Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xLT9Um2AcIeY8QTyywlUlxwEv94.roa
File: xLT9Um2AcIeY8QTyywlUlxwEv94.roa (raw, json)
Hash identifier: 0+7EJ6/Yl+kmI3hEr1LEKXqLLfKy8C/Xl2yfallP4io=
Subject key identifier: C4:B4:FD:52:6D:80:70:87:98:F1:04:F2:CB:09:54:97:1C:04:BF:DE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185E79C3BC927C70A5D01DF2BCEE8BBB8BF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xLT9Um2AcIeY8QTyywlUlxwEv94.roa
Signing time: Wed 25 Jan 2023 06:27:33 +0000
ROA not before: Wed 25 Jan 2023 06:27:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 212.193.29.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.35.0/24 maxlen: 24
212.192.216.0/22 maxlen: 24
194.85.250.0/24 maxlen: 24
194.85.248.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Feb 2023 10:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:9c:3b:c9:27:c7:0a:5d:01:df:2b:ce:e8:bb:b8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 25 06:27:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4b4fd526d80708798f104f2cb0954971c04bfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f5:5c:ed:8e:8b:27:74:b1:e3:b6:96:4e:2f:
e7:13:f0:29:8f:1b:d0:35:ee:5a:6c:41:c9:b9:47:
90:1e:b8:30:49:4d:04:fe:26:19:f2:39:8e:11:0d:
5d:fc:f0:2a:46:2a:57:7f:f3:13:11:06:49:70:d8:
5d:ac:a3:43:f6:4e:2d:b9:5c:c3:8f:5e:82:26:f6:
b4:f5:49:2a:6b:f0:3c:7d:5f:e8:d6:dc:f5:97:1a:
70:d8:bf:18:4e:b0:93:a7:df:a0:e6:05:e4:98:aa:
cd:82:31:2c:70:e0:d4:81:92:e3:e2:a9:3b:a1:83:
0d:7b:c1:87:bf:76:11:11:ee:ca:69:9d:04:41:b6:
7e:9c:39:09:61:cd:f1:91:28:c0:54:e9:dc:bc:71:
47:74:21:32:69:09:d7:3f:99:13:d0:45:c8:1c:97:
f2:e0:51:e2:50:03:5b:f7:a0:73:41:35:6f:37:cb:
d9:04:31:50:53:d9:16:c9:ee:15:49:2e:c8:6a:6d:
b2:3d:e6:42:db:d1:3b:45:01:89:8f:6a:3d:5b:87:
5a:7d:e7:31:68:71:4c:a1:aa:ba:b1:7d:a1:c6:f5:
37:b6:ea:07:a2:f7:01:61:b8:4d:2c:69:eb:66:4a:
6b:8c:a8:ca:d7:0a:70:a5:32:05:a1:62:0a:b2:b4:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B4:FD:52:6D:80:70:87:98:F1:04:F2:CB:09:54:97:1C:04:BF:DE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xLT9Um2AcIeY8QTyywlUlxwEv94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.248.0/24
194.85.250.0/24
194.87.35.0/24
194.87.67.0/24
194.87.220.0/23
194.87.227.0/24
195.133.39.0/24
212.192.216.0/22
212.192.244.0/22
212.193.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:41:6b:cc:39:9b:58:c5:d3:bd:91:89:da:8b:26:de:ee:24:
f3:20:ed:19:db:fa:da:92:aa:7d:2e:ab:84:ac:3f:92:87:ff:
7b:97:27:f8:aa:6d:e3:fe:7d:c7:30:97:96:e1:f6:5c:f4:02:
9f:63:86:6a:d3:b8:5d:d9:bf:ce:09:44:19:ea:e5:35:7c:84:
5b:8e:4e:19:57:e4:f7:6b:1e:d0:cd:6b:0d:61:c9:f5:45:38:
e2:d7:d4:74:32:f9:28:42:e0:c9:26:02:bb:ce:92:20:52:30:
4d:26:74:8d:20:00:bc:85:7a:70:c0:df:5e:f0:0f:6a:7b:50:
38:a7:4e:42:52:6e:0c:5d:b3:cb:b4:4a:46:6c:68:98:bf:90:
c9:31:30:58:c8:4b:97:f6:80:78:8c:49:55:e2:01:2f:47:3e:
eb:98:4b:a6:32:d8:8e:ef:90:4c:b9:42:0c:e6:19:37:f4:ed:
99:57:5b:25:89:04:71:20:40:5b:d2:19:2f:28:1b:2c:7f:2d:
35:94:4e:5e:f1:3e:5d:f9:62:1a:0e:27:5d:b9:74:02:ba:07:
06:d3:05:35:1a:da:23:b5:1c:92:32:1c:96:71:82:5b:b3:11:
c0:e1:5e:2b:2b:9e:99:81:d4:b1:d9:9f:ea:a0:7a:e4:dd:a5:
6a:63:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:51 2024 by rpki-client on console-ams.rpki-client.org