Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0Vj8AbQ6ixmhvbEyuxamMsMBiDE.roa
File: 0Vj8AbQ6ixmhvbEyuxamMsMBiDE.roa (raw, json)
Hash identifier: XkIFaobLkxwqNlxhs+k8mEWI2N7JEQFzA4Yjrqpivq8=
Subject key identifier: D1:58:FC:01:B4:3A:8B:19:A1:BD:B1:32:BB:16:A6:32:C3:01:88:31
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B1EA95579C5FA612AE3B1F4E107A7B465
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0Vj8AbQ6ixmhvbEyuxamMsMBiDE.roa
Signing time: Wed 11 Oct 2023 12:14:55 +0000
ROA not before: Wed 11 Oct 2023 12:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 194.135.105.0/24 maxlen: 24
195.133.8.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
195.133.41.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
195.133.62.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
194.87.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:a9:55:79:c5:fa:61:2a:e3:b1:f4:e1:07:a7:b4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 11 12:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d158fc01b43a8b19a1bdb132bb16a632c3018831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6a:0f:74:1c:ae:78:55:a9:45:55:e9:ae:34:
b1:91:6a:26:5b:96:86:72:d7:c2:8a:ff:4d:c4:c3:
3e:fc:5c:bd:8a:57:b9:dd:05:bd:04:74:c3:99:33:
a4:a1:66:f8:61:2c:af:f3:ca:bb:f9:7c:bb:98:70:
33:b0:70:09:fd:8c:4a:59:b7:ff:92:04:ba:d5:20:
b4:e3:05:3f:64:61:2f:8f:a8:d4:6c:0a:3c:79:4e:
ad:71:68:3d:c8:02:b5:7b:e6:b3:f4:5b:32:7c:8d:
c0:47:ec:2f:47:2a:e9:d0:e2:95:66:37:9a:f1:a6:
ee:5c:5a:cc:42:71:dc:9a:e9:02:9d:d8:73:74:a8:
80:f3:5d:e5:73:9e:5e:43:bf:3f:f2:31:90:9e:1f:
46:98:18:fe:3d:8e:9a:4c:f3:0a:48:d3:bc:cf:f1:
aa:bf:68:06:4b:61:f0:69:b1:26:80:e9:5f:59:22:
6c:94:f4:4b:66:2f:18:37:ca:52:9b:eb:9c:33:3f:
93:cb:e0:d8:9e:05:08:51:57:fb:3a:47:80:f6:fe:
24:ab:2a:7f:1c:9a:2c:df:3f:b0:fb:06:bb:17:b7:
27:b5:58:6b:60:a7:9b:ab:3d:33:2a:e1:74:3c:87:
1a:ab:b8:09:d6:1e:d9:a5:51:3c:c6:56:96:b7:e9:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:58:FC:01:B4:3A:8B:19:A1:BD:B1:32:BB:16:A6:32:C3:01:88:31
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0Vj8AbQ6ixmhvbEyuxamMsMBiDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.52.0/24
194.87.84.0/24
194.87.87.0/24
194.135.105.0/24
195.133.8.0/24
195.133.41.0/24
195.133.60.0/24
195.133.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:91:12:ff:09:ff:09:02:bd:89:fb:fa:56:70:22:94:94:a4:
e2:60:77:ce:b2:e7:d4:dd:9c:32:9a:c7:a7:5d:31:06:21:bb:
90:a7:d4:c0:8b:52:46:b7:d3:c0:0a:f6:a9:6a:ac:da:26:55:
9b:73:9f:e4:f7:fa:99:90:db:63:52:54:04:66:8b:ba:4d:2e:
52:cc:82:e9:61:d9:76:97:4e:90:91:a1:80:9b:16:26:f4:af:
a4:7e:1a:99:d9:7a:19:3b:e0:6e:6c:0f:af:6d:32:b2:86:89:
e8:86:21:65:23:39:18:84:0c:73:56:f0:87:45:20:29:a2:24:
5e:26:47:23:11:11:0e:1f:f6:21:9d:c1:cd:b7:5e:c3:f5:3b:
1e:6f:2a:b2:38:2c:a1:e3:e0:0e:7b:ae:5e:9f:b9:c9:1f:05:
87:df:10:10:1d:95:b6:51:05:a5:93:36:86:9c:2b:8c:40:26:
ea:2e:5f:94:81:d6:68:11:35:05:95:f6:4f:c3:9e:bb:3f:d9:
4b:9e:6c:9e:ba:53:90:3c:24:23:e6:ee:54:b5:db:a8:11:00:
7d:e2:88:5c:06:e1:70:eb:ec:a8:94:b6:5f:39:2c:28:83:d5:
5b:49:16:51:ee:8a:76:7a:9b:7e:c3:61:ca:65:6f:73:1f:f6:
7c:7f:bb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 05:40:08 2023 by rpki-client on console-ams.rpki-client.org