Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0FdN-38Ar_g2Bx6OaMsswPRhOvs.roa
File: 0FdN-38Ar_g2Bx6OaMsswPRhOvs.roa (raw, json)
Hash identifier: Mhtg1hmikTFVlK1Sm3XHWeXvkQQkMulMvrenOp/T00I=
Subject key identifier: D0:57:4D:FB:7F:00:AF:F8:36:07:1E:8E:68:CB:2C:C0:F4:61:3A:FB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C05CF0166942B0B9FD9966B28BF9BFBA9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0FdN-38Ar_g2Bx6OaMsswPRhOvs.roa
Signing time: Sat 25 Nov 2023 09:28:21 +0000
ROA not before: Sat 25 Nov 2023 09:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147186
IP address blocks: 194.87.138.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.87.141.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:05:cf:01:66:94:2b:0b:9f:d9:96:6b:28:bf:9b:fb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 25 09:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0574dfb7f00aff836071e8e68cb2cc0f4613afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:7b:6e:2e:26:15:96:dd:42:08:4f:79:3b:
1d:8f:0b:52:8d:1b:66:01:77:bd:5e:bf:2e:f0:fa:
a0:27:36:58:1b:51:b7:c3:86:05:7c:41:6b:ce:99:
bd:9c:62:b5:4b:df:18:e2:66:08:45:5c:93:68:c1:
f2:be:69:d0:e9:cf:8f:b4:96:37:fd:a6:0b:e0:7c:
96:4d:b7:ba:5a:ff:09:e6:27:11:47:a3:4a:c8:ca:
d5:e6:fe:9a:8f:2e:5e:c8:d1:79:ec:92:40:6e:c4:
76:93:40:bd:04:57:0c:8a:60:2f:66:21:c4:c1:0b:
9c:58:bf:26:a0:ba:b1:5f:8b:71:ae:9b:32:e1:d9:
8c:54:85:be:92:e3:22:04:cc:e9:b6:25:fb:13:d2:
e8:e7:5f:f9:3b:da:33:61:c7:c7:75:a7:b0:25:b8:
9d:eb:d4:68:d8:00:e0:f7:8a:99:af:32:6b:8e:ff:
4a:3d:cf:1b:82:79:d3:18:8d:1f:46:5d:72:f1:f5:
03:cb:e7:33:13:04:6b:64:07:1b:13:04:81:bc:66:
21:ec:e8:71:68:ef:bd:71:84:3e:1f:1c:ac:5d:79:
db:48:e6:63:3c:fd:38:1d:0e:0e:fc:62:16:81:e8:
53:1d:d4:48:57:31:1f:b5:ab:1f:f7:67:8b:ff:08:
cd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:57:4D:FB:7F:00:AF:F8:36:07:1E:8E:68:CB:2C:C0:F4:61:3A:FB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0FdN-38Ar_g2Bx6OaMsswPRhOvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.33.0/24
194.87.138.0/24
194.87.141.0/24
194.87.168.0/24
194.87.170.0/24
194.87.178.0/24
194.87.250.0/24
195.58.63.0/24
212.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f3:ba:94:83:e9:b6:05:40:91:30:50:5b:0c:61:2c:8f:3d:
80:03:d8:48:44:05:cf:c2:14:db:22:2c:94:dd:07:f9:7f:f2:
c6:54:88:aa:06:23:f9:fe:46:55:27:5f:14:89:d7:89:ad:d9:
34:1d:0e:01:a2:55:28:d8:63:5b:03:ac:4d:14:0b:a0:48:c8:
22:ed:21:26:22:ac:ee:37:68:65:81:10:a5:f8:43:3d:d7:6e:
c6:a1:d9:8c:63:c4:d6:af:ef:a0:8e:04:63:ed:7e:00:90:78:
45:56:ef:0c:55:3a:43:bf:d9:f1:d9:76:53:34:55:a0:4f:61:
cc:a2:f5:61:8b:d0:be:9c:fa:52:67:d2:15:f0:1a:43:c3:3a:
45:a5:14:01:20:25:38:ad:e3:80:19:db:ad:68:01:b4:ce:66:
da:c8:fd:84:98:36:8c:1d:ad:cf:6d:98:3d:73:fb:03:a7:f9:
73:e1:c4:a0:bb:f8:32:c1:60:df:24:6a:31:ab:d8:ec:4e:07:
68:ff:7d:ad:c0:fd:55:7c:4d:ec:26:6a:b9:be:16:a7:ad:00:
e2:7b:b3:c2:59:64:f6:09:1e:52:77:fa:88:5b:82:7d:01:86:
ab:15:8f:05:75:a6:9e:a4:4f:78:79:3e:e7:7c:0a:31:15:cc:
c5:ce:4f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 18:04:11 2023 by rpki-client on console-ams.rpki-client.org