Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vWZW_r_VuyFzHUVKpQB8qb5UL6U.roa
File: vWZW_r_VuyFzHUVKpQB8qb5UL6U.roa (raw, json)
Hash identifier: E9H3wwkEv/Cgv1h5N0zAd6Vv1OY5L1HfZnzLEksjn5c=
Subject key identifier: BD:66:56:FE:BF:D5:BB:21:73:1D:45:4A:A5:00:7C:A9:BE:54:2F:A5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01875244837C4F19C28651BBA6B98118C11D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vWZW_r_VuyFzHUVKpQB8qb5UL6U.roa
Signing time: Wed 05 Apr 2023 16:33:54 +0000
ROA not before: Wed 05 Apr 2023 16:33:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213035
IP address blocks: 212.193.31.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
195.133.13.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
212.192.243.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 17:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:44:83:7c:4f:19:c2:86:51:bb:a6:b9:81:18:c1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 5 16:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd6656febfd5bb21731d454aa5007ca9be542fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:a1:8c:1b:8c:f7:74:e3:ea:f6:89:b9:2d:
b0:d1:e8:f8:5b:1a:6c:15:c9:f1:07:2b:53:cc:07:
7d:db:1d:57:c5:d0:d4:7e:f7:74:65:5f:32:ee:c0:
a7:f0:ec:0c:2a:e6:e3:3a:c2:67:00:1b:a4:8a:07:
61:e4:ea:47:e7:47:55:21:97:6d:bb:aa:03:90:a2:
47:8a:5f:1a:53:a1:ad:1d:2f:7f:6f:93:1a:9e:8e:
8d:8f:ab:2c:f8:d9:74:e5:dc:5f:74:f8:c8:89:4e:
6a:43:13:0a:48:0e:0b:40:b9:b9:6d:b0:d2:d8:b8:
18:53:4c:6c:cd:c5:c0:d6:2b:40:b6:f4:9b:3c:a1:
ac:24:34:d2:99:40:0d:b0:c5:51:79:e3:a3:eb:3d:
79:d3:54:35:d1:e5:20:06:32:37:cc:db:bc:e3:59:
a1:e9:5d:e0:ff:3f:e7:78:19:cb:98:e8:a2:a7:30:
2d:11:7d:03:88:dd:bc:da:9e:2d:9c:39:a7:5f:2f:
31:ed:67:33:26:4d:c7:45:8e:10:55:1a:7e:61:f8:
2f:3c:83:87:a6:63:16:d3:39:bc:f9:4a:fb:cb:30:
9d:85:5d:59:0a:6b:e7:e5:a8:b2:c7:60:99:26:2b:
36:b0:3b:1c:2e:46:f6:91:7c:9e:f2:85:65:a7:b5:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:66:56:FE:BF:D5:BB:21:73:1D:45:4A:A5:00:7C:A9:BE:54:2F:A5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vWZW_r_VuyFzHUVKpQB8qb5UL6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.188.0/24
193.124.227.0/24
194.85.249.0/24
194.85.251.0/24
194.87.84.0/24
194.87.86.0/24
194.87.187.0/24
195.133.13.0/24
195.133.37.0/24
212.192.240.0/24
212.192.243.0/24
212.193.28.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
30:64:2f:a0:e9:8a:0a:bc:e5:3d:b6:54:24:0f:73:df:a0:f3:
0f:f5:07:09:ec:ef:86:e1:a7:0d:f4:74:b6:f7:d8:7f:31:3c:
7c:1d:9a:52:b1:db:3c:1c:8b:81:75:ec:61:4d:82:2f:40:f8:
d6:d2:71:2c:f3:b5:5d:11:88:3f:0f:c1:73:c8:2a:16:ca:b9:
b9:4c:19:9f:ab:f7:53:55:17:ba:27:10:81:10:d8:20:c0:8a:
9a:d8:75:2d:a6:09:d0:d2:f8:34:79:04:62:e4:6e:ec:b4:7c:
a2:9c:17:72:83:61:56:72:b3:07:51:24:4a:2c:ab:64:b6:09:
ec:d3:0b:4e:50:0e:38:2e:65:35:4b:f9:ee:65:b0:fa:f5:f4:
ec:48:3a:24:e1:67:d9:b0:4c:df:83:4a:4f:39:99:0a:75:86:
3f:3c:6e:75:83:53:92:0e:36:c5:c9:6e:0f:99:74:cf:d9:03:
10:95:ee:58:ed:03:86:f9:b0:3e:a4:b8:ad:26:16:a0:c6:69:
ed:fb:6d:b3:92:1f:52:e0:9c:74:8b:9f:df:ce:d2:30:50:83:
03:e5:ff:30:b2:f3:0a:cf:a6:34:b1:27:0f:b4:68:4e:5c:ba:
1f:9d:86:a2:6d:f1:23:d9:15:c5:7d:5e:7b:6e:69:75:07:b7:
5d:ee:f2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:29 2024 by rpki-client on console-fra.rpki-client.org