Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5bLharIOYyVR-ejaI3R22TqkAW4.roa
File: 5bLharIOYyVR-ejaI3R22TqkAW4.roa (raw, json)
Hash identifier: 3tPCVJ/kIh5rQSobvBQU+N+KVYeVIp93XMc3rPML4XU=
Subject key identifier: E5:B2:E1:6A:B2:0E:63:25:51:F9:E8:DA:23:74:76:D9:3A:A4:01:6E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185958F6A3AB277AA6CF96B2BABADDC49A1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5bLharIOYyVR-ejaI3R22TqkAW4.roa
Signing time: Mon 09 Jan 2023 08:04:42 +0000
ROA not before: Mon 09 Jan 2023 08:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.4.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.38.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:8f:6a:3a:b2:77:aa:6c:f9:6b:2b:ab:ad:dc:49:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 9 08:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5b2e16ab20e632551f9e8da237476d93aa4016e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:da:d8:9a:3c:d9:66:00:db:35:d1:19:f0:
33:71:ad:1f:6e:e3:a0:04:53:17:0a:f0:fa:a9:8e:
0c:11:d2:8e:60:8a:ea:a8:c8:c1:00:4d:7a:22:95:
d0:ec:40:3f:81:23:99:c1:15:f4:67:5d:0b:aa:05:
72:78:03:c5:4e:0a:a9:ca:a1:92:d0:5c:1d:4e:ba:
97:c2:10:b1:60:41:c5:65:e2:da:4e:88:bd:25:6f:
2d:5b:b6:9d:11:38:f5:2b:84:6a:0b:90:ea:7d:63:
c8:42:ee:1d:16:6a:a2:c0:e3:94:26:6b:e9:d0:34:
0c:cf:b6:3f:ad:c2:77:43:3f:12:cd:21:71:f8:90:
b4:e6:d3:d2:41:46:a3:ab:7e:fb:52:22:7a:9e:2a:
61:72:4d:99:7e:89:9f:fb:ce:09:97:ed:9e:17:16:
a4:99:c2:c2:ad:f4:31:63:e4:52:39:e1:aa:4c:12:
6a:f3:d8:7c:3c:e5:72:75:f0:7c:ce:3b:36:db:00:
90:15:4a:dc:12:c0:e2:d3:22:40:54:1c:fe:e4:8c:
e9:20:2f:3f:75:4e:f0:93:de:30:59:f2:c2:ab:27:
e2:bc:73:94:51:d3:50:39:eb:9a:82:9b:67:5f:e6:
f3:08:4e:e2:bc:7b:1b:dc:96:6a:52:b1:bd:cc:d7:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B2:E1:6A:B2:0E:63:25:51:F9:E8:DA:23:74:76:D9:3A:A4:01:6E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5bLharIOYyVR-ejaI3R22TqkAW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.3.0-193.124.4.255
193.124.9.0/24
193.124.44.0/24
194.58.58.0/24
194.87.1.0/24
194.87.7.0/24
194.87.27.0/24
194.87.38.0/24
194.87.42.0/24
194.87.73.0/24
194.87.114.0/23
194.87.130.0/23
194.87.166.0/24
194.87.168.0/24
194.87.178.0/23
194.87.182.0/24
194.87.187.0/24
194.87.202.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.56.0/24
195.133.0.0/24
195.133.30.0/24
195.133.35.0/24
195.133.195.0/24
212.192.10.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
97:51:73:98:b0:23:0a:a3:8c:6d:ac:08:49:9a:f6:7c:46:33:
0a:21:0e:3e:3a:d6:84:63:11:1d:d0:4e:2b:b1:70:06:92:fc:
88:53:06:c5:45:1e:92:4f:18:b6:04:4b:62:9c:51:0c:bc:65:
1d:84:70:ee:c8:71:f6:b6:cc:a3:31:5c:6a:b2:2f:e5:4a:52:
cd:7c:43:44:10:20:7a:ca:7f:28:83:4a:8f:c2:4c:50:eb:e8:
4d:1a:49:e2:9d:6a:5a:16:70:34:2b:b0:23:b2:13:8a:8f:8d:
75:58:d3:4f:1f:c6:6e:76:8e:db:6d:32:c3:5a:5a:db:1c:94:
ea:8a:33:7d:54:c6:b0:f9:cf:33:50:91:ba:a7:73:0c:56:3c:
03:cc:5c:d0:76:c5:d6:61:a9:19:c5:0a:a4:f9:df:11:d1:48:
57:73:56:de:7c:ed:f3:99:1b:26:37:8f:7f:82:40:13:39:e1:
fc:12:d0:ba:68:97:64:36:d1:51:90:79:dd:e0:10:6f:a0:6e:
57:5c:3a:44:42:63:5e:0f:01:8c:bc:16:a3:97:5b:d9:1c:3c:
3b:2d:cb:9f:f5:2f:50:f0:ce:b8:24:fe:a7:00:a3:9a:e1:c4:
55:25:02:26:c4:8e:c9:8f:5f:d0:14:76:1f:64:1c:e0:d6:f5:
47:c9:00:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org