Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/94hvzDvisMc9A2-FSIAZNnrVLj0.roa
File: 94hvzDvisMc9A2-FSIAZNnrVLj0.roa (raw, json)
Hash identifier: pfElJYvOK/odplVrW0ZFkPXgPtF8ZhgINpFrXTcAJWA=
Subject key identifier: F7:88:6F:CC:3B:E2:B0:C7:3D:03:6F:85:48:80:19:36:7A:D5:2E:3D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A794A6258F2DE5EAEB7E5615B08ACCE63
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/94hvzDvisMc9A2-FSIAZNnrVLj0.roa
Signing time: Sat 09 Sep 2023 09:33:52 +0000
ROA not before: Sat 09 Sep 2023 09:33:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
195.58.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:79:4a:62:58:f2:de:5e:ae:b7:e5:61:5b:08:ac:ce:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 9 09:33:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7886fcc3be2b0c73d036f85488019367ad52e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:02:9e:eb:97:52:63:97:b4:6e:00:1f:77:
ee:c6:22:9f:e7:d1:7e:e5:98:a0:f1:2c:ed:19:22:
91:31:65:8c:ee:18:a0:8e:b0:0d:da:a9:16:dd:f5:
76:68:0e:6f:0e:3f:22:0a:a3:21:be:42:f6:b9:36:
c8:c0:7f:a2:50:8c:b3:1c:3e:98:13:2c:60:23:b9:
69:fd:60:4f:59:d4:34:27:c8:e6:97:6b:e5:b0:13:
6f:50:0b:11:99:c4:3c:5a:df:8c:84:f5:a1:74:c1:
f8:ea:47:8c:ae:c4:25:fa:b9:0b:71:92:28:a7:9b:
b2:1a:d4:6c:b1:91:91:fb:ec:0f:6c:a9:cb:ef:d4:
a5:62:3e:30:86:56:6b:6a:b3:01:e2:3a:25:a5:34:
c0:47:09:55:46:85:c9:28:65:4c:ef:de:3a:44:52:
ce:6e:b1:ec:29:43:64:47:0a:24:98:77:c7:d3:6f:
f5:54:03:d1:dc:06:31:de:52:60:06:ab:4b:0e:57:
a7:3d:f1:11:ea:04:67:33:96:05:bd:e2:aa:9c:87:
c6:49:1b:0b:9b:80:c7:b0:76:a6:27:b9:09:03:09:
d9:e3:6f:39:94:c4:9c:8f:68:ae:8f:d0:87:31:f5:
3d:cd:0d:5e:7e:96:27:22:28:32:e3:a2:75:4c:d8:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:88:6F:CC:3B:E2:B0:C7:3D:03:6F:85:48:80:19:36:7A:D5:2E:3D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/94hvzDvisMc9A2-FSIAZNnrVLj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.191.0/24
192.124.209.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.26.0/23
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
Signature Algorithm: sha256WithRSAEncryption
90:96:8b:a4:35:95:da:b3:4a:7d:07:80:8c:a8:06:46:57:76:
e0:bf:88:6e:f5:20:8b:07:95:97:fb:30:43:a4:ec:07:dc:db:
4d:8d:44:26:cb:18:36:b0:f7:32:a4:51:e6:64:f5:d6:a7:97:
3b:1e:d5:41:dd:1e:59:f5:88:55:1e:e5:fb:34:3a:1c:b0:17:
b9:08:75:a3:d2:9b:ea:4f:b3:b0:f2:30:55:c6:e6:1c:fd:19:
2a:15:41:c4:b1:bf:06:79:c1:8d:7b:47:47:65:c6:02:ec:73:
00:90:3a:e6:4b:c2:ca:52:9b:1e:92:db:c0:15:90:de:fc:a5:
b8:54:10:4c:93:e8:77:16:20:3f:6a:e5:43:29:2c:f3:c0:58:
c8:54:83:f7:e0:7d:c4:cf:96:77:10:3d:bc:b2:e2:db:20:f0:
cb:ac:72:81:16:28:cf:44:58:c9:f8:95:7f:50:e3:5e:e7:69:
c5:ec:b9:4f:08:38:26:4e:19:80:c5:63:fe:d6:83:98:00:27:
a6:05:b0:98:a8:b7:57:e9:9a:d6:14:7d:dd:b3:8e:ff:f1:72:
6a:7e:aa:ed:90:eb:8d:68:8f:d9:7f:6a:7e:e2:83:55:c9:2b:
f6:ce:6b:c7:cf:9b:6f:da:10:47:f9:b8:e1:d8:f9:08:01:49:
0a:a9:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 10 17:43:22 2023 by rpki-client on console-ams.rpki-client.org