Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ptuJMR_J-5CpF2R74FtMhw4V6Gc.roa
File: ptuJMR_J-5CpF2R74FtMhw4V6Gc.roa (raw, json)
Hash identifier: nzA6SDMditwsIV5wluYi9QSLqs1sfsbV68S6DALQEO8=
Subject key identifier: A6:DB:89:31:1F:C9:FB:90:A9:17:64:7B:E0:5B:4C:87:0E:15:E8:67
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CE7C184932C89DDABB9805DFD0CF4A7B9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ptuJMR_J-5CpF2R74FtMhw4V6Gc.roa
Signing time: Mon 08 Jan 2024 06:27:48 +0000
ROA not before: Mon 08 Jan 2024 06:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 195.133.74.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
62.76.227.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 12:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:c1:84:93:2c:89:dd:ab:b9:80:5d:fd:0c:f4:a7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 8 06:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6db89311fc9fb90a917647be05b4c870e15e867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f0:7d:8d:2e:3c:1f:9c:22:84:13:a3:e8:f0:
db:94:43:5f:07:47:89:56:e8:13:d3:a7:5c:8d:1d:
e1:18:67:dc:cc:b6:16:13:b2:16:eb:28:94:1b:88:
43:ab:cc:58:c0:4a:7b:93:4e:0c:1f:ca:8e:7b:04:
01:cc:da:0a:a3:b4:80:00:14:03:ca:39:15:28:e8:
3b:7d:39:0a:69:14:cd:32:0e:29:c3:86:9a:72:4d:
75:d4:d3:55:ce:3b:68:ef:e5:9f:4c:d8:8f:b4:19:
51:3e:ff:4e:e0:52:31:02:e4:d0:98:9f:59:ab:f2:
11:31:a1:d1:ab:09:7f:51:e6:a9:17:ab:75:11:00:
a2:f9:ff:6a:d4:c9:5e:19:61:c8:01:c7:65:71:6a:
f2:75:78:0c:3b:38:78:41:e7:be:6a:8c:41:e7:62:
a4:73:3c:93:34:2c:0e:e6:a3:a6:e5:9f:46:53:6c:
9c:5e:dc:7f:e5:cc:87:a1:eb:c1:6b:4a:6a:41:c6:
36:a4:95:f5:2c:e7:cf:6e:90:9e:25:ba:8d:a9:d6:
64:33:8d:cb:83:40:35:53:f5:c0:42:35:c3:0e:83:
3b:12:8a:6d:9f:c7:e2:dd:93:15:77:e8:1f:2c:12:
47:fd:8f:41:ea:8a:35:13:3c:0e:e3:7a:14:c7:06:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DB:89:31:1F:C9:FB:90:A9:17:64:7B:E0:5B:4C:87:0E:15:E8:67
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ptuJMR_J-5CpF2R74FtMhw4V6Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.227.0/24
193.124.47.0/24
193.124.95.0/24
193.124.200.0/24
194.58.66.0/24
194.87.26.0/24
194.87.128.0/24
194.87.169.0-194.87.170.255
194.87.224.0/24
194.87.229.0/24
194.135.33.0/24
195.58.54.0/24
195.58.63.0/24
195.133.25.0/24
195.133.27.0/24
195.133.74.0/24
195.133.84.0/24
212.192.1.0/24
212.192.214.0/24
212.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e1:b3:50:d3:24:1d:5c:9e:e6:06:b5:33:d7:d2:20:5e:0c:
ad:da:e8:72:27:3b:b2:39:59:4a:85:03:f3:a6:fa:a8:04:20:
ee:ff:24:46:53:5a:55:5d:a3:5b:33:29:d6:ea:19:64:ec:20:
be:3a:10:d2:8e:d6:fe:d4:e7:7f:d3:e0:05:31:16:c7:00:0f:
f4:61:59:32:de:a3:2c:0a:18:2b:55:e9:10:bd:73:a7:50:29:
76:ed:ad:4a:5f:aa:d9:8e:07:78:24:72:96:7c:a3:3c:cb:9e:
e1:b6:64:ab:e7:c4:5b:80:d3:e6:6a:fb:1d:8b:0d:17:07:21:
1c:ed:19:af:33:a6:72:74:ef:a3:65:e8:ce:64:59:91:2f:09:
d6:b5:4a:c8:1b:16:7c:c8:4f:30:2a:ad:79:56:b2:4f:ba:33:
a9:07:a6:1a:18:2a:be:26:ee:5e:f3:90:68:8a:67:5d:1a:8f:
3a:58:4c:71:35:30:11:d7:af:6b:0c:12:25:a3:0e:6d:be:8f:
aa:9c:af:e2:6e:4c:8e:63:6d:68:2d:59:b5:da:43:81:ef:c0:
76:e2:ab:93:6e:8b:ac:6a:4a:6b:f2:38:d4:0a:6a:4d:b3:ae:
16:c7:87:76:ac:5a:f0:37:07:3d:09:5e:1b:3b:fe:1f:7b:6a:
09:d6:76:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 16:49:31 2024 by rpki-client on console-ams.rpki-client.org