Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/77856lq4sjR2Q03z1XOoxnEusX0.roa
File: 77856lq4sjR2Q03z1XOoxnEusX0.roa (raw, json)
Hash identifier: Kc/n3HIQo3pxVixhlUhSGZDI2Mn8FWn3qkwWw0SpW3c=
Subject key identifier: EF:BF:39:EA:5A:B8:B2:34:76:43:4D:F3:D5:73:A8:C6:71:2E:B1:7D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01877C845BA2DC9EC43E03F5CD07FFDB4CAB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/77856lq4sjR2Q03z1XOoxnEusX0.roa
Signing time: Thu 13 Apr 2023 21:27:41 +0000
ROA not before: Thu 13 Apr 2023 21:27:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.27.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.165.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
194.87.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7c:84:5b:a2:dc:9e:c4:3e:03:f5:cd:07:ff:db:4c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 13 21:27:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efbf39ea5ab8b23476434df3d573a8c6712eb17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:f1:fa:fb:97:50:48:5c:a0:99:5e:fc:18:
11:f7:06:4e:ea:ca:f1:fe:eb:5a:2c:9b:82:72:32:
1a:47:10:82:dc:f3:24:57:bc:29:c2:3c:07:7a:50:
91:8f:e2:96:c7:b3:42:56:46:84:ef:0f:5b:e6:28:
93:0e:4f:11:83:dd:d3:17:36:60:d8:e2:57:5b:a1:
f8:67:7a:b5:ab:38:97:25:71:ce:93:90:e4:8f:7c:
12:82:88:aa:39:f7:a5:f4:de:e7:0a:32:66:5a:d8:
eb:22:ea:06:11:60:0e:64:ed:95:c7:e2:98:66:ac:
f2:21:de:72:a3:10:ff:1b:f9:e0:44:d6:9f:24:d9:
bb:23:f0:7e:d3:4a:54:0b:71:56:a8:61:c6:c1:b8:
4b:0f:39:96:4e:b9:ba:10:e0:40:ea:d4:b4:94:a6:
0b:00:3a:52:20:93:74:d2:d9:91:93:a9:f0:bc:98:
05:04:dc:15:8f:ee:cf:f8:de:e1:23:08:31:3d:ee:
c8:ed:fa:2d:b4:50:2d:42:2e:a5:e6:92:23:5d:dd:
c2:13:a2:71:a3:ab:fa:f6:ca:f6:a4:63:bf:4c:50:
83:4f:27:e4:d7:51:7f:67:b7:8c:d4:26:4c:a8:59:
22:76:06:04:ee:4f:58:d9:bd:95:ab:16:f6:fe:fa:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BF:39:EA:5A:B8:B2:34:76:43:4D:F3:D5:73:A8:C6:71:2E:B1:7D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/77856lq4sjR2Q03z1XOoxnEusX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
194.58.45.0-194.58.47.255
194.87.27.0/24
194.87.82.0/24
194.87.118.0/24
194.87.136.0/24
194.87.165.0/24
194.87.171.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
195.58.50.0/24
195.58.56.0/21
195.133.55.0/24
195.133.195.0/24
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
90:21:e7:02:0e:6b:f4:b5:c5:8f:21:4c:2b:f3:2f:67:e2:68:
fe:17:b7:2e:be:0b:de:94:87:4e:c8:83:af:93:ac:5e:57:ca:
6a:b4:30:6f:ee:6b:4e:e5:60:a7:3e:df:cb:76:88:bb:9e:36:
be:94:9e:de:5d:7c:14:86:2b:ee:09:20:6f:fa:40:b1:64:2d:
97:60:20:53:97:14:98:eb:0e:11:5b:77:61:4d:3e:8e:2b:df:
19:fa:65:b7:e3:fa:7a:77:e0:4b:3f:62:5d:e3:c7:76:c5:5a:
8e:db:6e:aa:b9:84:fb:e9:3f:ca:01:7e:ee:4a:d6:26:44:b2:
47:58:50:b5:db:6c:c9:53:91:b0:b3:4f:06:6e:09:19:50:d5:
94:1a:49:64:cf:1c:e6:60:c2:be:7a:e8:c0:dd:d8:5d:31:6e:
e1:cc:3f:ae:75:36:cb:36:9b:01:64:c9:ab:df:5d:ef:20:b1:
d0:9c:fb:5b:58:d3:9e:c9:30:7e:66:5b:f4:16:69:00:95:83:
15:e9:da:c8:d2:6e:e6:e1:90:93:fb:db:ee:74:62:02:94:00:
03:b0:61:5a:65:e6:3d:b5:bd:a3:4f:ad:65:60:03:12:7e:f4:
08:f2:11:fc:f4:a9:be:1f:6b:35:d8:b3:f7:56:5e:22:66:b9:
09:ee:86:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-ams.rpki-client.org