Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uC6OyCopySdmpdVZ74RY65xQEnM.roa
File: uC6OyCopySdmpdVZ74RY65xQEnM.roa (raw, json)
Hash identifier: 8JmTXOY7edup1IVdxONvBSPR0e/zA6PZ/fn3UFletGc=
Subject key identifier: B8:2E:8E:C8:2A:29:C9:27:66:A5:D5:59:EF:84:58:EB:9C:50:12:73
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188948E46B067C7FE3EB7FB2A6DAE3CE2E0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uC6OyCopySdmpdVZ74RY65xQEnM.roa
Signing time: Wed 07 Jun 2023 06:32:12 +0000
ROA not before: Wed 07 Jun 2023 06:32:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.27.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jun 2023 06:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:8e:46:b0:67:c7:fe:3e:b7:fb:2a:6d:ae:3c:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 7 06:32:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b82e8ec82a29c92766a5d559ef8458eb9c501273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:15:c5:7d:5f:9f:8b:ff:c9:6f:e5:8c:1f:
f2:f1:2e:65:6b:80:6d:7f:3e:c9:23:94:25:32:c9:
ce:ed:c1:4f:ea:53:d0:99:c3:27:90:09:95:2b:df:
fc:b6:ba:62:3e:7f:63:dd:e9:12:18:45:ad:18:9f:
d3:8c:f0:3b:2a:31:e5:cf:a2:92:e5:4c:1f:00:f7:
7c:8f:cd:0d:c6:d4:ae:b2:a5:55:1a:29:e9:23:50:
77:b0:a9:fb:40:62:6d:8f:ce:82:98:c0:92:e0:5c:
69:5d:95:8c:42:ec:0b:6e:52:f3:56:69:7b:55:70:
50:e5:27:1c:64:44:fb:86:38:b1:a6:16:ed:cb:b3:
94:fa:8c:67:98:c6:c8:71:d1:70:20:4a:72:bd:75:
36:7a:aa:52:cb:8f:f5:7f:4b:30:04:67:8f:30:95:
05:d2:0e:47:e0:d4:d8:cc:0e:88:af:95:e5:31:cc:
cb:95:df:ee:7d:07:72:7c:9f:2c:02:7b:4b:52:68:
fe:09:48:8e:b2:e3:3c:12:4d:30:01:98:8f:f1:3a:
4c:a1:eb:3c:64:9c:be:4d:a5:3c:bf:65:fc:06:53:
8b:0e:3b:bd:55:3d:fb:b8:d4:ea:02:bf:12:65:b4:
61:9a:a5:16:06:f4:a4:54:75:71:4a:b4:c7:1f:53:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2E:8E:C8:2A:29:C9:27:66:A5:D5:59:EF:84:58:EB:9C:50:12:73
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uC6OyCopySdmpdVZ74RY65xQEnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
194.58.45.0-194.58.47.255
194.87.27.0/24
194.87.136.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
195.58.56.0/21
195.133.55.0/24
195.133.195.0/24
212.192.0.0/23
212.193.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f9:c6:b5:e6:f7:4c:db:b8:d4:28:27:09:32:14:1b:14:bd:
a3:f0:05:15:02:39:4e:97:c8:85:5e:e1:5f:d2:26:20:ac:66:
31:7f:61:62:65:bb:3a:84:90:5b:f1:3b:9d:a7:a7:ec:b0:33:
a1:00:9c:1f:9c:55:9a:40:28:a8:bd:a5:91:3b:fd:26:6b:fa:
53:6a:20:e0:78:33:6f:b7:0d:b0:31:c2:5e:42:eb:8b:4d:71:
e5:cb:1d:65:58:0a:bc:57:ae:05:a8:f8:5d:4d:c4:45:dd:6e:
02:9a:18:37:5a:5c:ae:b7:dc:0f:b7:bc:c7:0d:5e:bd:d1:0e:
82:18:4a:d4:dd:88:fd:64:44:dc:00:65:57:ce:86:09:5e:19:
84:67:be:fc:20:80:fa:de:24:15:99:85:89:f6:36:9f:27:62:
fc:55:bd:b1:20:87:b7:ff:62:48:bd:dc:9d:95:c6:af:a8:e4:
7e:e0:ca:16:48:cd:68:73:20:da:27:90:ec:aa:1d:00:0f:01:
7c:16:1b:ea:f5:7d:0c:6b:84:22:17:1b:d1:13:1e:a0:ff:f1:
f2:54:9d:33:7a:6b:49:62:e8:e4:87:62:c5:8a:b4:4c:40:90:
e9:a3:ac:d4:20:5d:87:c0:5f:c6:05:93:e8:2f:fa:83:c5:2e:
3f:c0:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:28 2024 by rpki-client on console-fra.rpki-client.org