Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qg3HqOYUXcMFHhLT5kEJQfcXo7c.roa
File: qg3HqOYUXcMFHhLT5kEJQfcXo7c.roa (raw, json)
Hash identifier: /lQUfB1Xl655MXtIQZrNVowe9+JCslluCWEE5zy5zGw=
Subject key identifier: AA:0D:C7:A8:E6:14:5D:C3:05:1E:12:D3:E6:41:09:41:F7:17:A3:B7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AA3696E20FC0F5682F8815F3E050C8FAB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qg3HqOYUXcMFHhLT5kEJQfcXo7c.roa
Signing time: Sun 17 Sep 2023 13:51:50 +0000
ROA not before: Sun 17 Sep 2023 13:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 62.76.230.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.141.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
212.192.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 05:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a3:69:6e:20:fc:0f:56:82:f8:81:5f:3e:05:0c:8f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 17 13:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa0dc7a8e6145dc3051e12d3e6410941f717a3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:f2:30:92:d0:7d:fa:7a:3c:a1:9d:79:f1:
15:ec:a8:4c:6e:48:c0:32:3b:b1:ec:c3:c4:eb:98:
a7:98:dc:8f:a8:cb:f0:ae:6e:61:6f:1f:2b:37:15:
25:05:03:f1:d1:14:b9:98:de:a0:76:dd:29:cb:80:
fe:cc:f3:9c:1f:76:ff:47:46:d8:bf:c1:a2:ea:f6:
3c:3b:51:e7:1c:4c:96:cb:9c:2a:31:9e:11:b2:1c:
58:d7:36:5f:1f:38:78:e6:74:77:99:29:2b:80:e7:
03:eb:3b:b3:68:0e:27:1a:4a:74:c2:c1:e2:2c:27:
cd:83:26:af:90:a5:38:28:dc:ab:4e:22:cd:15:08:
d7:eb:72:a3:60:41:7d:3e:80:16:f0:1f:ac:55:05:
4a:50:a9:7f:ef:bf:6f:5f:de:22:6c:17:a9:6a:1b:
18:67:6f:c6:ca:4c:a7:99:83:fa:c9:43:5a:50:69:
92:f8:be:68:f5:27:55:bf:e4:3c:f6:de:33:22:42:
56:43:4c:7e:7b:5f:55:f5:3e:32:7d:e0:15:49:21:
c0:3b:1a:9a:18:92:1d:c9:89:00:ed:6b:64:ba:8a:
66:4d:1c:78:f7:0e:ba:c6:06:43:e2:03:17:f0:de:
4c:5b:3c:e2:63:fa:e4:ef:2a:04:61:18:10:43:a3:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0D:C7:A8:E6:14:5D:C3:05:1E:12:D3:E6:41:09:41:F7:17:A3:B7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qg3HqOYUXcMFHhLT5kEJQfcXo7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
194.58.41.0/24
194.87.140.0/23
194.135.30.0/24
195.133.194.0/24
212.192.244.0/24
212.192.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:52:1c:f1:bc:69:c2:05:9e:9a:99:10:e7:9e:8f:01:21:c5:
ff:ad:a4:8a:af:50:ab:d5:e5:07:24:ec:11:49:a0:7a:88:24:
c7:a1:91:88:39:ce:67:34:4e:fd:4c:12:0b:21:76:ce:41:83:
07:0e:76:e8:ae:3c:8d:3c:6e:31:23:fa:c4:42:9d:aa:05:62:
7f:c6:4c:b6:13:80:27:85:77:d5:fc:59:07:0f:e9:87:41:8c:
cf:21:42:cd:41:99:13:9c:82:d4:ae:51:3d:27:4b:65:a3:ae:
f3:86:3f:b9:1d:5e:db:18:80:e1:54:be:73:f8:9c:4e:1e:3e:
d1:8f:0d:db:80:48:46:a1:84:bf:d8:fe:50:d6:25:d2:2b:b2:
90:a7:1c:f2:4e:6c:9f:57:4a:fe:46:c6:1f:ab:68:8d:f5:b5:
9f:dc:98:f8:86:fd:ce:6b:96:7b:62:11:7d:c7:dd:17:ff:8b:
5f:ca:49:19:08:4f:cf:88:e3:2f:91:be:cb:08:25:17:6f:a2:
d6:f9:a4:b6:ae:bd:f7:3c:9e:bd:50:0c:a8:a1:08:59:db:41:
b3:b0:b8:9f:7b:ac:64:42:f4:e2:50:08:72:67:31:35:4b:f9:
f3:29:66:43:5b:73:9b:15:63:7d:50:af:d2:e6:6e:0d:36:b3:
29:97:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:47 2024 by rpki-client on console-ams.rpki-client.org