:a7:9e:c0:c3:91:c0:c2:
5b:0a:b5:19:69:02:68:e8:28:8c:37:18:af:83:ee:
63:1d:39:49:7c:8a:b1:75:f6:3c:40:ac:44:4f:8c:
15:a3:58:ea:c4:0a:34:91:86:72:32:d4:03:3d:26:
26:d2:ae:bf:30:95:33:8e:49:b1:c9:ca:54:c0:ed:
3a:69:70:b8:8a:76:8c:5f:9e:65:e2:8c:4e:eb:c4:
75:62:1a:07:5b:c7:ae:89:29:af:f1:7a:f2:0c:6e:
6e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:64:A3:CE:A8:7A:AC:17:91:1B:DE:2B:0E:CB:00:2E:60:61:28:4E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/omSjzqh6rBeRG94rDssALmBhKE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.5.0/24
193.124.7.0/24
194.87.22.0/24
194.87.32.0/24
194.87.142.0/24
194.87.169.0/24
194.87.201.0/24
195.133.6.0/24
195.133.25.0/24
195.133.72.0/24
195.133.78.0/24
195.133.85.0/24
195.133.192.0/24
212.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:90:12:dc:a3:98:ff:bf:c0:b0:fc:55:25:32:93:24:93:49:
2a:df:44:c6:e3:07:b4:e6:28:9d:7a:fb:6b:65:b8:cd:ce:21:
3e:64:da:bd:74:6d:9d:69:01:b6:7e:ed:83:a3:b9:d9:2b:7f:
9e:67:99:8c:73:66:6b:ab:09:d9:48:5c:b7:cf:ef:ed:f6:70:
b7:94:36:2d:5e:f0:d8:79:73:d4:55:d4:8b:6b:63:ec:ec:a8:
e1:6f:67:0d:5b:7a:62:64:37:aa:96:ba:75:17:be:69:18:7f:
25:b6:d0:29:5d:e9:dc:dc:be:cc:08:6b:e7:af:d7:8c:3e:84:
e4:14:92:5a:4a:08:5d:ce:79:1e:14:0b:86:30:75:56:34:64:
0f:09:98:57:fa:f3:ed:21:b6:47:1e:c3:89:41:b4:a4:9f:4a:
de:c2:02:bc:40:ab:79:9f:72:53:ef:50:06:65:ef:91:37:1e:
7c:8b:da:59:45:14:73:00:bb:d0:4d:ec:a4:ba:e1:1b:78:dd:
d9:6a:19:12:f7:ac:ed:a5:3a:5f:90:27:61:d5:23:9a:e1:05:
52:cc:3a:ac:14:0c:e7:a1:3d:b5:c5:3c:17:6d:d9:64:50:b7:
8e:5d:5c:d1:2c:0d:a2:d4:19:49:fa:9b:25:bd:5d:99:6e:e3:
c0:61:ec:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:26 2024 by rpki-client on console-fra.rpki-client.org