Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4Z2Pu6tEL8WGCIFj2ouVLTk7vOw.roa
File: 4Z2Pu6tEL8WGCIFj2ouVLTk7vOw.roa (raw, json)
Hash identifier: lplBB11tPvDgRS8Heg23awribCBH9OthYogGd4L6GJM=
Subject key identifier: E1:9D:8F:BB:AB:44:2F:C5:86:08:81:63:DA:8B:95:2D:39:3B:BC:EC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188200FD98EC1FC37E7392D9A8001C98F36
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4Z2Pu6tEL8WGCIFj2ouVLTk7vOw.roa
Signing time: Mon 15 May 2023 15:38:09 +0000
ROA not before: Mon 15 May 2023 15:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26383
IP address blocks: 193.124.22.0/24 maxlen: 24
62.76.234.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
194.87.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:0f:d9:8e:c1:fc:37:e7:39:2d:9a:80:01:c9:8f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 15 15:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e19d8fbbab442fc586088163da8b952d393bbcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fa:1f:58:fa:c5:05:36:5a:5f:e7:7a:82:d7:
fd:e8:e6:54:22:9f:d9:35:05:3f:7d:33:e4:6b:a4:
87:62:97:3b:20:f5:8e:c3:f8:0e:3c:f7:23:63:e2:
95:0a:29:fc:f7:28:e8:4d:fc:34:56:bd:3d:9d:80:
57:43:78:58:80:b9:5a:53:41:98:1d:de:d0:64:30:
da:82:57:f4:44:3d:ea:ce:f2:17:8a:cd:69:19:06:
1c:85:cd:05:e8:23:e1:f2:0c:62:19:a7:65:7c:fb:
93:89:63:4e:ca:b3:5b:5d:a0:77:73:80:d2:35:e4:
65:84:90:db:bb:9b:c3:01:19:e7:32:e0:d0:56:a1:
e2:f1:d4:4c:dc:e1:7b:bd:01:4e:e8:3c:17:42:c1:
f7:f8:0e:01:11:81:97:04:cc:36:73:e3:dc:b2:c3:
d8:b5:fc:c8:32:09:79:08:32:22:ac:16:4b:a4:f9:
86:c2:fc:e4:5b:84:1b:ef:60:17:42:03:ae:91:a5:
ef:b0:b4:a7:61:27:c5:3f:9f:3e:de:3e:79:0b:82:
8d:79:95:b1:d8:f8:7f:f1:f1:ba:3d:97:d7:a0:34:
9b:dd:7e:45:67:3c:7e:d0:25:90:8d:77:17:f3:c4:
02:0f:d0:25:d4:b9:5a:bf:b7:ea:05:b8:6e:f9:9f:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9D:8F:BB:AB:44:2F:C5:86:08:81:63:DA:8B:95:2D:39:3B:BC:EC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4Z2Pu6tEL8WGCIFj2ouVLTk7vOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.234.0/24
185.72.8.0/24
193.124.22.0/24
194.58.34.0/24
194.58.68.0/24
194.87.47.0/24
194.87.189.0/24
212.192.12.0/24
212.192.15.0/24
212.193.2.0/24
Signature Algorithm: sha256WithRSAEncryption
06:6f:51:f5:de:1d:63:f8:80:fb:d1:bc:bc:b0:20:8f:4c:08:
c1:d5:c4:78:60:cf:bb:f3:19:6b:09:af:93:d1:ae:cf:c1:86:
16:3c:52:a7:84:7d:9d:8a:c0:5f:be:e1:d7:1a:41:00:e6:c0:
8d:5d:d9:21:2f:c2:d8:14:d1:85:74:ae:f8:c8:80:41:e3:f9:
06:14:c0:c5:c4:9a:48:2f:8c:5b:95:08:9b:15:46:c2:f3:0b:
7e:83:a0:bc:4e:a2:ed:f5:1f:aa:2a:43:be:ee:26:67:b2:cd:
4d:65:04:b2:d6:bd:97:65:4a:b3:52:b8:ae:b6:fd:8c:5c:10:
8d:2c:0f:13:15:15:98:27:f0:f6:65:63:93:6a:5e:13:0e:d6:
86:3c:7f:83:2f:41:34:5b:d7:18:95:b3:05:a2:1d:11:fd:56:
63:a2:9a:83:a6:f1:58:e0:c3:32:52:fe:a8:20:38:69:d4:7d:
8c:2c:21:76:e3:d8:c8:4c:a2:af:1f:2b:7a:cd:a7:9a:e4:22:
ef:ee:00:b8:76:c3:32:d8:62:01:a8:f7:bb:0d:eb:57:32:2f:
4c:6b:5a:36:1d:c4:86:85:b4:49:61:01:99:80:33:eb:71:41:
d0:63:aa:20:4e:c4:ed:b7:c1:fd:b8:32:10:b8:02:44:23:6b:
6d:8d:6b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org