Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w0gqbnTz-8vhVTwzgeb-JOpC2zA.roa
File: w0gqbnTz-8vhVTwzgeb-JOpC2zA.roa (raw, json)
Hash identifier: GhbtovEboIatofDTC5stbMNdZc1yZ8bMhar+bKQwjo4=
Subject key identifier: C3:48:2A:6E:74:F3:FB:CB:E1:55:3C:33:81:E6:FE:24:EA:42:DB:30
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F670F7E5D1BD168391968BE82BCF0E5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w0gqbnTz-8vhVTwzgeb-JOpC2zA.roa
Signing time: Sun 01 Jan 2023 22:15:03 +0000
ROA not before: Sun 01 Jan 2023 22:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210654
IP address blocks: 194.87.114.0/24 maxlen: 24
194.87.132.0/22 maxlen: 24
212.192.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 11:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:0f:7e:5d:1b:d1:68:39:19:68:be:82:bc:f0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3482a6e74f3fbcbe1553c3381e6fe24ea42db30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:aa:5a:30:4f:b9:ac:da:44:e4:1b:48:85:a4:
34:95:ac:b7:ce:97:85:7a:42:34:27:69:1d:00:26:
d1:50:ba:5b:98:76:97:a3:a3:1e:67:bd:7b:87:11:
69:8a:92:23:1e:9d:0f:95:6e:1c:45:cb:86:45:cc:
0f:2d:23:57:19:77:95:06:87:d8:18:05:60:6b:4f:
36:04:16:7d:de:4f:19:10:3f:b8:c8:2d:b4:a7:1c:
76:cb:dc:43:de:c9:73:bd:e2:81:44:95:b5:f8:6d:
f3:d9:4e:72:6c:3b:fa:b6:f6:93:c3:ed:44:89:f6:
32:f7:1a:8f:69:a2:19:a6:43:e0:df:74:e9:2a:47:
4f:95:0c:a1:84:81:94:79:e0:7d:9b:4c:04:d9:be:
26:43:62:c9:21:3e:77:86:10:5e:d2:59:26:90:f8:
6c:49:5f:4b:96:95:a7:ff:16:94:69:34:8d:01:e7:
b3:33:c3:3d:ac:d8:ba:f5:bf:e5:ab:f5:73:0c:25:
6e:09:0d:39:4c:d3:ad:a3:9a:0c:7e:06:2a:c0:8b:
89:98:c0:3c:0f:99:a0:51:16:8e:01:2f:5e:f9:c1:
98:1e:e0:28:a7:73:46:7c:36:b3:50:0a:78:1e:f4:
21:6f:89:c1:9d:67:16:f6:c3:29:6b:94:57:87:8e:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:48:2A:6E:74:F3:FB:CB:E1:55:3C:33:81:E6:FE:24:EA:42:DB:30
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w0gqbnTz-8vhVTwzgeb-JOpC2zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.114.0/24
194.87.132.0/22
212.192.5.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ba:ea:d6:84:30:07:aa:07:99:79:4d:0f:73:88:4b:59:58:
23:a3:4c:29:17:1d:98:25:14:90:61:20:7e:12:53:68:f1:72:
9e:6d:4c:8e:f9:71:7c:b7:ce:ff:e3:b5:05:1f:9f:b9:00:ab:
b0:8b:f4:e1:2b:b3:17:cd:95:47:45:a1:a0:69:dc:97:bd:fd:
f8:66:38:15:14:fd:aa:61:03:ae:38:47:22:1e:0b:01:b4:4e:
6a:45:37:2c:a1:ff:d3:8b:90:ca:bc:91:39:8e:e5:42:4b:ec:
37:ea:7b:57:e5:84:fe:de:b0:5b:e7:29:90:04:af:89:ed:be:
24:21:08:e3:15:76:34:cc:fa:01:3f:20:85:c3:65:78:c8:12:
7a:b9:3b:a6:13:16:4b:bb:9f:70:0b:42:24:5f:92:fe:a4:84:
4c:e6:a2:87:45:04:5c:d6:24:26:c6:86:8f:99:13:c1:39:d1:
30:a3:40:83:d0:1d:70:7e:01:b9:eb:4e:98:ef:fc:bb:02:56:
fa:57:0c:a1:7c:49:e0:e0:e9:95:4d:86:1a:ca:44:14:29:1d:
33:5c:3b:fc:dc:54:c9:1c:67:54:e4:2e:79:e8:f2:66:6b:e4:
70:50:c3:2f:5c:7a:3d:09:90:9f:12:e5:b8:97:31:c8:2f:26:
29:96:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:29 2024 by rpki-client on console-fra.rpki-client.org