Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zkasUP3m9d4FfjuW45fwj88EVkM.roa
File: zkasUP3m9d4FfjuW45fwj88EVkM.roa (raw, json)
Hash identifier: ae7ckctJt6+usgvExhoYdW3JLElewgYFtmOBpCWfhlc=
Subject key identifier: CE:46:AC:50:FD:E6:F5:DE:05:7E:3B:96:E3:97:F0:8F:CF:04:56:43
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189CE9B17FF7B4EF6868A1530F26F12E105
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zkasUP3m9d4FfjuW45fwj88EVkM.roa
Signing time: Mon 07 Aug 2023 06:06:57 +0000
ROA not before: Mon 07 Aug 2023 06:06:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 193.124.227.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
212.192.249.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Aug 2023 09:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:9b:17:ff:7b:4e:f6:86:8a:15:30:f2:6f:12:e1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 7 06:06:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce46ac50fde6f5de057e3b96e397f08fcf045643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:c3:9a:aa:bc:4d:5c:3e:04:39:aa:9c:0d:
2e:fa:d8:f1:d3:75:7e:5f:6b:ef:e0:29:a1:39:86:
64:0f:5b:0f:7a:3e:bf:2c:25:d5:4b:f8:97:07:8d:
8b:13:14:e7:6e:90:3c:92:cc:9b:15:7f:db:6a:6c:
98:b9:1a:99:d2:8b:28:a9:e6:8f:f7:f4:3e:6b:f2:
00:3e:2f:04:d0:17:cb:49:3b:20:bc:1e:ce:fd:ed:
8a:ad:eb:50:60:d1:84:cc:66:55:b1:88:11:a7:8a:
9a:db:49:4c:a2:29:ea:62:78:47:3d:31:93:78:4b:
b9:1b:9a:1a:cd:64:ee:1a:03:3c:c8:98:32:68:97:
2b:a8:60:ee:ed:5b:4f:8f:69:2d:58:74:04:96:73:
e3:d5:eb:12:4e:bc:73:6b:59:ff:0a:bb:f9:6a:fd:
04:51:a0:24:93:94:b3:69:c8:8d:37:5b:bf:09:fe:
b4:d6:1d:28:51:d2:02:09:24:0b:78:28:53:c1:18:
0e:4c:0a:f3:4d:06:9e:24:96:a0:22:81:28:33:ea:
a6:cd:65:bb:27:8f:23:09:28:ac:de:83:18:54:0e:
df:d1:18:1a:02:2f:13:45:c1:60:bd:7f:c9:53:a2:
14:9d:8d:64:6c:81:14:56:96:b8:27:46:de:90:17:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:46:AC:50:FD:E6:F5:DE:05:7E:3B:96:E3:97:F0:8F:CF:04:56:43
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zkasUP3m9d4FfjuW45fwj88EVkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.235.0/24
193.124.18.0/24
193.124.49.0/24
193.124.227.0/24
194.87.23.0/24
194.87.53.0/24
194.87.85.0/24
194.87.160.0/24
194.87.230.0/24
194.87.240.0/24
194.87.243.0/24
194.135.46.0/24
195.133.37.0/24
212.192.10.0/24
212.192.249.0/24
Signature Algorithm: sha256WithRSAEncryption
06:9a:2c:9e:2d:47:26:da:21:50:51:d5:8a:46:48:ca:4c:87:
c5:c2:76:51:16:07:4d:93:81:43:2a:e2:ba:61:00:59:dd:a7:
be:a3:74:d6:fa:7a:c8:38:83:6b:b1:c0:fc:6b:84:bb:aa:15:
7b:d3:fc:44:47:cc:5c:9f:2d:0a:8d:1f:cf:ad:15:21:c0:6b:
5c:42:f8:51:1a:c9:2e:57:02:2d:ed:9f:a4:71:b6:fd:ac:a7:
57:64:13:15:03:40:5d:7b:c0:0b:93:94:de:b9:4f:b3:64:eb:
fc:2d:8e:66:3f:67:8c:36:de:0b:d3:a2:ba:22:a4:49:36:33:
37:bc:b4:ff:6a:8a:b5:f8:d6:af:f8:2b:bd:d7:d4:5c:cf:22:
c1:5b:28:4a:12:7b:51:bb:ff:5f:c3:b0:18:15:dc:0b:bb:02:
30:08:e4:5f:58:dc:68:fa:fb:b5:ae:aa:50:ec:9a:e8:c5:b1:
06:2a:f4:80:bc:09:4f:7c:d4:be:72:64:90:98:12:9b:78:82:
3e:e7:8f:ea:c6:2f:b0:90:50:89:83:49:59:70:52:8c:2b:f9:
26:8b:5c:52:ce:30:eb:4a:0d:88:02:80:ba:74:9f:c6:71:1c:
b5:f7:19:21:65:80:b9:53:16:f2:6a:8e:f1:9b:4b:2a:89:2b:
9c:89:96:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:31 2024 by rpki-client on console-fra.rpki-client.org