Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/85TK5-nBgz1modN_KUb6gIfPqHo.roa
File: 85TK5-nBgz1modN_KUb6gIfPqHo.roa (raw, json)
Hash identifier: i2KUhOPydSigsnMKxFfGjtf35Y7JrYEuAGhPwAvSUBE=
Subject key identifier: F3:94:CA:E7:E9:C1:83:3D:66:A1:D3:7F:29:46:FA:80:87:CF:A8:7A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185AFD3C21AFE93F6152652885F2B5C4B98
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/85TK5-nBgz1modN_KUb6gIfPqHo.roa
Signing time: Sat 14 Jan 2023 10:29:28 +0000
ROA not before: Sat 14 Jan 2023 10:29:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 193.124.4.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
193.124.125.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:af:d3:c2:1a:fe:93:f6:15:26:52:88:5f:2b:5c:4b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 14 10:29:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f394cae7e9c1833d66a1d37f2946fa8087cfa87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:bd:a9:35:7b:e6:ac:1a:62:9d:fb:9d:06:
31:ae:91:e2:d9:5f:0b:a9:75:94:90:06:11:c4:ec:
b5:7e:ce:bf:b1:13:52:35:47:e1:26:01:74:4a:b1:
f1:82:54:7a:ab:be:e6:c8:1f:45:26:16:cd:07:13:
7b:f1:54:bc:ee:9a:63:5d:16:20:79:86:86:31:b5:
00:9f:66:b4:e5:6b:a8:df:26:04:eb:35:f4:38:d8:
c8:e7:c3:3f:b3:14:99:e0:a5:5d:82:8c:9b:40:b0:
db:26:31:98:3e:c6:62:55:f7:7c:81:ce:3a:8c:1c:
3c:6d:73:1a:43:05:e1:66:4b:d5:16:02:85:17:1c:
13:7e:a5:92:e3:9d:c5:60:a0:38:c2:fb:f6:02:76:
69:76:f9:e2:92:e2:ca:73:3f:3b:89:68:59:0c:00:
ff:91:01:bb:16:6a:33:74:7c:97:ed:2d:46:75:fa:
98:67:bb:0e:c5:21:e2:e2:a1:b6:87:7f:d9:3e:1c:
8a:58:2f:a4:cf:c0:1f:c0:a3:47:c5:37:f0:d2:e7:
ef:91:d9:1e:28:9b:3b:82:1f:14:35:14:dd:60:1c:
14:7f:ee:47:82:51:b7:59:01:67:3f:76:7f:a3:ba:
de:a8:df:ff:d1:8f:83:54:c1:7c:5b:69:12:8a:22:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:94:CA:E7:E9:C1:83:3D:66:A1:D3:7F:29:46:FA:80:87:CF:A8:7A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/85TK5-nBgz1modN_KUb6gIfPqHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.4.0/24
193.124.125.0/24
194.87.162.0/24
194.87.200.0/24
195.58.63.0/24
195.133.73.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f9:b5:0d:89:e6:24:d3:55:e8:27:97:2b:11:12:8b:fb:30:
50:fe:e7:c3:3a:b8:e9:7b:2a:c6:7d:04:2e:2f:67:d6:b7:dc:
9f:f3:d0:8d:77:03:10:cb:38:56:bd:39:c6:92:82:7b:33:78:
d1:19:41:e2:bb:aa:89:ad:9d:38:e9:0d:64:51:78:88:89:49:
1e:ce:bb:ac:a6:ad:e9:09:aa:a6:ce:a1:34:e1:0b:0c:3f:8c:
92:53:d6:56:09:8a:46:ee:b4:ae:f4:2d:45:85:03:1b:2c:d0:
a0:93:be:bd:75:1e:46:7f:df:7d:3b:21:0c:17:db:5a:47:aa:
52:70:b7:27:c3:40:d7:22:e1:70:4f:ad:41:1e:5c:41:b5:b6:
c4:1d:0e:da:4f:26:66:0a:3c:36:09:65:13:ee:a8:66:0b:00:
2a:77:49:e5:6e:5a:31:5a:20:44:48:49:69:a0:a5:a4:d9:09:
86:2e:95:3b:4a:db:8f:5c:25:73:6d:6d:23:0c:f8:ed:32:23:
84:3b:cd:98:ba:23:b5:fa:41:51:13:33:a4:fd:53:0a:14:f9:
18:b1:ec:0d:f0:4e:f9:78:06:8b:2f:63:d3:c2:a5:fb:52:6f:
0b:7e:79:24:40:d5:26:3e:e7:d5:56:f5:bf:65:6d:cf:b9:68:
f0:ed:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-ams.rpki-client.org