Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0zt3Fini5HpjuEsMTk94teKBmfo.roa
File: 0zt3Fini5HpjuEsMTk94teKBmfo.roa (raw, json)
Hash identifier: USVR4pdZFRUnBlb7EhHRRmdGiRL8cJ2mjzlvOkLIVcg=
Subject key identifier: D3:3B:77:16:29:E2:E4:7A:63:B8:4B:0C:4E:4F:78:B5:E2:81:99:FA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188237FAC02BA591970341F19087BFE1A62
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0zt3Fini5HpjuEsMTk94teKBmfo.roa
Signing time: Tue 16 May 2023 07:39:09 +0000
ROA not before: Tue 16 May 2023 07:39:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41944
IP address blocks: 195.133.94.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:7f:ac:02:ba:59:19:70:34:1f:19:08:7b:fe:1a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 16 07:39:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d33b771629e2e47a63b84b0c4e4f78b5e28199fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:33:93:bd:c0:9e:fb:0f:53:da:d6:47:ab:
a9:25:53:a5:8e:df:52:b4:f7:5d:13:b0:af:89:0c:
eb:3f:0e:81:3d:0f:5c:45:58:e3:c9:14:eb:22:9b:
69:0c:d0:a3:bf:2f:18:5b:4e:b9:1f:c4:91:8a:ed:
50:4f:a7:32:b7:ff:a7:47:e6:bf:45:58:56:90:36:
62:24:8c:5d:bb:a8:eb:f1:99:50:f1:b3:57:67:80:
1b:1e:7e:e8:c1:16:ba:b1:59:2e:c2:e1:6b:be:ed:
6f:82:cb:c3:1d:3d:cc:db:72:ab:3f:0e:37:0a:cc:
d9:fc:22:96:f5:c5:c6:5f:b9:56:20:51:26:67:80:
04:d1:50:64:f6:4f:2a:55:65:ff:91:5d:8c:39:e3:
66:2d:14:ed:a5:41:7b:5c:29:77:f7:c6:bb:03:6d:
ca:86:7a:2b:98:ba:b9:25:56:f5:a9:1e:00:77:40:
26:0b:1b:4e:f6:fb:ec:ac:1f:af:59:4d:74:cb:c1:
c1:75:86:2c:73:24:ad:4e:04:d7:e5:9e:18:b2:40:
9b:70:36:a6:22:2b:8b:bc:3b:55:d5:9f:b5:1b:88:
e7:cb:48:de:33:f0:55:0f:97:ec:8f:01:23:5a:55:
db:4f:ab:12:63:b5:ea:a6:7a:a1:40:ea:f0:1a:79:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:77:16:29:E2:E4:7A:63:B8:4B:0C:4E:4F:78:B5:E2:81:99:FA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0zt3Fini5HpjuEsMTk94teKBmfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.41.0/24
193.124.205.0/24
194.58.43.0/24
194.87.64.0/24
195.133.12.0/24
195.133.94.0/24
212.192.7.0/24
212.192.30.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c4:f1:42:0e:2c:f8:ee:36:50:9d:a4:a7:de:44:3c:30:69:
81:c2:c2:18:98:f1:f3:e7:90:64:a5:54:c5:30:04:50:c9:c9:
0f:f9:89:07:0d:05:03:f5:8b:3a:c6:93:1b:05:11:bc:a4:66:
6c:db:8b:bf:7a:f5:cb:95:1f:15:84:d1:51:e4:d5:69:a3:ba:
27:0c:81:eb:5c:56:1d:0d:2e:3e:ae:70:58:18:43:62:22:1a:
cf:36:48:71:1b:71:0a:a4:fd:55:f9:aa:c5:83:b1:73:57:46:
9c:c3:35:aa:65:72:f6:f1:ff:7e:56:ed:7d:ed:b5:46:f7:56:
fa:d8:2c:0c:f4:cb:0e:25:d0:3e:5b:52:9d:12:3f:8f:b1:a3:
2a:71:9a:ec:50:5d:0f:fb:98:2e:0c:3e:1d:ba:d0:7b:8a:20:
8d:25:54:d0:bb:13:f3:30:a0:96:46:07:e4:4c:43:62:02:c0:
cc:de:7f:83:6a:28:91:45:9a:f3:d9:60:40:cb:28:7d:2f:40:
01:25:3b:eb:88:df:99:4b:c4:65:36:2f:92:ca:e7:05:66:00:
8f:7c:a2:cf:1b:d8:87:6b:6e:8e:97:54:08:02:59:2b:ec:56:
67:ca:43:7b:fb:38:1f:b1:2b:37:5b:46:ae:5a:a8:0a:ca:c7:
99:e9:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:48 2023 by rpki-client on console-ams.rpki-client.org