Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1vTIkYe4vPMYi3y0BYSkFJFtnVo.roa
File: 1vTIkYe4vPMYi3y0BYSkFJFtnVo.roa (raw, json)
Hash identifier: bdP6tYi8nfz8Q1hfxxp8hzCY/aJ6+wPIO40fVC4lwlI=
Subject key identifier: D6:F4:C8:91:87:B8:BC:F3:18:8B:7C:B4:05:84:A4:14:91:6D:9D:5A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BCD392A579C0C0856EF8D0B9939212435
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1vTIkYe4vPMYi3y0BYSkFJFtnVo.roa
Signing time: Tue 14 Nov 2023 09:45:57 +0000
ROA not before: Tue 14 Nov 2023 09:45:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
192.124.178.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:39:2a:57:9c:0c:08:56:ef:8d:0b:99:39:21:24:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 14 09:45:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6f4c89187b8bcf3188b7cb40584a414916d9d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:48:6d:f6:1d:c2:fc:37:a5:e0:06:31:c2:7c:
c7:f9:62:fd:8f:f3:ef:a5:b4:7a:44:85:c5:49:71:
d9:95:51:e1:6f:2d:b9:5e:e9:66:4e:4e:71:8f:bd:
8b:99:c6:79:36:26:6a:d9:32:01:7b:6e:af:8f:67:
9e:87:10:3c:3a:45:a0:ef:86:94:29:43:f8:c6:00:
99:41:97:ad:26:78:5c:3b:bb:92:99:e6:ef:0c:2e:
dd:6e:2b:4d:5a:c2:72:9b:16:6d:37:4b:fa:91:15:
fb:42:5f:dc:9b:ba:35:dc:7b:83:da:c5:a3:61:5a:
29:36:57:0b:5e:0d:0c:43:d4:81:99:e4:b3:bc:86:
ae:10:a0:3d:28:29:58:64:a7:93:6e:eb:3e:40:91:
b6:e8:0f:30:8a:fc:d1:80:c0:c1:28:e6:9a:fa:00:
52:e1:cd:eb:4b:51:8c:85:7c:5b:99:49:3c:51:64:
a0:8d:34:bd:65:f4:f2:94:10:e7:a3:5c:15:eb:10:
0d:86:44:e3:3a:70:34:e2:57:32:cd:f4:d9:4b:41:
12:5a:ed:63:bb:eb:6f:51:5b:0f:a5:7b:39:4f:53:
40:dc:e3:ad:26:b0:38:2f:f3:1f:ae:9d:35:7b:a3:
d3:e2:96:86:4f:86:93:bf:a1:50:a6:7c:e6:a4:4a:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F4:C8:91:87:B8:BC:F3:18:8B:7C:B4:05:84:A4:14:91:6D:9D:5A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1vTIkYe4vPMYi3y0BYSkFJFtnVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.168.0/24
194.87.179.0/24
194.87.200.0/24
195.58.35.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.40.0/23
195.133.84.0/23
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
31:cc:f3:28:94:82:8a:be:79:e0:0c:dd:bb:08:3d:e8:fa:e0:
3c:90:09:05:86:ff:d2:35:29:8f:e2:73:34:d3:25:4a:01:af:
46:9c:8f:59:0c:e5:6e:e3:07:dc:e1:7d:01:01:32:ec:8d:92:
c8:70:39:3b:f2:df:69:21:c5:dc:78:11:67:32:db:63:f7:7f:
66:3c:35:27:87:e8:ca:d1:89:38:a3:74:63:cb:94:31:5a:e8:
b5:13:e1:14:63:cc:6a:10:dd:3a:36:94:7f:2c:77:1a:ab:6c:
95:fc:aa:c8:59:32:cf:38:23:0b:df:af:91:61:e3:67:86:57:
9e:b8:6e:fa:41:af:27:26:e6:36:7b:9c:5b:54:02:13:ce:b0:
15:a8:c3:27:ba:e2:24:37:e7:b9:76:a8:d8:a9:28:8a:44:74:
d2:fc:34:8b:93:8a:4b:01:1d:22:e5:12:19:95:7b:7c:ac:39:
7d:32:93:42:2f:8c:64:38:97:1a:53:6d:0b:13:e8:7c:0c:ee:
b1:5e:6d:66:37:a7:ef:0b:70:68:fd:d9:5f:ef:30:a7:1b:02:
53:01:39:48:18:2e:ab:4c:08:3c:3d:1e:b7:b4:f2:2d:33:d1:
6a:5f:6d:a3:0c:aa:03:6d:a5:dc:be:92:65:8b:05:d6:d3:26:
4a:4e:ae:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 05:04:59 2023 by rpki-client on console-ams.rpki-client.org