Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/szPxWkRuNIXqJgq0-qspLhjS26I.roa
File: szPxWkRuNIXqJgq0-qspLhjS26I.roa (raw, json)
Hash identifier: DsE32Q6J4xV3Prux+g9E77S94jiYmp+UC2GQfAv5Xjw=
Subject key identifier: B3:33:F1:5A:44:6E:34:85:EA:26:0A:B4:FA:AB:29:2E:18:D2:DB:A2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DCC87CD1C67873DBC97F9B651F3DB84E9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/szPxWkRuNIXqJgq0-qspLhjS26I.roa
Signing time: Wed 21 Feb 2024 16:37:48 +0000
ROA not before: Wed 21 Feb 2024 16:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.78.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 21:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cc:87:cd:1c:67:87:3d:bc:97:f9:b6:51:f3:db:84:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 21 16:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b333f15a446e3485ea260ab4faab292e18d2dba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f9:5b:c5:a4:6e:28:90:39:02:b0:f9:31:46:
96:bf:c5:93:64:76:b0:94:6f:5c:f1:be:0a:4c:94:
f0:2f:0a:35:d9:43:24:a3:f8:71:ab:70:d4:bc:0e:
1f:e0:eb:11:f8:a5:8d:49:99:d3:23:da:99:85:8e:
b2:44:cd:28:12:89:de:7e:a9:6b:75:1d:66:ba:b7:
8d:29:11:4f:a3:2f:b0:6f:0c:4a:78:f5:6e:47:2c:
80:01:d3:5c:e2:7b:66:8b:04:6f:d3:32:a0:08:71:
48:db:fe:4e:c1:c0:15:5b:07:8a:af:49:e8:8f:a0:
5c:97:dd:e3:23:6d:9b:a6:04:34:e7:ad:b3:80:17:
5b:0a:20:30:da:81:cf:5a:27:5b:9b:23:21:c5:94:
04:12:54:82:18:5b:ca:54:17:d1:5a:dc:1a:f5:25:
7e:de:ec:7c:42:d5:73:12:1e:6a:4f:c0:91:99:09:
55:13:fd:a9:91:c0:78:97:03:3d:06:a4:e0:66:07:
66:dd:4a:4e:ea:37:76:21:c6:88:40:50:8b:b6:7a:
fa:c2:93:8f:2d:83:2f:fa:d7:6e:e5:61:4c:39:2c:
c4:47:03:c1:d9:66:3f:33:61:af:a5:4f:26:c5:a4:
5b:6e:cf:ec:e3:45:c5:b8:82:b0:b7:8f:67:b3:25:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:33:F1:5A:44:6E:34:85:EA:26:0A:B4:FA:AB:29:2E:18:D2:DB:A2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/szPxWkRuNIXqJgq0-qspLhjS26I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.5.0/24
193.124.7.0/24
194.87.22.0/24
194.87.32.0/24
194.87.142.0/24
194.87.169.0/24
194.87.201.0/24
195.133.6.0/24
195.133.25.0/24
195.133.72.0/24
195.133.78.0/24
195.133.85.0/24
195.133.192.0/24
212.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
88:23:f3:88:ef:2c:fe:fc:4a:03:e2:e8:a0:83:ba:12:99:4b:
2a:da:3c:11:50:a5:87:b0:bc:ad:64:3f:45:3e:98:66:4e:39:
18:d3:3e:23:5e:19:f0:cd:7e:0c:84:81:9d:5d:7a:92:81:2b:
3f:ed:95:7f:4b:10:79:a0:0b:fa:1e:6f:3d:af:06:bd:42:8f:
ff:53:5c:68:e0:04:4e:62:e4:29:af:1a:9b:a5:42:48:68:82:
ab:90:06:e4:ea:30:0f:c5:6f:64:76:d1:54:4d:6b:1c:db:5d:
f6:29:6a:d4:5e:b4:cd:e4:69:79:17:2e:c5:cb:6f:5d:cf:be:
af:94:6f:fb:02:97:6d:47:2c:1d:aa:d3:2d:a2:5d:0a:55:bb:
8e:e9:40:7b:a8:3f:b4:f1:00:63:8a:7e:cb:63:7a:8d:f7:68:
c5:29:54:c0:29:ac:dd:22:34:c6:5a:37:e8:b9:69:99:36:07:
8f:2f:e9:ec:60:c0:f2:23:e6:92:1a:9f:1b:9d:01:93:09:fd:
11:4c:66:bf:22:cc:77:22:84:7d:ad:f9:dc:d0:de:64:da:87:
80:97:2e:44:05:85:7e:b5:b5:a9:c3:ba:e3:7d:06:c5:69:3b:
2d:65:7b:b8:74:27:41:36:31:d7:92:26:ea:08:94:44:5d:e3:
9a:67:0b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 00:47:36 2024 by rpki-client on console-ams.rpki-client.org