Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8i9hfONdX3Tl4I_WOoiWM5VChSc.roa
File: 8i9hfONdX3Tl4I_WOoiWM5VChSc.roa (raw, json)
Hash identifier: 8iz6IgKYQJi+eK3Q1kiF3GGx38z1KqI7jYhQZLhL9NA=
Subject key identifier: F2:2F:61:7C:E3:5D:5F:74:E5:E0:8F:D6:3A:88:96:33:95:42:85:27
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185A1BDE6AA760F8EEC9B29C672893F962B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8i9hfONdX3Tl4I_WOoiWM5VChSc.roa
Signing time: Wed 11 Jan 2023 16:50:55 +0000
ROA not before: Wed 11 Jan 2023 16:50:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 194.87.207.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:bd:e6:aa:76:0f:8e:ec:9b:29:c6:72:89:3f:96:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 11 16:50:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f22f617ce35d5f74e5e08fd63a88963395428527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:8e:74:7d:bd:35:df:ac:5a:1e:bb:ed:62:
aa:19:3e:40:dc:ec:ac:6d:f1:31:cb:7a:1b:7d:8d:
c7:c7:38:97:42:25:01:5d:81:0d:5f:9f:de:5b:f0:
3d:c0:72:b9:0f:ed:45:cf:9b:4b:fd:87:1b:b3:79:
dd:08:76:16:6f:a1:e0:9b:ce:da:c4:47:15:b8:1e:
c5:3c:15:19:f0:b9:18:d4:d6:f0:70:4c:d9:b3:28:
a7:b8:91:94:2c:31:83:dc:6e:98:99:b0:02:3c:58:
a9:1b:7a:7c:64:79:a1:ac:5a:55:83:54:3c:46:e8:
c9:3c:59:0e:85:f3:a9:ca:68:cc:47:85:ba:52:3b:
d4:38:9b:55:b5:83:8a:a5:6e:91:cb:a0:e7:d1:f5:
52:91:28:92:b9:7f:66:1d:a0:cc:3f:50:3a:0a:fe:
38:1e:80:fe:bd:5c:35:c2:e2:8d:4a:eb:b8:7f:25:
e2:1a:ff:4d:8e:fb:e5:17:b0:54:d7:fa:76:1c:5c:
ec:15:58:ba:54:da:5f:1e:b1:93:88:80:ee:8d:02:
c5:92:78:73:5a:4d:3e:39:e8:14:b5:68:81:f2:f0:
a5:15:c1:7e:92:33:fc:25:72:39:46:9f:28:e6:1b:
4b:ed:a4:b2:37:53:54:4d:1b:f3:e5:1f:fc:be:d1:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2F:61:7C:E3:5D:5F:74:E5:E0:8F:D6:3A:88:96:33:95:42:85:27
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8i9hfONdX3Tl4I_WOoiWM5VChSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.41.0/24
193.124.205.0/24
194.58.43.0/24
194.58.46.0/24
194.87.30.0/24
194.87.64.0/24
194.87.108.0/24
194.87.161.0/24
194.87.207.0/24
195.133.94.0/24
212.192.7.0/24
Signature Algorithm: sha256WithRSAEncryption
75:87:d2:37:33:ec:55:1a:81:0b:0a:57:c4:72:29:92:8e:3b:
59:ca:cd:2f:39:04:5c:a2:82:08:78:75:1b:d2:37:39:63:3b:
3f:a9:db:66:88:18:fe:60:88:10:ca:78:ba:91:28:3c:9b:65:
01:62:13:a2:2c:8b:73:da:b1:4a:c5:ad:56:9e:d5:28:15:e0:
50:0f:6b:c3:66:3d:1d:ed:8b:d9:23:7f:cf:c7:ff:a4:47:50:
6b:fc:be:ad:26:e0:59:c2:4d:cc:ae:60:27:7f:83:7a:77:79:
81:58:85:e8:83:36:83:8d:e2:fc:ce:2e:6d:98:8a:eb:7c:8e:
f0:76:3d:74:cc:c3:1b:56:b0:1c:81:21:f9:14:7a:19:99:b3:
e4:6a:0d:f6:5c:58:04:eb:3b:9f:21:61:db:11:de:b4:97:0a:
8d:2f:20:16:4d:9a:fe:b3:38:41:21:85:3b:b6:9f:d9:a2:8b:
41:da:05:17:b1:35:3b:18:ad:f7:e2:46:4e:63:ad:ca:ab:a7:
91:34:66:4c:27:c0:45:84:80:b8:fb:af:ac:0c:99:4a:d9:3d:
e0:40:6d:ab:36:6b:b0:53:63:7c:1c:3f:0a:b3:3f:db:c9:a8:
3a:95:bc:4b:74:0e:a8:d1:58:eb:18:e3:83:ad:64:07:fc:c1:
c4:20:c8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:57 2023 by rpki-client on console-fra.rpki-client.org