Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4VUOLbUNVdk0AxIeHsehL-dERKU.roa
File: 4VUOLbUNVdk0AxIeHsehL-dERKU.roa (raw, json)
Hash identifier: KMKeF+1c1QF8F7xwYSVN232BfnIp1K1zDXLOA/jVW8Q=
Subject key identifier: E1:55:0E:2D:B5:0D:55:D9:34:03:12:1E:1E:C7:A1:2F:E7:44:44:A5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189747FEA4C22D8FB209FE639ABF78F986B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4VUOLbUNVdk0AxIeHsehL-dERKU.roa
Signing time: Thu 20 Jul 2023 18:11:27 +0000
ROA not before: Thu 20 Jul 2023 18:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 62.76.230.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:74:7f:ea:4c:22:d8:fb:20:9f:e6:39:ab:f7:8f:98:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 20 18:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1550e2db50d55d93403121e1ec7a12fe74444a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:e3:28:bd:f7:49:15:d1:f7:35:90:d6:1c:
61:85:e8:6a:12:e4:61:2e:1c:33:fa:86:f3:ab:81:
94:5a:f0:8e:69:90:5a:d4:02:1f:9a:ef:c7:61:73:
df:17:eb:c0:57:be:c6:94:c7:45:eb:bf:74:bc:4b:
03:4e:e0:48:7b:64:42:1b:df:a4:db:40:22:3f:b9:
8f:01:c1:5b:a3:bd:e6:60:55:64:43:7d:3a:75:4e:
c6:b7:a9:4f:e1:fd:73:09:08:ef:1c:34:f4:80:71:
7d:70:fc:77:5d:0d:dd:02:34:71:4f:b7:f0:2d:d6:
3b:ea:8f:65:7e:fc:05:e6:41:e3:56:ba:5c:de:f6:
1c:d5:45:27:0e:6c:f0:14:38:17:64:ff:b1:01:13:
64:30:b5:c2:6d:12:c8:87:bf:20:57:7e:9f:b4:dc:
55:29:76:40:29:8a:cd:69:a6:d0:2d:64:3b:18:b8:
a9:26:a3:0d:70:57:46:e6:5d:fe:03:49:1c:11:68:
4c:48:dd:ce:e4:3f:e9:b9:33:24:dd:ac:3b:9b:4f:
be:a2:53:6d:3e:c5:5c:6f:67:f9:24:e7:73:3e:fc:
5c:e1:76:0b:60:31:66:e0:b8:8b:6d:a4:89:a6:76:
7f:d5:cf:3c:3b:25:b7:83:d1:44:79:df:65:c8:6d:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:0E:2D:B5:0D:55:D9:34:03:12:1E:1E:C7:A1:2F:E7:44:44:A5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4VUOLbUNVdk0AxIeHsehL-dERKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/23
193.124.204.0/24
194.87.43.0/24
194.87.78.0/24
194.135.24.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f2:0c:2b:f8:55:6a:7b:2c:06:c3:d9:f8:19:03:0f:fa:46:
27:bd:87:82:e2:1f:74:02:8e:d6:de:2b:d5:8f:df:49:b8:e6:
66:14:f2:a9:f3:3b:86:f9:69:f7:95:63:5d:a5:ea:f2:19:d1:
a6:46:26:64:05:2b:d1:dd:1f:5a:13:28:80:b8:c1:5c:13:7b:
00:3a:4a:af:9b:0e:77:27:1c:69:43:d3:15:0d:f7:ad:8b:ed:
e0:ee:54:2e:62:1c:c5:55:cf:4a:cf:2b:20:1d:3c:cb:b1:ea:
03:0b:51:71:27:0b:0f:35:11:16:b5:49:19:57:9a:b5:43:e7:
76:da:4e:d1:71:bd:f8:e7:78:e8:f1:c6:0f:83:ed:19:19:57:
07:11:92:e1:93:43:94:bd:36:60:f5:07:98:4d:e0:58:6a:43:
15:bb:56:46:5b:d4:a3:03:6e:e9:3c:f0:c2:46:1f:61:6e:a1:
91:7d:19:f5:c4:72:02:82:33:a6:35:f5:48:31:cf:27:9b:76:
41:51:fd:92:86:72:5e:af:97:0d:12:86:61:11:4a:18:62:c5:
a7:48:b9:be:6e:ad:75:ab:26:ee:9f:dc:b4:c9:bd:af:37:39:
5c:bf:8e:33:19:81:aa:db:03:64:5a:81:70:18:7c:6a:cf:eb:
c4:98:d8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 18:57:51 2023 by rpki-client on console-ams.rpki-client.org