Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4pOBvO_bbeV5Z4hD8uYTZAQuxPk.roa
File: 4pOBvO_bbeV5Z4hD8uYTZAQuxPk.roa (raw, json)
Hash identifier: 6N8mx3BTnoIVki/JbB11SSU+QGdy+ttJZf8bBmppT9A=
Subject key identifier: E2:93:81:BC:EF:DB:6D:E5:79:67:88:43:F2:E6:13:64:04:2E:C4:F9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C398F31B5A7C1A957914DF93E442AB541
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4pOBvO_bbeV5Z4hD8uYTZAQuxPk.roa
Signing time: Tue 05 Dec 2023 10:38:54 +0000
ROA not before: Tue 05 Dec 2023 10:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.229.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:8f:31:b5:a7:c1:a9:57:91:4d:f9:3e:44:2a:b5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 5 10:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e29381bcefdb6de579678843f2e61364042ec4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:01:0f:5a:0e:7a:fe:1c:ed:36:9a:00:d1:9d:
20:fc:b9:01:79:75:3b:11:1b:c4:8b:70:ff:e1:9f:
7c:3b:fb:1b:80:e3:d0:33:48:aa:a5:d7:09:8d:73:
2f:d0:72:19:fb:1b:6e:88:af:6a:0a:2c:b1:75:69:
c7:35:8a:9c:42:05:3e:3e:72:37:c1:28:5f:fe:78:
e0:3a:dd:7a:a0:94:74:4f:37:f7:79:d5:9e:e6:d1:
2f:40:59:6b:32:be:c9:c0:ba:c5:bd:59:4e:01:4f:
97:61:5a:9c:a6:19:f1:7e:da:67:5c:ac:f2:a9:83:
39:3d:f6:e0:04:d8:78:ab:68:4b:bd:ef:ff:f5:7f:
6f:9a:84:63:ba:f3:fd:c3:cb:e3:7d:ec:4c:64:ff:
60:56:42:dd:bb:4b:1e:d4:be:f2:9a:17:21:56:a8:
77:e4:86:12:66:76:b4:17:a6:9a:ad:ff:c1:19:30:
31:55:85:99:b4:6a:8c:82:d7:11:b9:b4:cd:39:ae:
a1:e1:10:f2:c9:27:9e:0e:f7:5d:17:15:da:db:80:
fc:83:68:92:57:3f:36:6d:f0:17:ae:fc:62:39:c8:
4a:ce:9d:a4:79:2a:1c:d6:25:45:53:2c:19:1b:fb:
45:d4:3a:ef:6d:1e:c5:98:47:16:ff:bf:7e:6c:c0:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:93:81:BC:EF:DB:6D:E5:79:67:88:43:F2:E6:13:64:04:2E:C4:F9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4pOBvO_bbeV5Z4hD8uYTZAQuxPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.179.0/24
194.87.200.0/24
194.87.229.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.11.0/24
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:07:22:1a:6a:8c:da:9e:15:46:10:2b:5c:a5:b2:44:d7:c9:
af:10:b9:4b:ca:ea:c7:87:62:96:62:16:c2:19:c7:4e:49:a7:
f6:e0:95:46:f7:ae:76:89:7c:4f:e9:f3:ae:e8:f6:fb:ca:32:
54:a9:7d:da:7f:1b:ba:63:1e:12:da:51:c1:75:33:dc:a2:cc:
f2:05:72:11:05:0c:e9:ee:9e:b2:c9:64:3b:48:09:73:78:89:
4e:70:1a:88:f4:6d:04:94:89:14:4f:f8:4e:32:dc:59:f2:a2:
24:f9:b5:25:db:32:d7:b5:e0:36:a8:91:98:a0:ef:de:42:43:
08:78:c9:43:0e:59:63:d4:0d:03:98:e0:e0:b0:bc:f2:a1:99:
6d:29:45:53:19:c7:60:8f:18:a2:d7:a1:cd:79:ac:b4:46:54:
7b:59:6b:ea:76:4f:07:b3:c3:ef:32:b8:2b:7d:0f:f0:23:70:
b5:88:0a:9f:97:2a:5f:f2:4d:21:09:dc:93:c5:aa:cd:a1:56:
a7:c6:b6:01:1d:60:ba:c1:cf:e2:80:38:c3:33:cc:e9:2d:1c:
f0:af:11:0d:be:d7:bb:13:e7:36:35:52:f5:af:76:80:d1:33:
14:86:fe:e5:a7:94:69:e5:d8:2c:9d:5e:09:39:a7:55:4a:45:
e9:10:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 06:33:13 2023 by rpki-client on console-ams.rpki-client.org