Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/A4FrGXu7fJSEVPsJDjWel12ayh0.roa
File: A4FrGXu7fJSEVPsJDjWel12ayh0.roa (raw, json)
Hash identifier: LtWEP0qN1bdUbodH+hefc0pb/Tt918k2kktXYbUp2PI=
Subject key identifier: 03:81:6B:19:7B:BB:7C:94:84:54:FB:09:0E:35:9E:97:5D:9A:CA:1D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A410310FD49BF7977929A33929D6770D2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/A4FrGXu7fJSEVPsJDjWel12ayh0.roa
Signing time: Tue 29 Aug 2023 11:17:14 +0000
ROA not before: Tue 29 Aug 2023 11:17:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 193.124.4.0/24 maxlen: 24
195.133.78.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.20.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:03:10:fd:49:bf:79:77:92:9a:33:92:9d:67:70:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 29 11:17:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03816b197bbb7c948454fb090e359e975d9aca1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:44:79:11:13:2b:29:07:7b:68:d3:48:22:bd:
02:8b:13:68:92:f8:dc:ed:9a:3e:e3:d0:20:57:e6:
00:ce:47:7b:3f:5a:35:6e:bc:0d:e1:50:c1:fe:52:
8b:b4:86:e6:15:4f:9e:c1:32:88:96:e4:87:e7:24:
e5:3c:74:05:e7:42:1b:78:f5:c6:78:8d:48:dc:80:
30:65:22:13:f7:49:30:fd:9a:ef:45:bd:d4:c7:79:
a9:5b:69:71:9d:d4:e4:13:e5:1c:22:a6:8b:22:cd:
9a:4a:02:f9:2e:46:80:72:f2:9b:06:46:d7:d9:8c:
55:93:45:e0:3c:ea:ad:a3:c0:f6:21:53:31:38:a1:
d8:8e:89:58:a1:45:13:a9:0d:16:04:84:c3:09:b6:
37:45:37:9b:11:c7:a9:c1:78:cd:7c:85:98:18:04:
5f:8f:80:c2:a3:1b:a0:ed:45:9f:9b:00:0c:93:2c:
9c:b4:56:dd:ee:6b:4d:df:a9:0e:cc:a4:16:59:d9:
c9:69:26:b7:e5:68:a7:dd:b2:51:5b:d6:77:54:fb:
cb:a3:31:9f:e2:49:b2:ef:37:48:10:59:54:ef:c3:
d8:98:33:b6:83:b8:8b:d6:14:d6:b0:36:79:74:d2:
2f:a1:46:93:2d:09:69:9a:93:57:99:bf:35:73:ca:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:81:6B:19:7B:BB:7C:94:84:54:FB:09:0E:35:9E:97:5D:9A:CA:1D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/A4FrGXu7fJSEVPsJDjWel12ayh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.183.0/24
193.124.4.0/24
194.87.2.0/24
194.87.20.0/24
194.87.30.0/24
194.87.44.0/24
194.87.221.0/24
194.135.105.0/24
195.58.34.0/24
195.58.58.0/24
195.133.35.0/24
195.133.78.0/23
212.192.248.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d4:88:c3:1b:ef:ed:59:16:a9:d8:d1:c2:7d:34:cc:92:81:
cc:3a:71:87:4c:5b:d6:db:d2:f7:d6:18:43:39:a1:bf:ad:a4:
3c:17:20:6a:17:00:69:13:aa:24:1d:49:f4:e0:b1:83:99:08:
1d:e0:7e:78:88:bb:82:e8:26:ea:ef:9f:76:d2:60:e5:76:a9:
76:08:21:7f:9d:da:b1:ab:7a:16:42:32:d8:66:7e:04:a7:7a:
88:65:f1:ce:ca:e8:f5:70:2c:95:fd:5c:ca:1b:f6:5c:47:37:
df:92:c7:b3:a4:4c:de:df:3a:a0:47:c5:94:b7:6c:04:d0:e2:
82:4f:9f:36:3f:fb:31:1c:15:3d:f7:59:6d:2f:4c:0a:33:fa:
c4:75:d6:03:c9:a0:af:2b:72:c7:7e:12:a8:6e:b2:93:b9:95:
c1:43:2d:1b:3b:39:c3:87:f9:50:c6:06:f2:bb:7e:a9:21:49:
b9:3c:97:33:c6:f0:67:de:aa:45:a7:85:1a:d9:08:0a:06:53:
23:54:8d:12:35:50:06:1a:b9:e3:63:b8:ac:11:b3:a6:46:c1:
fd:d5:9a:95:29:fa:67:c8:6f:3f:09:ad:ce:15:cc:7e:77:5a:
d0:41:02:74:fe:55:de:26:c0:be:91:3e:ef:a2:b5:bd:28:3a:
9c:de:39:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 06:39:41 2023 by rpki-client on console-fra.rpki-client.org