Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0oQ64hNTFG_y9M3ZGop72hr7WbI.roa
File: 0oQ64hNTFG_y9M3ZGop72hr7WbI.roa (raw, json)
Hash identifier: UDuNQd7KLE4YmL2mCA+q3Oj7oJlMqVDPd/elEZ3qE5E=
Subject key identifier: D2:84:3A:E2:13:53:14:6F:F2:F4:CD:D9:1A:8A:7B:DA:1A:FB:59:B2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187BBD4D9F7470DF8C0DB4E5853CE0D1280
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0oQ64hNTFG_y9M3ZGop72hr7WbI.roa
Signing time: Wed 26 Apr 2023 04:31:41 +0000
ROA not before: Wed 26 Apr 2023 04:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203639
IP address blocks: 212.193.14.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bb:d4:d9:f7:47:0d:f8:c0:db:4e:58:53:ce:0d:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 26 04:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2843ae21353146ff2f4cdd91a8a7bda1afb59b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:62:18:28:6d:06:52:38:20:7e:78:76:8a:
16:3e:86:b0:5d:01:99:81:e4:a0:26:fc:f1:44:e0:
be:a1:32:c3:23:dd:86:77:ff:b3:69:3c:0a:03:5d:
a9:bd:67:f7:1f:9d:fb:41:ab:ab:cb:6c:0c:3d:ac:
8e:be:33:92:8e:22:ac:84:9e:3b:6b:58:62:c9:53:
b6:78:94:8e:47:f7:c5:6a:4a:e8:73:f0:f5:28:ba:
e0:b8:d5:ef:57:6b:41:e1:81:b1:cd:f3:1c:e7:5d:
98:0d:75:fa:35:37:60:92:2c:48:1e:79:27:f2:20:
db:2f:98:fb:f7:18:dc:a5:82:b5:7c:6b:fb:33:25:
32:09:9f:ef:9e:a7:d1:83:a7:80:2a:4b:54:6c:b8:
41:24:3a:e3:0c:2c:c4:6b:87:77:98:f6:07:b8:3b:
12:89:44:08:9b:01:ae:7b:42:18:f0:1d:24:e8:7b:
ba:37:f7:47:9e:c1:4b:61:3e:79:44:a4:4a:0a:b0:
4b:06:d5:8b:d4:33:b5:c7:56:7e:2b:5e:b8:b0:bf:
16:3b:4d:a8:7e:49:b8:1a:59:8b:ba:39:0d:d6:f3:
9a:13:0b:69:74:73:18:a6:1f:34:b1:3a:e0:c7:c7:
07:6a:bc:a5:e4:a2:86:e8:57:b9:fc:a3:75:12:db:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:84:3A:E2:13:53:14:6F:F2:F4:CD:D9:1A:8A:7B:DA:1A:FB:59:B2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0oQ64hNTFG_y9M3ZGop72hr7WbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.190.0/24
194.87.76.0/24
194.87.208.0/24
194.87.221.0/24
194.87.226.0/24
194.87.231.0/24
195.133.15.0/24
212.192.4.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ae:c4:94:4f:ab:4c:54:e4:fa:2e:12:0b:94:f8:cf:db:b5:
0d:ca:8e:2a:a8:e8:8c:bd:02:99:29:37:00:e6:98:9e:7b:09:
cb:47:ed:35:60:d4:0c:2c:24:03:1a:75:ec:8f:3b:3c:00:34:
ed:f6:77:3c:c2:89:a3:7f:f9:b2:c2:cd:e5:4e:72:9e:35:18:
58:c0:6d:3f:f9:c7:78:b1:e7:1e:a7:18:e8:85:cd:e8:ec:8d:
45:46:c6:6b:0c:5a:c1:b6:a7:e9:0a:e2:8c:e0:44:93:2f:00:
2c:7a:a9:16:a0:36:69:d9:ca:3e:db:6f:30:36:54:ed:48:11:
3e:bb:42:07:62:37:9e:a6:76:14:cb:19:85:b9:4a:d8:b7:3f:
25:25:d2:91:50:cc:54:56:bf:0b:c8:d3:d6:36:e5:4d:df:3e:
84:32:d7:f2:f3:39:ef:c5:47:0d:1b:fb:06:ee:82:a8:9a:ed:
34:6a:4c:46:c0:5f:b5:60:0e:ac:b2:0d:14:e2:85:14:81:e8:
5b:ab:6b:6d:ba:d6:b9:b5:e7:65:00:d7:25:64:ca:cd:56:ba:
91:42:46:73:5a:c6:55:ee:b7:07:19:67:2f:cf:82:81:9a:0a:
e8:0e:fd:be:ae:90:24:78:c9:9e:d8:ce:48:9c:d7:25:4b:83:
81:f8:88:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:48 2023 by rpki-client on console-ams.rpki-client.org