Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qBHgePXuPE05H7MhER3LefxXD5o.roa
File: qBHgePXuPE05H7MhER3LefxXD5o.roa (raw, json)
Hash identifier: NAaTYINg7bAWb6B/Yt33Vwb7YaqURnbK8868c1tijEE=
Subject key identifier: A8:11:E0:78:F5:EE:3C:4D:39:1F:B3:21:11:1D:CB:79:FC:57:0F:9A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188F707FE5314EE0C2BCDDF8AD8D3FE1ABF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qBHgePXuPE05H7MhER3LefxXD5o.roa
Signing time: Mon 26 Jun 2023 09:27:56 +0000
ROA not before: Mon 26 Jun 2023 09:27:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 194.87.119.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 11:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f7:07:fe:53:14:ee:0c:2b:cd:df:8a:d8:d3:fe:1a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 26 09:27:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a811e078f5ee3c4d391fb321111dcb79fc570f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:97:e1:46:b5:bf:4e:c5:c7:54:5f:b2:cc:4f:
39:68:ff:d9:aa:09:b4:88:51:28:8b:c9:4f:a9:da:
85:d8:cc:02:e8:63:ac:3d:10:00:78:d0:d2:33:c1:
6f:3d:3a:69:be:b9:12:37:fd:2e:cd:e3:cf:5a:c5:
39:d5:a0:32:af:47:ef:9f:69:dc:ad:36:eb:d4:ed:
f0:85:8d:99:7f:a9:36:a6:06:57:58:f1:4e:5e:dc:
a4:46:d7:93:36:3b:38:f6:40:ec:b5:6d:5f:9b:b5:
3b:d5:4f:ac:bf:4b:8c:b5:24:76:19:54:fd:31:b2:
07:aa:53:f3:0a:a5:55:d6:b4:f2:f0:22:8d:5a:a3:
1e:22:6d:3e:32:45:19:e4:37:0f:92:23:30:48:dd:
56:e7:78:6f:ea:f7:ad:b7:f3:56:b8:1f:8e:8b:ff:
ff:d7:2f:88:8b:28:79:75:ff:41:ba:22:50:d5:2f:
c9:45:02:5d:54:de:88:79:a3:3c:da:e6:5b:ee:6a:
33:86:fb:29:95:83:c4:6f:09:2b:9e:b0:e3:38:59:
65:02:89:ff:20:60:ce:a8:a2:0e:86:ce:c2:fd:47:
26:6f:a3:f3:45:e4:30:ab:a0:cc:71:64:75:22:54:
ad:eb:34:a4:1b:8b:48:b9:15:de:1a:e8:1e:fc:91:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:11:E0:78:F5:EE:3C:4D:39:1F:B3:21:11:1D:CB:79:FC:57:0F:9A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qBHgePXuPE05H7MhER3LefxXD5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.182.0/24
193.124.94.0/24
193.124.201.0/24
194.87.119.0/24
194.87.181.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a6:73:9f:15:66:e2:6b:ac:0c:c9:6a:23:22:12:1a:71:8b:
b1:a6:5c:5d:20:cd:77:0e:21:3a:16:1b:7e:0c:de:1b:49:c8:
66:4b:a4:9f:e3:27:82:66:a8:fe:f4:a7:d7:da:87:b8:e3:20:
3b:e0:06:2c:92:97:62:69:54:e4:70:be:c9:a6:86:11:e8:a4:
59:a8:a2:f0:48:9e:64:7c:ca:70:7c:d5:31:90:d6:f8:7f:a9:
f4:6f:dc:d8:8e:00:70:99:48:c9:65:73:d6:72:cb:29:39:5d:
cb:26:b9:05:40:89:62:f8:b7:8e:e6:ae:b5:20:12:1d:32:77:
4e:2c:e3:88:d3:cd:45:22:f0:dd:b4:46:63:08:ea:da:84:d1:
47:63:e5:6b:15:79:0b:ba:60:c7:7b:35:79:a4:7b:59:70:fb:
6c:bf:6a:15:2a:31:28:0c:38:50:72:f9:b4:b2:d6:d4:b6:1f:
95:18:b3:57:9d:93:7a:e8:2f:34:29:85:5d:06:6d:2a:21:99:
8d:79:1d:e5:b4:7e:f8:31:50:a3:32:52:ba:94:74:10:ac:84:
83:e5:89:e2:c3:3e:32:0e:e5:a5:2c:d4:21:c1:da:0b:89:19:
70:de:71:bc:9d:3e:42:bb:bb:1c:17:9d:a4:ab:2a:d2:e1:12:
bb:6e:cf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:47 2024 by rpki-client on console-ams.rpki-client.org