Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vBjEbc44qLztzmTbaCqIbrMOSgQ.roa
File: vBjEbc44qLztzmTbaCqIbrMOSgQ.roa (raw, json)
Hash identifier: VuAos/1tpiXXlfTqx5tSpp5ud51ricTiFAQHtfnC0hk=
Subject key identifier: BC:18:C4:6D:CE:38:A8:BC:ED:CE:64:DB:68:2A:88:6E:B3:0E:4A:04
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187A8CE3EF278F7A88CA9C0E437A568342F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vBjEbc44qLztzmTbaCqIbrMOSgQ.roa
Signing time: Sat 22 Apr 2023 11:51:41 +0000
ROA not before: Sat 22 Apr 2023 11:51:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41745
IP address blocks: 195.133.75.0/24 maxlen: 24
194.87.219.0/24 maxlen: 24
193.124.33.0/24 maxlen: 24
194.87.35.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.87.62.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 May 2023 05:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:ce:3e:f2:78:f7:a8:8c:a9:c0:e4:37:a5:68:34:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 22 11:51:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc18c46dce38a8bcedce64db682a886eb30e4a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:70:89:12:ba:14:2a:1a:d8:10:29:0f:66:34:
ab:90:77:d7:32:09:61:32:3c:e5:dc:2c:bb:fe:69:
4a:ae:c9:d6:7e:3b:66:2d:aa:e8:39:05:54:cd:50:
4b:b3:94:6d:af:fe:7e:ca:40:12:d4:f4:6f:62:4e:
43:69:a0:59:eb:38:d9:5e:26:97:61:8b:7b:eb:69:
40:72:81:c5:8f:5f:cc:43:6a:a0:b8:ef:eb:d6:81:
d8:e9:7d:6f:01:17:a4:2b:64:d2:a1:f7:72:d5:5b:
4e:77:0d:08:0f:8d:48:e7:4e:82:59:d7:27:c7:c1:
75:43:70:9b:cf:e5:60:ef:3d:6f:23:4f:51:22:54:
b0:d7:60:0d:52:6e:df:37:ee:50:31:48:0c:b5:69:
71:8f:39:2d:44:db:9d:88:a7:d4:9e:e6:03:c8:f8:
20:52:bc:ca:c0:ad:2c:6e:39:9c:a5:b2:89:17:31:
64:72:83:e9:d0:7b:37:92:78:29:a7:32:b6:e7:83:
e0:fe:af:e4:2a:5c:74:dd:6b:81:b1:ff:98:b6:dc:
ef:74:ce:6f:59:da:95:91:b4:65:c8:ea:77:94:67:
e7:cf:25:24:b2:02:0e:02:8b:f9:ba:75:be:3a:2b:
d0:3f:7c:13:79:24:72:3d:b5:8a:0d:c6:ef:9e:d4:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:18:C4:6D:CE:38:A8:BC:ED:CE:64:DB:68:2A:88:6E:B3:0E:4A:04
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vBjEbc44qLztzmTbaCqIbrMOSgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.33.0/24
194.87.35.0/24
194.87.62.0/24
194.87.82.0/24
194.87.191.0/24
194.87.219.0/24
194.87.252.0/24
195.58.50.0/24
195.133.75.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a2:73:f3:48:4c:bb:2a:cc:e8:c0:39:1e:6a:48:ca:f8:3a:
69:40:1a:22:1d:30:57:e8:26:d8:7e:38:c5:8f:e4:d4:05:25:
61:f5:a1:37:31:12:64:17:86:0a:83:6e:9b:9d:f3:42:e1:8c:
f6:0f:97:6f:55:7d:60:1f:e5:a8:91:35:d9:8c:49:f2:73:d3:
80:81:c5:f1:6a:d6:df:dc:eb:b4:b5:ae:7d:17:eb:70:cc:1f:
4f:d2:4b:ac:e1:c6:2f:bb:9c:ff:90:ee:00:e1:d6:36:26:25:
bf:c7:e5:57:32:e0:e5:7c:96:22:9e:2c:dd:8d:75:e8:e7:c8:
87:a7:ec:97:45:d8:9d:da:dd:be:c8:7a:78:37:dd:1e:e9:4a:
80:6a:d3:26:1b:74:34:2d:94:d6:cd:1b:83:07:26:d2:ef:ce:
54:a0:de:da:80:b9:7b:f5:84:db:69:3c:4e:da:b4:2f:99:cb:
4d:76:ee:9f:13:15:57:e8:a7:d0:06:ed:3e:47:16:25:84:86:
36:96:85:64:3f:87:31:1f:8b:83:4e:3c:7c:f7:31:38:13:b7:
a6:b5:41:47:e9:26:d0:b1:b1:c8:ba:eb:b9:ac:27:60:c1:ea:
b7:19:41:66:43:b6:33:69:b1:79:40:c8:aa:7a:28:df:7b:ae:
85:22:fb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:49 2024 by rpki-client on console-ams.rpki-client.org