Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0WgemutDQzRtmXd73LHKcg24o6g.roa
File: 0WgemutDQzRtmXd73LHKcg24o6g.roa (raw, json)
Hash identifier: 5gQ9FY/MmY/Fx8DeOJMQ+geiAAVyuTRz4l7qEl/ig4Y=
Subject key identifier: D1:68:1E:9A:EB:43:43:34:6D:99:77:7B:DC:B1:CA:72:0D:B8:A3:A8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01859558DBBEAA445C0E80EB17B6CC73B2CB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0WgemutDQzRtmXd73LHKcg24o6g.roa
Signing time: Mon 09 Jan 2023 07:05:06 +0000
ROA not before: Mon 09 Jan 2023 07:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 194.87.207.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:58:db:be:aa:44:5c:0e:80:eb:17:b6:cc:73:b2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 9 07:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1681e9aeb4343346d99777bdcb1ca720db8a3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c4:a8:99:bb:b5:a6:f7:3e:73:07:d6:9e:60:
74:64:8c:e4:10:cf:d7:28:98:83:bf:b3:25:6f:7f:
69:eb:9a:66:80:a4:77:af:75:18:d8:9d:1d:42:58:
b7:dc:ce:00:32:20:8d:5b:66:8b:69:1e:56:bd:0e:
27:2e:e8:4a:08:2b:51:0e:31:c0:f3:50:4f:a6:7f:
d9:c2:c3:44:a1:a1:ef:9e:d3:a4:b4:57:c2:3b:2d:
e5:42:b8:eb:43:ed:f7:d6:cc:27:eb:fd:ff:bc:66:
a1:e8:90:26:28:11:57:4f:48:76:ef:44:d2:86:b8:
e1:fb:18:09:a5:c9:9b:20:e4:3d:38:9c:7a:32:64:
c5:e7:54:19:0e:f0:b9:83:a8:c5:c0:d2:f3:a6:fd:
65:6b:fd:e3:94:a7:d8:b5:81:68:4c:68:f5:78:6d:
45:69:3e:7c:7a:2c:c5:e3:da:30:12:6d:30:cd:f8:
b8:69:6f:77:02:00:c4:21:09:61:8c:e1:78:a5:c6:
1d:41:b6:0b:de:b4:f4:c5:67:e9:07:79:ec:fa:34:
0e:b1:5e:28:61:c5:3d:e4:66:17:7b:f8:1e:4b:33:
db:30:f8:4f:ae:c4:19:f5:12:7b:fa:1d:db:18:9a:
51:b9:fc:93:51:16:88:58:5a:44:6c:c4:04:5a:b0:
7b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:68:1E:9A:EB:43:43:34:6D:99:77:7B:DC:B1:CA:72:0D:B8:A3:A8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0WgemutDQzRtmXd73LHKcg24o6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.41.0/24
193.124.205.0/24
194.58.43.0/24
194.58.46.0/24
194.87.64.0/24
194.87.108.0/24
194.87.161.0/24
194.87.207.0/24
195.133.94.0/24
212.192.7.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f6:94:10:4f:f3:ce:29:a3:8f:6d:83:38:23:82:eb:e5:61:
0f:81:82:a4:e6:02:7b:87:1b:fc:dc:76:6a:dc:2b:0d:de:fb:
e1:1e:9e:c8:03:8e:e7:30:4b:5d:a6:58:41:70:c8:c2:8c:2a:
64:84:f7:f2:47:25:39:59:80:f5:df:4b:41:26:04:b5:3b:49:
34:51:e3:2a:74:4b:11:0c:9f:a8:2f:e3:3d:83:2a:90:a2:a9:
41:c1:f9:19:c7:12:a7:bb:ba:6c:80:0c:6a:e4:6f:0f:ca:7e:
15:9e:d0:6a:d4:3b:18:b8:07:1c:48:9a:00:21:4e:66:05:0b:
10:9e:6a:da:85:2b:36:fa:16:fd:20:6a:9b:20:33:a5:8d:fd:
bb:0e:aa:4f:92:55:39:be:00:64:9a:df:d3:a0:5f:6b:ec:1b:
d5:8a:c6:73:ec:e8:a4:b5:98:35:8f:88:02:c7:c7:ad:84:10:
5e:c5:fd:96:6c:6a:7d:51:f8:65:44:90:a7:f1:85:37:c3:33:
80:41:54:38:93:ab:c4:8b:07:03:20:68:f1:87:25:7b:3d:84:
51:bb:2f:71:82:63:8b:2f:ff:55:aa:87:ed:8c:a1:b3:2b:48:
26:ef:6b:fb:6f:86:5d:51:4b:c3:65:42:99:ae:0b:56:ae:e4:
14:ec:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org