Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/w4zo5a00dOCtZFHLN4xkjfla2yc.roa
File: w4zo5a00dOCtZFHLN4xkjfla2yc.roa (raw, json)
Hash identifier: uRlitC1JUO0GRXY/PeZXXWWucRkhIe5ROR7wzMwYFSI=
Subject key identifier: C3:8C:E8:E5:AD:34:74:E0:AD:64:51:CB:37:8C:64:8D:F9:5A:DB:27
Certificate issuer: /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial: 01880A2968B7025890B41F538AF4C8F52A86
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/w4zo5a00dOCtZFHLN4xkjfla2yc.roa
Signing time: Thu 11 May 2023 09:34:25 +0000
ROA not before: Thu 11 May 2023 09:34:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24843
IP address blocks: 193.57.130.0/23 maxlen: 23
193.57.130.0/24 maxlen: 24
193.57.131.0/24 maxlen: 24
193.57.129.0/24 maxlen: 24
193.57.128.0/24 maxlen: 24
193.57.128.0/23 maxlen: 23
185.108.35.0/24 maxlen: 24
2a02:c804::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 17 May 2023 13:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:29:68:b7:02:58:90:b4:1f:53:8a:f4:c8:f5:2a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Validity
Not Before: May 11 09:34:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c38ce8e5ad3474e0ad6451cb378c648df95adb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:14:74:0f:7c:e0:96:37:89:08:c5:34:55:
2a:1e:76:69:0b:b4:18:81:f1:12:45:40:13:24:a7:
e5:6f:5a:51:46:1b:d6:e4:be:15:6e:74:66:ed:61:
4d:2b:6d:c9:7b:37:e2:30:e1:a1:50:26:1a:cf:23:
c2:bc:c8:5a:d0:ac:89:39:11:1d:e5:20:34:19:be:
bf:0d:78:2c:d7:d5:74:14:d8:bd:b1:49:92:09:b9:
d3:03:38:da:ee:bf:4f:66:6b:c5:04:81:f8:86:ea:
54:c3:99:30:1a:57:4c:ee:2c:31:30:48:27:e7:11:
3d:64:24:17:db:f3:16:c0:05:88:05:ed:72:9e:86:
34:23:c6:ec:e8:25:6c:ff:db:cb:54:6c:76:17:a2:
b3:2a:20:63:f7:d4:39:eb:72:6e:ed:3e:53:83:df:
1c:6e:f7:4a:41:9b:ce:20:ec:52:e1:92:c3:f0:c0:
c2:66:43:76:d2:b0:ca:2a:0c:9d:f5:d1:3e:1f:01:
d2:7e:e0:cf:ff:8a:dc:af:e5:a1:15:8a:b5:b5:de:
dc:8c:6b:42:0d:cf:0d:15:f0:ef:f9:58:f7:f7:7b:
53:3f:77:a9:da:c8:05:7f:6d:72:3e:46:b6:bd:72:
e5:a4:36:43:c0:91:2f:ad:60:07:e3:9d:56:ac:6e:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8C:E8:E5:AD:34:74:E0:AD:64:51:CB:37:8C:64:8D:F9:5A:DB:27
X509v3 Authority Key Identifier:
keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/w4zo5a00dOCtZFHLN4xkjfla2yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.35.0/24
193.57.128.0/22
IPv6:
2a02:c804::/32
Signature Algorithm: sha256WithRSAEncryption
2f:5c:6f:ed:7d:73:6a:fe:aa:d1:9d:b8:59:c3:7e:96:61:b2:
77:97:22:62:0a:1f:6e:55:20:33:ac:fe:d7:7d:d0:7b:c1:b8:
33:4b:ef:b0:c2:40:35:ee:47:ad:27:bf:bc:0b:e3:e8:23:bf:
73:3e:a2:d1:0b:d6:0c:db:fe:05:02:6c:4a:92:bc:82:c6:a6:
0a:5f:3e:4b:ec:66:dd:9d:e1:28:e0:6e:e5:63:31:ac:ab:a3:
7b:28:2e:36:df:e6:d6:53:6b:ef:5b:c6:3d:7c:e0:9d:99:5d:
51:35:57:01:8f:5e:5f:49:2c:86:51:02:88:cb:f0:c2:71:64:
68:63:63:0f:86:54:7d:4e:26:27:2d:e4:70:ac:89:20:6e:d7:
13:ec:2e:2b:c6:2c:0f:6e:42:c4:75:13:27:eb:ab:a1:d0:cb:
f1:f7:a8:fe:af:bc:84:4c:82:0e:6a:55:1a:eb:26:93:ba:ab:
4b:7a:75:90:65:02:66:1b:73:fa:83:c6:7c:0e:8d:90:c8:4f:
8e:43:8b:15:cb:d2:ca:b6:db:f5:76:70:41:fd:8e:d9:5b:3d:
67:13:92:b8:16:cf:5b:86:51:4e:80:a2:87:6c:c3:9d:d2:d3:
94:60:08:42:4c:45:0a:e3:55:e1:29:7a:64:b4:54:5a:32:4e:
f8:f9:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:06 2024 by rpki-client on console-ams.rpki-client.org