Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/phNEm1DXZgYG5rG2mQgIPcoe3ek.roa
File: phNEm1DXZgYG5rG2mQgIPcoe3ek.roa (raw, json)
Hash identifier: TGmsRS9ACIbHmuNoUQ18tbKxdqtLt/Hb9sYCMBdd5c0=
Subject key identifier: A6:13:44:9B:50:D7:66:06:06:E6:B1:B6:99:08:08:3D:CA:1E:DD:E9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B61EB0CFF34F8E7F67175105D0A3E473D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/phNEm1DXZgYG5rG2mQgIPcoe3ek.roa
Signing time: Tue 24 Oct 2023 13:41:16 +0000
ROA not before: Tue 24 Oct 2023 13:41:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 62.76.227.0/24 maxlen: 24
194.85.250.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.245.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 11:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:eb:0c:ff:34:f8:e7:f6:71:75:10:5d:0a:3e:47:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 24 13:41:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a613449b50d7660606e6b1b69908083dca1edde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b9:95:6e:cc:d9:4f:2e:25:52:a4:ea:f9:c8:
31:45:f4:4c:f4:56:57:09:5a:79:83:ce:8d:f3:b1:
98:9e:e4:c7:27:48:b2:e5:c0:a7:db:73:68:4c:fb:
17:4e:75:0e:4f:38:2d:1f:d5:44:3a:64:ab:b6:67:
e0:ab:36:4b:c3:97:8e:a7:d4:f3:18:7c:dd:ab:29:
aa:5f:ec:ff:98:ff:0a:15:11:4d:8b:92:67:89:b5:
c2:ec:47:08:c4:da:42:ed:9f:6b:ba:b7:f3:4d:3e:
7f:1c:21:a4:d4:59:e0:52:ba:68:c5:63:33:67:fc:
8b:1a:c2:e4:21:a4:8c:19:85:bd:dc:5c:ec:33:51:
aa:c0:5a:60:ea:33:e6:34:46:66:cd:a1:4f:37:81:
34:09:b5:76:bd:c3:da:5c:3b:be:ad:ac:95:5b:5b:
c6:5f:6c:a8:76:dc:59:75:eb:d3:c0:d6:1b:0a:3b:
0a:c9:e4:7d:6d:89:b5:fa:f8:f7:7f:b6:be:30:60:
46:c4:2e:c6:f6:2b:d4:78:98:da:a2:93:fa:af:68:
02:fa:f0:ab:58:9d:57:a6:6d:83:3c:f8:3c:ac:d6:
d2:42:0e:a3:66:26:9e:5f:2b:9b:31:7b:a4:02:49:
ba:c3:f2:be:10:2b:08:1d:81:80:4f:48:26:19:cc:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:13:44:9B:50:D7:66:06:06:E6:B1:B6:99:08:08:3D:CA:1E:DD:E9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/phNEm1DXZgYG5rG2mQgIPcoe3ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.227.0/24
194.85.250.0/24
195.58.54.0/24
195.133.39.0/24
212.192.245.0/24
Signature Algorithm: sha256WithRSAEncryption
41:52:5d:0a:8d:53:06:71:e8:8b:ae:80:c1:51:83:57:c6:d1:
36:86:2b:0a:0c:71:94:8d:7e:da:99:84:5d:76:7f:b8:d5:3c:
a7:cf:7a:a9:19:a2:84:19:ad:47:36:30:56:33:a1:38:b5:86:
90:41:86:49:5f:0c:f0:87:a8:a5:f0:15:be:c6:fa:2d:0e:0c:
46:0f:66:84:a6:4f:18:60:b3:3b:e2:06:63:2e:98:29:9e:bb:
92:34:94:39:14:26:29:83:8a:73:7e:06:9a:22:8a:c9:e2:6f:
c8:c3:6c:41:f2:56:96:0b:a1:d6:6b:2f:89:ef:8f:94:4b:cb:
7e:3f:f4:0a:7e:97:30:78:23:85:6f:66:f8:56:fb:1a:7e:83:
5a:4a:d0:99:79:b2:4f:a7:76:39:7d:b1:a8:bc:04:49:7d:e0:
86:03:2e:cf:23:e8:62:c0:cc:97:46:a5:36:52:d0:a1:ea:a0:
77:ec:89:1f:21:02:46:a2:e7:36:6c:60:16:97:5f:ce:7a:c2:
d6:f1:b7:bc:92:cc:65:6f:de:eb:27:65:fb:78:3d:85:1a:5b:
52:7d:09:74:55:a3:cf:a6:55:a3:d3:28:6d:9d:c9:b9:d4:39:
e5:97:99:4d:4a:c1:7b:81:4d:b4:5b:89:24:fb:30:81:bb:b3:
cd:93:a1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:27 2024 by rpki-client on console-fra.rpki-client.org