Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/An_PE3JJEZ-lsuYGZSyOp-B4Tso.roa
File: An_PE3JJEZ-lsuYGZSyOp-B4Tso.roa (raw, json)
Hash identifier: eCptb0jJ79R6UpYGlk0YP7kqXrnSBUaw1EMXt+f14bw=
Subject key identifier: 02:7F:CF:13:72:49:11:9F:A5:B2:E6:06:65:2C:8E:A7:E0:78:4E:CA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B70F6ACFF2A895733632D9112CBB510CE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/An_PE3JJEZ-lsuYGZSyOp-B4Tso.roa
Signing time: Fri 27 Oct 2023 11:48:16 +0000
ROA not before: Fri 27 Oct 2023 11:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 62.76.227.0/24 maxlen: 24
194.85.250.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.245.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:f6:ac:ff:2a:89:57:33:63:2d:91:12:cb:b5:10:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 27 11:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=027fcf137249119fa5b2e606652c8ea7e0784eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:c0:ef:89:a0:c1:91:f7:7c:3b:36:3b:13:
f0:40:85:fb:a1:8b:0a:4a:78:d2:bf:f7:c4:bf:65:
74:e5:c8:a3:c5:b2:2a:af:cd:da:b7:7c:0f:b4:55:
bc:06:e7:66:59:5e:83:02:8f:47:b1:d7:11:d2:d0:
e4:84:12:cf:25:50:6b:df:aa:4c:6b:bc:3b:c5:a3:
41:a9:49:8d:92:a7:2a:c8:ee:10:d7:c3:60:a6:38:
d3:7b:42:c9:6f:46:f4:2c:2f:b3:aa:6f:88:4e:d2:
93:79:61:97:ee:37:29:fd:78:fd:28:36:64:d2:66:
f2:c5:81:c6:25:06:32:cd:91:dc:af:dc:c2:c4:f5:
e9:ba:f0:9e:ae:98:0d:03:ff:8f:2d:81:f1:59:c3:
83:09:13:e6:c3:54:c2:5c:7d:68:e9:cf:4f:45:ce:
9d:f8:fc:e9:88:dc:8b:57:74:5c:03:41:91:3b:8e:
fc:0f:5b:41:16:85:f8:95:b5:ca:c5:71:e2:30:3b:
77:4f:a0:fd:fd:09:b5:d0:7b:90:9b:32:a7:bd:65:
ee:db:96:9e:ba:b6:e3:8e:b7:04:cc:de:9b:8a:12:
a9:33:c4:ab:fe:e6:2e:32:85:33:f8:6b:c8:f8:52:
a5:83:b6:95:42:eb:39:01:18:e2:54:8f:5a:60:5d:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7F:CF:13:72:49:11:9F:A5:B2:E6:06:65:2C:8E:A7:E0:78:4E:CA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/An_PE3JJEZ-lsuYGZSyOp-B4Tso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.227.0/24
194.85.250.0/24
195.58.54.0/24
195.133.39.0/24
212.192.245.0/24
212.192.248.0/24
Signature Algorithm: sha256WithRSAEncryption
83:55:03:61:37:50:3d:a5:87:5d:db:d4:dc:dd:4f:ed:6f:0d:
9c:e7:07:c5:bf:9c:d4:8d:ab:7d:8f:e6:83:35:84:a7:10:33:
ef:48:30:d2:31:81:7f:ea:fd:0c:7f:e5:07:c8:ba:ce:9d:b1:
e6:7a:6a:40:0c:f0:15:b2:e7:90:bf:c3:7c:23:d0:de:76:c7:
d9:94:26:de:5c:d6:22:60:a8:e0:97:4c:cc:5b:6f:22:d2:ea:
37:ba:ca:f0:73:55:51:d6:1a:3b:63:c5:ff:e8:09:e3:29:cd:
1b:30:fe:ec:78:b6:b7:09:0c:72:dc:d9:03:97:2c:4a:92:75:
dd:a1:71:97:ab:cb:17:82:a0:c6:19:83:4e:1d:56:71:01:33:
7f:94:2e:c5:82:8b:73:d7:19:cd:2f:b4:fb:0a:9b:18:ec:84:
e2:ab:e1:b3:b1:96:11:4e:8c:29:a7:5a:1d:44:56:87:5e:43:
e0:75:60:14:5d:82:8d:dd:82:0d:e5:df:b5:80:1d:83:34:ae:
55:b9:60:ef:20:22:14:8b:f8:7d:93:06:cf:e8:0f:97:b3:5f:
2e:91:cb:db:19:46:c5:a2:ee:f8:5d:32:31:f2:8d:00:ef:a3:
09:f7:7e:97:56:2b:1a:7f:01:72:13:ab:b8:8a:00:4f:63:64:
2b:d7:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 16:40:18 2023 by rpki-client on console-ams.rpki-client.org