Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pOv3VyvR44op83YF6f10J_MWQ-o.roa
File: pOv3VyvR44op83YF6f10J_MWQ-o.roa (raw, json)
Hash identifier: 0TCeMSAS3twEi3DH06R7AVMWFxB8f2encBu1ymg8cyI=
Subject key identifier: A4:EB:F7:57:2B:D1:E3:8A:29:F3:76:05:E9:FD:74:27:F3:16:43:EA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188B82925C7696EBD950D1B81F2F815FABC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pOv3VyvR44op83YF6f10J_MWQ-o.roa
Signing time: Wed 14 Jun 2023 04:28:04 +0000
ROA not before: Wed 14 Jun 2023 04:28:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 194.87.207.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 17:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:29:25:c7:69:6e:bd:95:0d:1b:81:f2:f8:15:fa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 14 04:28:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4ebf7572bd1e38a29f37605e9fd7427f31643ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:7d:d7:aa:a0:29:dc:9e:f0:b8:df:e7:9b:
c4:8c:bb:08:f1:71:a0:86:ee:7c:8c:56:bb:af:86:
34:b5:32:9f:46:77:b6:d2:15:4f:4d:31:c8:69:e4:
ae:b9:bc:9c:3c:f7:fd:f1:d4:a3:56:00:dd:ce:26:
80:cf:e7:b8:ca:cd:1a:a9:ed:ac:3f:79:e9:40:3b:
72:ff:b3:06:c5:b7:09:aa:a4:61:8f:ba:d9:69:14:
e9:8d:b1:70:cb:8e:85:a3:4c:01:b2:2b:aa:e5:89:
03:c6:c9:c8:5c:d6:c1:dc:ff:7b:8f:a8:2a:7c:a6:
87:92:c2:83:1b:9d:b5:69:02:8d:49:74:5c:21:68:
56:00:cc:71:82:20:bd:0d:43:ff:58:cd:b4:83:ca:
98:19:c2:5b:1c:e7:e4:11:47:f9:40:7a:0d:03:99:
48:46:3a:03:b0:98:fb:26:f7:cf:82:34:0d:14:b4:
31:5b:d7:d7:25:e8:aa:77:b9:1f:b8:dd:d1:6d:e9:
4b:e6:9a:35:7e:3f:d8:70:6d:e7:70:5a:30:a0:6d:
2e:d9:a3:a8:88:81:6c:5f:0c:a6:2e:cd:f2:6d:c9:
8e:25:5a:97:0b:c4:d7:32:f7:65:08:82:93:92:aa:
d2:69:39:eb:e6:b9:7b:91:c9:36:9f:15:a3:28:ad:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EB:F7:57:2B:D1:E3:8A:29:F3:76:05:E9:FD:74:27:F3:16:43:EA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pOv3VyvR44op83YF6f10J_MWQ-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
194.58.46.0/24
194.87.149.0/24
194.87.161.0/24
194.87.163.0/24
194.87.207.0/24
Signature Algorithm: sha256WithRSAEncryption
40:27:f7:a3:bb:b9:e0:0c:57:80:e1:96:7f:48:eb:e3:be:73:
36:0f:cb:bd:b9:e6:08:9e:67:e7:8c:62:05:29:52:2d:e1:fa:
7d:c8:91:45:24:28:79:64:e9:c3:d2:41:77:1e:94:af:c8:79:
00:24:17:d6:cd:ac:2a:80:0b:37:d1:cd:97:e2:83:d3:b7:37:
d5:7d:b1:09:dc:41:c9:03:cb:ca:68:c6:38:82:d4:42:85:53:
68:6b:d9:d6:08:a3:e3:2b:cb:f4:91:b5:02:bf:fd:ad:6b:42:
6e:da:93:c5:00:35:28:97:17:a4:f4:84:f2:90:30:05:4c:b5:
06:d3:de:a9:b9:9a:e0:06:d7:37:07:33:d2:cf:2c:b7:7e:24:
e0:4f:3b:69:42:f3:36:07:7d:6d:21:43:61:58:9c:58:39:7a:
28:e2:4c:d3:4e:9a:06:d7:4d:b1:12:6d:59:73:fa:7b:16:48:
bd:56:0c:2f:82:9f:57:db:fa:73:4c:b9:21:b3:e1:e2:d2:61:
4c:a6:ea:d5:13:6d:59:0c:8b:e6:e1:c3:82:aa:c1:bc:f0:3d:
6d:92:55:38:0d:b4:5d:8a:31:68:96:87:2d:68:7a:3b:01:b3:
8a:01:66:fc:b6:ac:bb:b1:17:ed:62:8a:ba:7a:5f:43:1a:bc:
4a:e0:5a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:46 2024 by rpki-client on console-ams.rpki-client.org