Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7BJyQL2-hE41FIi7Deg6UaANMgw.roa
File: 7BJyQL2-hE41FIi7Deg6UaANMgw.roa (raw, json)
Hash identifier: CjjfjOjA8PHh5iZs6rv8unJQQr5Lz5Xj4d27NVTw3yo=
Subject key identifier: EC:12:72:40:BD:BE:84:4E:35:14:88:BB:0D:E8:3A:51:A0:0D:32:0C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186931B9CA5599098DF5D4DAE288104D4DB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7BJyQL2-hE41FIi7Deg6UaANMgw.roa
Signing time: Mon 27 Feb 2023 13:41:45 +0000
ROA not before: Mon 27 Feb 2023 13:41:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
212.192.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Mar 2023 05:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:1b:9c:a5:59:90:98:df:5d:4d:ae:28:81:04:d4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 27 13:41:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec127240bdbe844e351488bb0de83a51a00d320c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fb:87:66:94:9e:59:f3:3c:ee:f7:1a:af:01:
b0:b2:af:60:77:b6:d8:d2:5e:d5:96:e8:88:7b:91:
49:c6:66:22:bd:c0:e4:3d:88:69:35:78:99:95:35:
3e:b9:4c:d3:f6:2d:04:e6:02:f0:99:c4:ab:b3:a8:
ba:83:9c:d3:6a:60:11:67:45:29:f9:64:0d:35:b3:
d8:7d:f3:91:62:7f:8a:71:b7:b2:35:35:b7:d3:16:
e5:16:81:f8:c5:7c:29:ef:da:d4:66:37:47:f3:77:
8d:1a:c8:8d:d8:93:f7:14:8b:b8:6a:3a:9f:69:71:
f7:c4:75:d8:4a:de:c5:06:4f:cb:5c:9a:e0:46:34:
31:1d:d3:1e:c2:c1:f8:2a:84:f1:a1:ff:d2:60:18:
a7:8b:89:3b:49:dc:03:34:f9:3f:c6:a3:81:0f:8a:
b4:20:11:af:55:8c:e8:9f:75:8d:c3:3a:a8:53:f1:
d9:c5:24:e7:44:27:7b:d3:ce:d1:50:7f:8d:2a:71:
1e:fd:72:f7:7d:08:43:c9:43:c2:22:63:c0:c0:a9:
64:74:96:59:4e:03:d7:7c:9a:7f:84:af:38:a5:78:
58:64:dd:24:8f:ba:f0:c8:bc:19:62:77:08:6e:22:
b0:05:74:b3:6e:10:3f:fb:4b:3d:9a:e3:e2:ed:94:
b3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:12:72:40:BD:BE:84:4E:35:14:88:BB:0D:E8:3A:51:A0:0D:32:0C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7BJyQL2-hE41FIi7Deg6UaANMgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.182.0/24
193.124.8.0/24
193.124.133.0/24
193.124.203.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.87.22.0/24
194.87.27.0/24
194.87.82.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.165.0/24
194.87.171.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.55.0/24
195.133.94.0/24
195.133.193.0/24
195.133.195.0/24
212.192.0.0/23
212.192.208.0/23
212.192.211.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
84:78:6f:99:85:d7:80:e9:d5:40:5e:35:b2:e1:0e:cd:d6:b2:
7e:d6:e4:51:61:fc:24:5c:29:27:92:90:25:66:cf:ff:ab:90:
bd:32:b7:00:0e:ec:f3:5b:bb:ca:0b:3a:c4:44:9d:61:3a:ad:
d8:31:92:98:31:72:24:86:a7:05:80:e2:4d:01:0a:da:c8:9c:
88:7c:29:33:e2:d3:c0:b9:ab:09:a3:09:cb:02:8a:96:3e:e9:
a3:76:15:13:ab:7b:fc:33:a5:dd:69:a9:fd:c1:2e:35:a5:f8:
51:10:9e:93:de:aa:67:1c:75:f5:15:e6:66:a9:4c:40:9e:d7:
f4:dd:26:d0:28:5d:78:34:f9:5e:da:42:8f:95:9d:1c:8d:92:
3b:6d:cb:b9:b8:bc:52:cd:57:96:11:e6:a3:25:18:ad:ea:f8:
20:9f:53:71:7a:e2:a1:d3:09:23:0c:1e:ef:ae:0e:e7:2a:2e:
3f:78:86:1b:5c:58:db:ee:b6:32:21:31:ba:3c:3f:14:a3:81:
0b:e0:bb:1a:31:51:21:d1:53:52:d6:b8:20:78:a0:15:56:9f:
95:ef:cc:13:03:ea:7a:63:9c:ea:54:30:69:ed:a3:1a:11:15:
c4:6d:f6:1b:b4:93:8e:da:75:b1:4a:45:1b:ca:50:46:df:70:
c4:9b:aa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:07 2024 by rpki-client on console-fra.rpki-client.org