Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0bVUe10dNE7IzqPDifpLOMy6Drs.roa
File: 0bVUe10dNE7IzqPDifpLOMy6Drs.roa (raw, json)
Hash identifier: fWiV8BxxuJPE/FFvB1S3q/dp9ExLod5+s5vc4s37xT8=
Subject key identifier: D1:B5:54:7B:5D:1D:34:4E:C8:CE:A3:C3:89:FA:4B:38:CC:BA:0E:BB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187524483D7BB9606322C36FFCFF6EF73B1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0bVUe10dNE7IzqPDifpLOMy6Drs.roa
Signing time: Wed 05 Apr 2023 16:33:54 +0000
ROA not before: Wed 05 Apr 2023 16:33:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 212.193.29.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
212.192.216.0/22 maxlen: 24
194.85.250.0/24 maxlen: 24
194.85.248.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
212.192.244.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:44:83:d7:bb:96:06:32:2c:36:ff:cf:f6:ef:73:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 5 16:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1b5547b5d1d344ec8cea3c389fa4b38ccba0ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c4:e8:b3:cb:03:0f:0e:fa:d3:35:22:b9:17:
54:2a:6d:67:b5:01:41:73:c2:e4:1b:2e:06:07:f7:
cd:0c:11:71:99:85:9c:01:97:94:56:ae:3f:8b:d0:
b1:02:b2:ac:bc:ff:d9:b5:fe:21:ad:1a:01:71:3d:
3b:36:52:d9:5a:ed:bc:27:e2:2c:b2:9f:f7:12:00:
bd:27:31:b6:76:a3:c3:f6:92:22:12:dc:3b:30:b1:
0e:cf:7d:34:e0:3e:84:8b:b2:6f:2c:73:18:0d:49:
6d:e4:3d:47:77:c2:53:34:01:21:03:f0:d6:70:8b:
29:0c:c9:83:48:2e:df:9f:49:7f:2b:70:3a:d3:dd:
48:d7:1a:c5:c3:ef:d2:16:92:46:39:f4:9d:8a:6e:
92:ce:7f:36:f6:97:99:b2:f5:cf:4b:ec:7d:46:d3:
8e:b3:7c:c5:7a:8e:b8:26:f1:9c:ec:cd:e0:ac:b8:
2e:f5:82:1f:59:ee:44:6a:bd:95:86:42:c3:b1:c7:
2d:c0:22:df:ef:50:99:b4:ab:a5:d4:91:99:1a:ed:
e6:4e:91:05:3e:30:4f:08:6b:07:ea:d0:f1:c3:3e:
ee:8f:f0:89:09:3e:f3:86:07:77:9b:1e:8b:3f:68:
e0:ee:3c:00:f9:a1:08:d0:58:87:41:71:81:d2:02:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B5:54:7B:5D:1D:34:4E:C8:CE:A3:C3:89:FA:4B:38:CC:BA:0E:BB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0bVUe10dNE7IzqPDifpLOMy6Drs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.248.0/24
194.85.250.0/24
194.87.67.0/24
194.87.227.0/24
212.192.216.0/22
212.192.244.0/22
212.193.29.0/24
Signature Algorithm: sha256WithRSAEncryption
01:89:8b:fa:69:df:4e:96:da:98:1e:fb:42:3e:46:9e:02:d1:
43:e4:cb:1a:d6:b6:a4:5b:ce:cb:08:7f:cd:40:7f:cd:e7:95:
2e:e9:17:7a:ca:c4:20:ea:76:1e:8e:ba:3c:49:15:79:83:14:
44:00:89:b1:78:a0:94:98:a6:11:8e:a2:de:70:de:19:e4:93:
55:32:44:9e:72:60:ac:8a:48:b3:f9:a0:c8:af:b8:51:f5:c1:
a7:bd:be:f6:28:a6:94:80:c9:c4:d1:bf:86:09:39:7b:99:98:
b9:d3:f3:87:9d:f4:f7:2d:9e:66:13:47:09:d9:39:7b:cc:05:
ce:f0:98:76:b0:87:3e:2b:34:63:40:ca:18:ce:b6:42:4a:09:
cc:70:86:04:f2:ff:5f:d9:8a:7d:9f:36:08:e7:93:4e:10:1a:
97:ef:7e:f1:a5:d1:98:e8:5d:f3:d3:48:3c:42:91:60:15:e8:
7e:1a:e6:e5:5d:1f:31:3b:d5:6a:0e:41:02:3c:8a:35:3e:5b:
6f:62:6b:07:16:9e:15:8c:f6:37:e0:b3:68:1c:5c:e7:4a:a2:
4c:7f:88:a0:b4:7d:e9:72:42:74:2e:33:a0:0f:00:89:de:0b:
1f:a4:ed:3e:fd:33:55:8d:62:5b:cc:ec:c8:0e:f2:16:0c:ce:
3a:54:c5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:48 2023 by rpki-client on console-ams.rpki-client.org