Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0ETEIQ9QQbuIbzbDq8aE6fv11Jg.roa
File: 0ETEIQ9QQbuIbzbDq8aE6fv11Jg.roa (raw, json)
Hash identifier: WbDxkEAvHHV3ZHKRkyQE6G8ywvJfCh7+WOaZZQzI2TQ=
Subject key identifier: D0:44:C4:21:0F:50:41:BB:88:6F:36:C3:AB:C6:84:E9:FB:F5:D4:98
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01892AEF7809279F6CE0000AD980AC20957C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0ETEIQ9QQbuIbzbDq8aE6fv11Jg.roa
Signing time: Thu 06 Jul 2023 11:21:23 +0000
ROA not before: Thu 06 Jul 2023 11:21:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 193.124.227.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:ef:78:09:27:9f:6c:e0:00:0a:d9:80:ac:20:95:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 6 11:21:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d044c4210f5041bb886f36c3abc684e9fbf5d498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:fd:e1:d0:61:b9:a7:f7:a1:48:7a:9d:38:
c3:d6:82:93:6a:50:00:c9:9b:97:fc:d0:35:5f:32:
eb:fd:20:94:7a:06:76:25:c6:8e:e7:84:7c:89:46:
d5:d0:6f:e3:28:5c:70:04:bd:84:f5:ac:f4:f8:16:
96:f7:ca:ad:9b:00:16:05:67:9b:83:a1:6f:c3:eb:
ea:84:12:d3:d2:7b:27:54:b9:ba:be:39:0f:67:26:
1c:d4:a3:48:55:29:e5:46:7c:3d:2f:a8:2e:00:5a:
86:a4:e5:2c:9c:b7:26:dc:80:bb:b8:00:76:ba:64:
29:5e:6b:54:29:05:e1:76:48:06:62:cd:d7:ce:c4:
31:ca:a7:76:eb:bf:83:e0:f2:3d:02:5d:1b:1f:28:
17:7b:95:df:ed:26:fa:44:6a:50:98:f3:4f:bd:89:
14:69:76:48:d8:03:6f:39:ef:d0:a1:d9:4d:20:e5:
6c:42:7e:61:ab:91:ab:a7:93:74:8c:7d:a5:c0:4c:
83:b2:d5:5b:6f:6f:11:36:a3:33:c3:05:13:17:5e:
23:43:8a:43:c5:1c:6b:15:d7:a9:66:33:6e:e8:59:
08:ec:a8:84:0c:3d:ef:56:e8:e2:3e:83:88:5a:52:
3b:d4:d5:6d:83:94:83:b4:1a:d6:36:53:bc:fd:77:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:44:C4:21:0F:50:41:BB:88:6F:36:C3:AB:C6:84:E9:FB:F5:D4:98
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0ETEIQ9QQbuIbzbDq8aE6fv11Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.235.0/24
193.124.49.0/24
193.124.227.0/24
194.87.53.0/24
194.87.243.0/24
194.135.23.0/24
194.135.46.0/24
195.133.37.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9d:ed:e7:64:55:e9:09:84:eb:69:d3:5e:f1:aa:ac:34:24:
3b:bc:76:15:4d:20:fe:bf:5e:f0:de:ec:85:43:42:86:37:a3:
c9:d8:53:03:d8:3e:cb:5c:38:b9:a2:de:94:48:94:bc:57:80:
ad:1d:69:f7:7b:06:0d:52:48:14:e3:88:e9:1b:95:04:0b:9a:
d4:62:f5:6d:f3:6b:df:08:8a:57:78:69:28:09:13:d4:c2:8a:
4b:52:d7:be:17:62:d4:13:eb:5d:d8:dd:09:9a:c5:b0:3f:be:
f7:d6:14:c2:fb:ad:6c:da:b6:c5:01:15:d1:54:4c:c7:20:5a:
c0:11:6f:a7:bc:b6:93:91:8c:97:60:ab:12:e1:f0:47:5e:52:
f4:90:30:87:de:75:da:ed:e7:eb:4d:96:f3:24:5f:49:8e:4d:
92:9d:4f:7c:43:ca:10:f7:14:cb:f6:27:fb:2e:4d:5c:52:d4:
f2:b7:4f:e6:58:32:fe:b7:35:ae:3c:af:0a:a0:b8:c6:24:c4:
c8:24:7c:40:42:6f:5f:6b:56:01:c1:98:9f:2a:55:20:31:fb:
45:5a:0f:f3:88:6b:2b:65:82:fd:b6:98:71:70:93:15:58:1b:
06:c9:6c:99:dd:2f:5c:14:53:8e:0e:11:b9:b8:3c:b7:87:9d:
d2:bf:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org