Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/x_0f2oYIjBUYAsRH-zh87hG3Jis.roa
File: x_0f2oYIjBUYAsRH-zh87hG3Jis.roa (raw, json)
Hash identifier: 1memBX59YfzlfgoHEcXHdv8VL5BpmkdiXq8fN1c2j1s=
Subject key identifier: C7:FD:1F:DA:86:08:8C:15:18:02:C4:47:FB:38:7C:EE:11:B7:26:2B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01870CC2360718E4CD4C56AE03763176ECC2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/x_0f2oYIjBUYAsRH-zh87hG3Jis.roa
Signing time: Thu 23 Mar 2023 04:37:47 +0000
ROA not before: Thu 23 Mar 2023 04:37:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49870
IP address blocks: 194.87.220.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 May 2023 04:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0c:c2:36:07:18:e4:cd:4c:56:ae:03:76:31:76:ec:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 23 04:37:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7fd1fda86088c151802c447fb387cee11b7262b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:99:f5:0e:5e:1b:aa:21:9d:4f:9f:26:e6:14:
09:aa:9a:29:45:af:ac:fc:f0:73:56:3e:d9:d1:a4:
b9:66:58:cd:69:99:e9:70:1a:f9:59:8c:90:29:a7:
7f:e7:66:70:2f:57:cc:bf:3d:99:fd:ac:26:0f:cc:
38:59:e2:c3:a9:d6:8b:f0:b3:2e:99:79:72:74:7d:
44:57:40:3c:32:3d:a4:19:e7:ba:1c:69:61:25:6a:
eb:1d:1d:70:f8:03:b0:4a:53:1b:a7:ed:5f:4b:ab:
1a:ce:b2:db:f2:ad:86:f6:a0:78:91:3e:e6:63:6a:
b7:e8:0b:e7:ae:84:66:42:6c:71:0a:19:b7:9d:47:
3d:ed:c5:bc:d4:2a:cc:e2:f9:08:24:a8:b8:72:44:
d8:ee:d9:3d:68:0c:58:5e:75:38:c4:bd:c5:f0:53:
28:5e:cb:31:b4:26:0e:88:39:8e:8c:9c:ac:7f:a5:
92:40:9d:9e:cf:33:cb:af:5e:f9:3a:2d:48:5e:e1:
1c:e7:7a:18:51:c9:13:71:df:a2:85:34:44:af:15:
c7:be:ca:aa:8a:89:b1:c3:cf:30:25:11:ae:02:f4:
59:e2:82:a2:fe:4f:f4:be:97:51:08:27:9f:d5:45:
f8:da:60:45:6f:bc:d2:f5:75:5e:01:3f:e5:33:1d:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FD:1F:DA:86:08:8C:15:18:02:C4:47:FB:38:7C:EE:11:B7:26:2B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/x_0f2oYIjBUYAsRH-zh87hG3Jis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.45.0-193.124.46.255
193.124.94.0/24
194.58.58.0/24
194.87.220.0/24
195.133.14.0/24
Signature Algorithm: sha256WithRSAEncryption
74:3c:a6:96:6a:c0:5f:a8:03:23:2d:a0:dc:cf:a8:14:82:5d:
f5:c7:61:3f:c7:89:7f:5b:dc:94:18:09:66:50:df:b7:bb:34:
9b:10:5e:c5:8d:ae:0a:4c:df:8c:c7:58:53:3c:9f:14:85:1c:
62:45:b7:8e:4f:6a:74:be:1f:8d:57:6a:48:fe:e5:c8:2d:3b:
e0:24:83:44:da:4f:cf:9a:23:43:af:71:e0:94:bf:0f:fd:a7:
73:19:8c:d7:f8:cb:00:18:2d:3b:95:0c:6e:43:9b:da:43:05:
f3:57:b3:dc:9f:09:00:89:68:e8:68:1c:50:72:3c:45:af:97:
90:62:3c:29:c5:23:d4:c7:64:2c:92:c7:c8:70:d8:88:ae:ca:
12:dd:18:1e:57:73:dc:2a:0a:ee:f3:09:6e:68:73:4e:52:fe:
25:4d:d9:e0:c4:83:82:52:26:df:7c:91:2e:f1:80:76:73:ae:
b5:2f:ec:8f:42:bb:71:10:7e:bf:38:9b:c8:3c:86:cc:98:29:
ca:0e:dd:40:b2:82:c7:79:1e:cb:30:dd:d9:a4:f1:05:9c:1d:
05:33:62:a8:ff:bc:2c:b2:ec:6d:8f:0d:46:8c:b5:83:ec:1c:
92:62:1f:c8:c8:b4:ac:2e:63:78:c0:49:12:1f:f7:00:b4:07:
ae:29:0c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:30 2024 by rpki-client on console-fra.rpki-client.org