Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/60Uqq-aR_aLzvI7pbMlkt5RpZtg.roa
File: 60Uqq-aR_aLzvI7pbMlkt5RpZtg.roa (raw, json)
Hash identifier: xT/v869k6paZCsSA04wIhuq44UDUHV5jy6kqDp37sI4=
Subject key identifier: EB:45:2A:AB:E6:91:FD:A2:F3:BC:8E:E9:6C:C9:64:B7:94:69:66:D8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AA6D4ACF01D4EBAFDA8BA8E109D04A595
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/60Uqq-aR_aLzvI7pbMlkt5RpZtg.roa
Signing time: Mon 18 Sep 2023 05:47:50 +0000
ROA not before: Mon 18 Sep 2023 05:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 193.124.4.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.252.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
212.192.253.0/24 maxlen: 24
212.192.254.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a6:d4:ac:f0:1d:4e:ba:fd:a8:ba:8e:10:9d:04:a5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 18 05:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb452aabe691fda2f3bc8ee96cc964b7946966d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:30:50:5a:d7:d4:15:15:2a:8f:31:a4:7c:
b9:54:6d:cf:28:1e:1b:48:bb:ba:80:ab:bf:ec:61:
1f:cc:57:5c:6a:4d:a3:b3:51:07:a0:b7:f4:11:3e:
34:7a:df:82:93:e0:c1:34:f9:e6:b6:40:08:f4:cf:
96:57:bf:c5:af:d5:0e:f1:c7:e3:2c:59:16:80:f4:
ff:e3:c1:28:04:90:92:50:c0:dc:c8:88:25:7a:c3:
73:6d:7a:e6:52:96:d6:11:57:be:6b:9b:2d:ac:f0:
e9:c3:f5:50:7c:23:62:d5:70:5e:3f:be:72:9e:f5:
67:79:15:f6:c0:d2:2e:34:15:80:23:c5:94:87:8c:
5e:11:cd:7b:c7:49:d8:ec:dd:44:3b:da:d4:b5:fd:
98:82:d0:2d:90:b4:d1:6b:52:f8:91:c4:11:ed:95:
4c:59:50:8c:39:5e:a9:5f:47:31:71:85:01:8c:20:
44:c8:f4:04:2f:fc:b4:73:da:68:13:01:2d:bd:c3:
8a:8f:f9:f5:c8:f0:82:ca:3f:5d:ae:0b:1d:45:6b:
a4:20:70:60:4b:4d:fd:5d:42:4b:a7:ee:d6:69:6e:
07:ad:97:30:54:82:83:63:0c:d7:aa:50:93:a7:9f:
39:a7:32:d0:1c:21:70:f0:9d:3d:66:0a:0a:a5:0f:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:45:2A:AB:E6:91:FD:A2:F3:BC:8E:E9:6C:C9:64:B7:94:69:66:D8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/60Uqq-aR_aLzvI7pbMlkt5RpZtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.4.0/23
194.87.30.0/24
194.87.44.0/24
194.87.142.0/23
194.87.221.0/24
195.133.94.0/24
212.192.8.0/24
212.192.212.0/24
212.192.215.0/24
212.192.248.0/24
212.192.252.0-212.192.254.255
Signature Algorithm: sha256WithRSAEncryption
6b:8e:94:ca:0e:08:a8:b2:d9:f3:06:ef:7b:a4:d2:74:79:13:
d7:78:9f:2f:2f:4b:71:2d:3c:13:65:c2:43:a5:35:9d:44:58:
08:b9:c4:2b:90:7f:99:b2:6e:41:43:50:26:fb:87:cb:82:e1:
b4:6f:a2:de:d3:28:9e:60:eb:4d:d0:bb:9d:8a:c8:cc:6e:cc:
d1:f4:fa:69:5a:ae:a4:ce:38:13:48:a5:3c:22:55:d3:6b:34:
91:07:58:03:60:3a:40:ef:f6:2a:99:aa:1e:70:cd:94:a2:29:
df:8e:06:a6:60:9a:c0:26:6b:2a:fb:81:90:00:8f:9d:6e:fd:
45:a5:90:81:0a:02:a7:ac:25:46:60:49:51:ad:97:d8:9d:01:
05:cf:76:69:c5:eb:93:42:a4:74:b6:47:e8:bf:cd:c9:4b:79:
0d:b7:a8:dd:3e:ee:1b:92:6f:66:5c:40:e0:e4:c1:e8:6d:6a:
25:a2:a2:3d:c4:4c:14:29:a0:76:43:c9:cf:df:4f:4a:d2:f5:
32:50:e9:dd:e6:e6:3a:bb:24:8b:30:9d:81:dd:69:62:cb:14:
9c:b5:98:71:a3:c9:58:a1:1e:b6:e1:50:a6:89:0c:4d:1d:9c:
cd:7c:20:56:d5:d2:4d:4f:9b:c6:54:51:de:e4:41:8a:77:f0:
a5:f7:8b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 09:06:47 2023 by rpki-client on console-fra.rpki-client.org