Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7s9eBJxtx8YvZaf_5xlrRuCuHnE.roa
File: 7s9eBJxtx8YvZaf_5xlrRuCuHnE.roa (raw, json)
Hash identifier: /2iYCxK2uP7XMRR3g2OMv6jxklT4f5q0creoEjYMbOk=
Subject key identifier: EE:CF:5E:04:9C:6D:C7:C6:2F:65:A7:FF:E7:19:6B:46:E0:AE:1E:71
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A760B16869B6F690A1C73FFBB778AA884
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7s9eBJxtx8YvZaf_5xlrRuCuHnE.roa
Signing time: Fri 08 Sep 2023 18:25:52 +0000
ROA not before: Fri 08 Sep 2023 18:25:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
195.58.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:76:0b:16:86:9b:6f:69:0a:1c:73:ff:bb:77:8a:a8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 8 18:25:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eecf5e049c6dc7c62f65a7ffe7196b46e0ae1e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:97:80:1d:77:cd:f7:53:ba:1c:9d:ce:85:aa:
64:d6:2e:49:fe:1b:76:47:2e:f1:47:14:e4:92:a3:
27:65:1e:d7:ec:bc:f2:56:81:b5:d6:3b:61:74:d6:
c5:d6:83:ef:b9:98:5f:b0:e7:a8:c9:b9:e9:c0:c9:
48:78:f1:bb:e7:20:5e:4c:c8:19:c5:80:47:59:e9:
10:cc:39:3a:d6:e2:ae:d4:5e:b3:77:52:71:92:2f:
7a:9d:68:19:71:5e:55:af:73:a7:f1:4d:1c:5e:0e:
ca:ca:67:48:bf:bf:d2:3e:0d:4c:97:29:b6:ed:ab:
cd:49:f8:ee:e2:6e:51:3c:83:c2:24:93:64:bb:05:
4a:a0:14:f7:b6:eb:b1:6b:93:97:d3:29:40:47:20:
5c:8d:97:4c:e8:b6:08:39:e5:60:aa:e5:f3:1c:20:
e4:72:c8:35:17:59:24:9b:61:72:55:f7:8d:39:13:
7c:16:10:00:0a:8b:ca:42:22:78:33:d3:af:8d:11:
f4:bb:99:84:6e:c1:76:2c:06:67:96:96:8f:a7:2d:
15:71:b3:06:06:69:fe:7e:14:cf:fa:7b:22:07:9c:
13:22:d0:79:8e:8b:f8:13:c3:43:0e:d6:59:bc:a5:
53:e5:9b:fb:79:d3:4d:91:ee:10:61:57:2c:36:cd:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CF:5E:04:9C:6D:C7:C6:2F:65:A7:FF:E7:19:6B:46:E0:AE:1E:71
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7s9eBJxtx8YvZaf_5xlrRuCuHnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.26.0/23
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
Signature Algorithm: sha256WithRSAEncryption
76:74:52:48:83:d1:6e:2b:24:4d:01:f3:e9:e3:f1:00:10:58:
83:11:6f:0a:1f:46:05:f6:16:84:f8:2c:e8:ac:04:72:97:6a:
a1:57:25:8b:29:29:a3:04:cf:4d:75:63:4a:8f:1d:1d:2e:af:
25:9c:39:53:11:f1:7a:4f:b3:50:4a:07:0b:1f:ce:b8:b4:d5:
f1:b6:3b:85:77:0a:49:34:7c:4a:4d:c1:36:06:0f:5b:81:8e:
78:7d:03:1b:61:71:1b:dc:79:14:25:ad:21:14:c4:76:32:1d:
ab:85:c2:6b:fa:56:e2:b8:a6:45:d6:dc:7a:cc:ea:47:b6:b9:
6a:25:4d:62:a6:e6:11:a6:57:68:12:c0:df:37:7e:7d:08:e9:
b4:72:04:59:46:ef:f4:61:b5:4c:55:7d:e5:b9:d1:57:ca:f8:
8d:cc:c9:67:82:f4:87:c2:7d:b3:e7:14:c8:d1:7c:8d:b9:e1:
78:cc:65:f6:a4:16:49:c6:91:6e:59:a1:45:b7:12:9b:17:66:
64:01:0f:8a:c6:b8:23:cf:2b:cf:e8:d4:e9:e6:8f:0b:6b:19:
35:81:f1:a2:4f:d5:e7:0b:17:ed:7f:db:64:a0:4a:10:d1:b1:
d3:a2:a0:0e:75:dd:3c:16:50:19:6f:f5:be:d7:f7:62:95:ac:
6e:01:ff:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 10:04:25 2023 by rpki-client on console-ams.rpki-client.org