Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7Y8wzVgFNXQQt68PYMqDFiRXn3A.roa
File: 7Y8wzVgFNXQQt68PYMqDFiRXn3A.roa (raw, json)
Hash identifier: rLhPbLm+KVX481rcMoR7SXYRb0dlir8sv2DFS2lNhW4=
Subject key identifier: ED:8F:30:CD:58:05:35:74:10:B7:AF:0F:60:CA:83:16:24:57:9F:70
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B62C7B0BEDA8AB8CCBA7F28707FC3C455
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7Y8wzVgFNXQQt68PYMqDFiRXn3A.roa
Signing time: Tue 24 Oct 2023 17:42:15 +0000
ROA not before: Tue 24 Oct 2023 17:42:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.63.0/24 maxlen: 24
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:c7:b0:be:da:8a:b8:cc:ba:7f:28:70:7f:c3:c4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 24 17:42:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed8f30cd5805357410b7af0f60ca831624579f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:f6:bb:d8:8b:64:11:fc:60:81:f3:c6:dc:
11:d7:c9:31:dc:22:80:97:d8:f2:ce:34:56:73:a8:
e0:4a:c3:6a:f8:67:75:1c:e1:4e:37:02:3a:7a:50:
34:48:76:6f:e1:75:3f:43:c9:0d:29:5c:63:45:d7:
3e:50:51:ad:20:e8:fd:8c:e3:66:e6:46:8f:a4:c3:
fb:42:5c:bd:0a:e4:45:15:2d:cf:56:59:52:78:69:
3d:9f:e2:25:0a:01:3a:55:04:b9:91:d8:c7:cf:52:
d6:ea:3a:4b:5d:53:1f:05:8f:a3:53:37:ce:f2:45:
b9:87:bf:6e:f1:c2:1a:67:b7:e2:a4:5e:50:44:cf:
b6:80:29:27:48:14:5b:73:cf:bb:fb:9a:4f:4e:65:
21:b7:83:33:1c:02:dc:ed:1c:83:8b:28:de:4c:05:
89:f6:a8:1f:4e:d1:1e:3e:b3:d4:bb:b9:92:0a:db:
4b:cd:83:47:91:ad:5e:b3:08:21:46:eb:a3:a1:cd:
e8:da:47:10:3c:52:ef:c3:a4:74:18:a3:cc:e3:1c:
0c:0d:e9:1b:f7:a8:40:4c:6b:83:66:2b:ab:bd:b9:
f4:bb:bb:56:98:65:5c:05:32:3f:bc:e2:65:d1:c8:
e6:7f:e7:12:16:82:74:a4:9e:8e:c0:49:a2:e3:5c:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8F:30:CD:58:05:35:74:10:B7:AF:0F:60:CA:83:16:24:57:9F:70
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7Y8wzVgFNXQQt68PYMqDFiRXn3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.181.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.190.0/24
194.87.200.0/24
194.87.220.0/24
194.87.222.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:65:87:ee:a5:c4:29:36:49:5b:fb:df:37:e4:5b:e1:2c:3c:
5b:28:90:d4:59:41:e8:58:14:d6:f9:39:0f:60:a3:81:83:02:
6d:99:e1:e2:1f:84:62:a6:47:d5:49:53:af:6d:cb:19:7c:62:
47:25:9e:06:55:bf:15:06:13:ed:e3:9e:59:0e:8f:e0:86:f6:
15:3e:0f:cf:ef:dd:99:08:07:d6:51:68:0e:7a:94:9c:4b:70:
c7:94:7e:93:56:eb:73:cd:4b:1f:f4:e3:9d:82:47:1c:eb:29:
51:f3:cd:48:41:d1:bc:44:ca:73:f5:45:06:46:83:f4:e0:df:
57:44:cf:4b:81:0f:80:bb:8e:df:f4:1b:d5:13:92:1b:58:e1:
ed:72:d7:b6:c7:ae:33:a4:57:ba:3d:a8:eb:77:74:16:c0:9f:
82:0d:b3:b3:1d:d5:f7:8f:c6:0d:62:8c:7a:4e:c5:12:ed:b4:
e3:44:cb:0f:65:17:3b:ec:6d:cf:1f:13:6d:f1:96:6d:5f:b6:
15:54:44:a1:bf:1f:21:1f:a7:d0:86:e3:b2:00:6e:c9:77:e2:
db:a7:2f:c3:b4:12:b2:53:fa:f5:9f:ab:66:a5:d7:35:07:5b:
32:9c:74:d2:71:c0:a2:a3:68:11:d8:61:7f:63:00:1f:97:ef:
5d:0a:9c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 04:59:48 2023 by rpki-client on console-ams.rpki-client.org