Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1wv34OqDhDSLfnbc4ZHyGdeyg0k.roa
File: 1wv34OqDhDSLfnbc4ZHyGdeyg0k.roa (raw, json)
Hash identifier: DNDkuKFK85/6Elj2+4QpdjVtJAMn6FR0+QKUERv19YA=
Subject key identifier: D7:0B:F7:E0:EA:83:84:34:8B:7E:76:DC:E1:91:F2:19:D7:B2:83:49
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BF6549CC9F0B0BA8485DC88756A457538
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1wv34OqDhDSLfnbc4ZHyGdeyg0k.roa
Signing time: Wed 22 Nov 2023 09:20:22 +0000
ROA not before: Wed 22 Nov 2023 09:20:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
192.124.178.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:54:9c:c9:f0:b0:ba:84:85:dc:88:75:6a:45:75:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 22 09:20:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d70bf7e0ea8384348b7e76dce191f219d7b28349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0e:b0:a0:ae:95:66:c2:89:89:ae:92:27:b8:
22:49:05:60:e6:27:b0:d1:48:df:45:59:67:64:05:
54:df:42:ae:6e:c6:81:e2:de:d8:48:06:f3:b9:44:
57:84:ff:08:27:db:ac:03:0e:6e:42:52:ab:d8:dc:
4a:3f:c7:3d:eb:b3:c1:56:0a:27:f8:86:81:1f:98:
f3:f6:8b:ce:57:5d:c4:33:71:b0:6b:1a:a2:bb:76:
46:cd:5d:09:af:d1:d9:b2:85:33:5d:8e:f1:87:46:
03:64:d3:60:a8:d1:99:32:28:9c:99:1e:9d:04:f0:
a5:7c:e0:4c:22:ef:1b:44:d9:ee:2b:ff:c2:fa:15:
d5:9b:3e:eb:62:27:d2:8a:36:19:9b:5e:3d:35:67:
c0:dc:e5:0d:55:a3:8c:d1:ed:18:2e:2c:7b:ef:a5:
38:50:ee:9f:79:99:4f:c0:4f:85:98:ef:41:42:d4:
b0:ae:22:c8:ff:fb:7d:29:4b:aa:10:83:8d:28:7c:
e8:91:4f:64:75:26:9f:15:48:c9:05:5a:89:20:fd:
ac:64:fd:7b:df:b3:e6:09:2f:70:bc:ba:d8:ce:31:
d0:32:b4:6d:6f:3c:fe:8c:e8:b8:c9:c2:6e:00:f3:
04:3c:aa:a4:d3:60:9e:34:1a:1f:98:65:65:f6:a9:
74:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0B:F7:E0:EA:83:84:34:8B:7E:76:DC:E1:91:F2:19:D7:B2:83:49
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1wv34OqDhDSLfnbc4ZHyGdeyg0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.168.0/24
194.87.179.0/24
194.87.200.0/24
195.58.35.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:09:4b:d7:73:32:49:30:ca:55:e4:b7:2b:10:33:63:03:5b:
48:09:b3:f4:82:dd:3b:37:8e:02:7c:ad:99:a9:80:53:26:60:
1b:49:a7:b8:57:54:20:b7:13:65:97:5d:88:38:0f:54:75:6f:
bc:e6:00:39:c8:c8:bb:60:c8:8b:7e:78:c5:d7:69:a6:ec:e3:
d1:61:cc:9b:14:e2:71:31:de:c4:15:a1:b4:3e:8d:58:2a:9f:
34:56:e0:a4:b8:64:24:4c:52:58:4a:66:c4:7c:3b:0e:6d:e2:
0b:0e:cd:3e:4b:e9:34:76:a4:10:0b:2f:82:c4:34:eb:62:f0:
80:f9:b0:37:84:75:26:15:62:e4:50:bb:e7:86:d2:c9:fb:83:
f6:4a:05:0f:dd:fe:da:d1:34:fe:03:79:54:23:04:b0:d1:41:
c6:93:15:a2:76:c4:c3:76:ac:06:5c:91:49:03:2c:4c:2c:72:
7a:7a:b7:28:f4:49:d3:48:cf:58:f3:a7:26:cf:d7:66:f7:e0:
47:c3:e3:09:38:68:fa:b2:08:cc:52:23:f2:73:7a:c2:c5:b2:
2b:42:c9:a4:10:db:3d:db:31:e2:14:42:b4:6d:fc:be:97:5f:
c2:8a:7f:39:98:d3:bf:84:b2:01:70:7b:94:05:20:1b:b8:bf:
71:98:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 04:52:08 2023 by rpki-client on console-fra.rpki-client.org