Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uHQNeaU0cZRMHa7PxjWv-WMLZM8.roa
File: uHQNeaU0cZRMHa7PxjWv-WMLZM8.roa (raw, json)
Hash identifier: TZbILVLe0cL5i9ltsoKIGwqkzkjonON+2FoHsqkjUgE=
Subject key identifier: B8:74:0D:79:A5:34:71:94:4C:1D:AE:CF:C6:35:AF:F9:63:0B:64:CF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186A8022F1AAAC1CA4ED51D7AF0B083D41A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uHQNeaU0cZRMHa7PxjWv-WMLZM8.roa
Signing time: Fri 03 Mar 2023 15:06:00 +0000
ROA not before: Fri 03 Mar 2023 15:06:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49870
IP address blocks: 195.133.84.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Mar 2023 16:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a8:02:2f:1a:aa:c1:ca:4e:d5:1d:7a:f0:b0:83:d4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 3 15:06:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8740d79a53471944c1daecfc635aff9630b64cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:52:f1:dc:9d:7f:c9:59:79:0d:b9:e8:9f:
48:d5:b0:67:2c:1e:97:4c:99:63:ea:c5:6d:9d:ff:
cb:c1:a4:52:5b:6f:bf:d4:49:64:c1:43:eb:2a:63:
fd:93:98:14:67:7e:e1:b4:9e:98:8b:68:75:f8:4a:
3b:d9:f7:52:a1:0e:cd:b4:65:ae:48:46:ab:fd:46:
5c:8d:c2:77:23:f2:88:1f:6d:ae:31:1f:56:01:68:
f6:92:66:2f:c7:f7:dd:cd:44:84:c8:91:f0:41:b0:
c7:62:1e:de:7c:fe:63:80:b0:27:81:72:89:13:eb:
78:a9:da:fd:6b:ca:f9:bb:44:16:c1:60:64:44:78:
be:74:45:36:df:9e:e4:12:0c:01:2b:d6:ff:4c:c2:
4a:7c:fa:9f:ce:01:4f:b3:6b:e9:f0:64:5f:cc:6f:
31:98:fa:99:db:31:2f:6e:f8:14:99:e6:b6:b3:ad:
62:39:2a:e4:7d:1e:05:30:7a:2c:a4:7b:07:ba:4d:
ab:26:e3:d4:ea:dc:9e:f2:8e:7e:e1:71:39:8b:3a:
a1:b6:36:9e:3e:35:04:63:a1:54:c4:b5:2e:6f:eb:
59:69:54:8b:27:91:d3:e9:57:1a:f1:14:86:f8:8d:
ca:1f:ae:ec:9d:5c:24:67:b4:1d:14:93:a5:0c:9c:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:74:0D:79:A5:34:71:94:4C:1D:AE:CF:C6:35:AF:F9:63:0B:64:CF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uHQNeaU0cZRMHa7PxjWv-WMLZM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.45.0/24
193.124.94.0/24
194.58.58.0/24
194.87.220.0/24
195.133.84.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:43:e8:96:93:76:af:cf:a2:88:90:a0:09:d9:28:49:d6:c3:
8b:4a:77:cb:87:2e:e7:b5:0d:9c:0f:c3:1a:51:78:f1:a3:a3:
79:94:22:3a:0c:7e:0e:44:36:af:3d:fc:02:dd:25:60:3a:b2:
70:09:f9:d8:15:20:74:05:c3:87:e5:c8:42:aa:dd:99:18:db:
4d:7d:d8:74:d3:d0:82:d7:92:f2:6d:e5:b5:2e:2e:b8:0f:3b:
13:9f:06:4e:e2:3a:a5:9c:9b:a4:0d:53:14:8e:e6:e4:98:8f:
66:f3:ae:8b:b9:77:41:7e:57:2e:8d:2a:e7:16:3b:d6:06:30:
5b:39:86:7c:fe:af:16:ae:18:ce:c3:11:c5:f6:31:8b:51:61:
a1:24:7d:f1:81:d1:eb:be:43:f6:34:b4:bc:04:68:60:26:ae:
81:3e:a4:4e:71:12:e5:41:a2:a1:e1:54:ae:36:9c:f1:8d:6d:
01:66:30:d4:a2:ba:5a:33:6c:52:1d:61:a8:d3:97:7b:99:a4:
e4:54:9c:5a:ae:2a:20:0b:0b:bf:4a:c5:c4:70:41:6c:97:43:
d8:1e:d3:21:cc:1c:16:77:98:7a:21:24:eb:8e:16:bf:32:9a:
d1:86:d1:65:40:5a:0c:03:af:f2:dd:84:fb:84:b5:4b:c1:fa:
19:9b:31:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:29 2024 by rpki-client on console-fra.rpki-client.org