Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rIFsh-DO4MmItGhoojuyISa8cys.roa
File: rIFsh-DO4MmItGhoojuyISa8cys.roa (raw, json)
Hash identifier: ym/8IMjQyUnZHOsOrpat0SDjzljYadH8bRXTOWsSUvE=
Subject key identifier: AC:81:6C:87:E0:CE:E0:C9:88:B4:68:68:A2:3B:B2:21:26:BC:73:2B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C6D82520036B391962675B9037874E00C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rIFsh-DO4MmItGhoojuyISa8cys.roa
Signing time: Fri 15 Dec 2023 12:45:06 +0000
ROA not before: Fri 15 Dec 2023 12:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147186
IP address blocks: 194.87.224.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.141.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Dec 2023 04:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:82:52:00:36:b3:91:96:26:75:b9:03:78:74:e0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 15 12:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac816c87e0cee0c988b46868a23bb22126bc732b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:fb:a4:c3:fd:ec:19:21:7a:01:1a:76:7b:
49:ed:4b:6b:5f:2a:de:9d:44:6e:54:d3:ed:6c:dd:
65:f7:e8:dc:ce:87:78:f5:cd:7b:22:ae:61:82:d3:
ad:04:b8:30:38:14:4d:75:b2:76:2d:4f:0b:18:53:
cb:2d:39:6a:15:70:ff:93:94:c9:32:0d:e4:6d:91:
d6:d7:fa:d6:9b:d5:06:51:0f:3b:df:9e:b8:7d:25:
3d:21:5c:88:71:9c:67:c0:15:ec:66:09:71:da:8c:
2d:b3:eb:2d:dd:0f:66:84:b8:b1:5b:8e:63:3a:06:
a3:8a:f6:33:5b:c1:cf:df:80:89:3d:5b:b2:64:66:
7a:7b:3b:50:0f:a8:31:83:8b:a7:1c:dc:e5:34:d9:
7c:a3:3c:f7:ff:10:3b:31:ab:01:72:62:f7:25:29:
76:7a:70:32:a4:75:85:02:b7:a3:4b:d1:bc:c9:e5:
e9:e2:32:6f:5c:00:7c:40:fb:91:58:50:10:66:e1:
62:c1:60:00:44:cf:6e:a4:6e:2c:4b:7d:64:27:e0:
1c:c1:f7:54:dc:6e:f1:39:f6:17:43:75:b5:90:68:
1c:81:82:44:f8:7a:1f:07:2b:f3:47:fc:d7:e2:53:
83:4b:88:45:c8:ac:63:8a:40:79:de:88:39:8a:1e:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:81:6C:87:E0:CE:E0:C9:88:B4:68:68:A2:3B:B2:21:26:BC:73:2B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rIFsh-DO4MmItGhoojuyISa8cys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.26.0/24
194.87.138.0/24
194.87.141.0/24
194.87.168.0/24
194.87.170.0/24
194.87.224.0/24
194.87.229.0/24
195.58.54.0/24
195.58.63.0/24
212.192.1.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f9:f0:3e:a0:bf:59:1c:6a:b6:90:c5:7c:99:ec:54:df:91:
b1:b2:ea:59:7d:d6:c5:36:df:6f:0e:9d:9b:0c:54:6e:de:bb:
7e:2a:17:96:dc:9a:d4:7c:07:87:6c:ca:12:49:71:9c:82:da:
60:3d:ae:b6:74:2b:08:38:87:be:2b:c8:22:8d:80:8c:6e:52:
7d:90:f3:34:d7:13:46:f8:e8:8a:b7:64:7e:d3:46:54:91:93:
aa:71:c9:18:c0:14:a8:60:f6:97:1b:dc:fd:f3:c1:5e:26:e8:
73:41:25:f7:61:46:1c:65:65:b7:da:64:9b:85:1d:2a:12:f8:
55:49:cf:fd:1e:0f:5f:ad:7a:42:ae:ce:ab:d7:1f:33:92:de:
51:20:e1:63:48:a5:d0:a2:a0:8a:80:d7:1e:59:39:c5:94:09:
62:f2:fd:04:bc:a0:3c:b0:e5:d2:ad:f3:61:1f:1c:cf:76:0a:
a6:a3:58:c8:4f:8b:fb:48:8d:2a:d4:9d:5d:33:c9:84:be:0a:
37:5e:85:21:50:f5:3c:28:ba:d7:32:14:16:4f:db:5e:4a:ff:
52:80:71:ff:f2:35:e8:6f:a2:73:69:80:a0:4d:0f:25:32:ee:
d6:81:79:82:12:d1:c0:8e:5a:b8:52:77:a0:72:e7:10:2f:84:
d5:14:46:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:47 2024 by rpki-client on console-ams.rpki-client.org