Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B1OgJYlLwY7IzkZGRp_a7Pnff08.roa
File: B1OgJYlLwY7IzkZGRp_a7Pnff08.roa (raw, json)
Hash identifier: OcfybW7Jtyg80Nz4a+Q9pZ2GMXG6WrOzFZPrL6Fw9uo=
Subject key identifier: 07:53:A0:25:89:4B:C1:8E:C8:CE:46:46:46:9F:DA:EC:F9:DF:7F:4F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01869B858A9FE2893B3A91107951775B9DA4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B1OgJYlLwY7IzkZGRp_a7Pnff08.roa
Signing time: Wed 01 Mar 2023 04:54:25 +0000
ROA not before: Wed 01 Mar 2023 04:54:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 194.87.205.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9b:85:8a:9f:e2:89:3b:3a:91:10:79:51:77:5b:9d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 1 04:54:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0753a025894bc18ec8ce4646469fdaecf9df7f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:32:b7:51:37:a0:1f:82:13:80:2e:7c:8a:da:
25:f0:2e:ff:56:2f:5d:5c:9b:d6:4a:ed:09:02:e0:
8a:37:db:81:7c:8c:d2:4b:25:08:89:15:85:2e:57:
c6:61:e9:01:22:cf:95:62:a0:d7:f9:85:ea:da:2b:
a5:46:bf:88:fc:37:4e:4e:cb:b7:95:7b:95:ef:5a:
24:63:47:74:c7:71:76:2e:df:d7:86:d2:0b:1a:1c:
c1:bd:10:1d:14:e1:fa:94:4b:cc:37:15:2d:3a:13:
a1:7b:1f:01:78:e4:50:03:f0:a9:f4:4c:25:d7:ca:
56:c9:b4:6d:67:bd:51:4d:9a:fe:7a:60:42:3b:6a:
0c:35:62:a8:86:8a:76:8b:9d:82:70:00:31:78:bd:
c2:fe:40:73:f6:0b:23:bd:e2:b6:de:a8:20:c9:16:
df:98:99:4a:2b:fd:05:b6:cf:75:d5:85:8a:e3:aa:
d6:ca:14:24:bc:c8:38:f9:3d:1a:2a:ad:0a:80:bf:
35:15:9f:c8:42:c4:63:6c:98:5a:30:6d:8a:34:d3:
25:1b:50:23:27:bb:7c:8e:38:c9:7a:f1:54:8e:5d:
1c:46:f0:9b:fc:f1:60:45:c3:3c:21:f2:d0:11:91:
3f:ae:5d:45:eb:50:72:75:4b:1b:65:e2:83:6c:7e:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:53:A0:25:89:4B:C1:8E:C8:CE:46:46:46:9F:DA:EC:F9:DF:7F:4F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B1OgJYlLwY7IzkZGRp_a7Pnff08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
192.124.180.0/24
193.124.90.0/24
193.124.200.0/24
194.58.40.0/24
194.87.2.0/24
194.87.10.0/24
194.87.124.0/24
194.87.205.0/24
194.87.233.0/24
194.87.252.0/24
195.58.51.0/24
195.133.76.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6f:b7:fc:66:1b:4c:04:fd:59:99:3f:5a:d6:f2:3a:dc:67:
83:15:73:ed:23:82:2c:68:ac:14:60:3a:fb:53:18:90:4e:78:
a6:7e:dc:5f:5c:c9:9e:9d:32:b6:21:8c:67:03:01:cf:31:9e:
e6:0a:bd:96:4d:5e:8e:19:dc:95:9d:47:80:41:42:86:9f:7e:
35:4d:4f:60:06:02:ab:d1:3d:90:ed:a5:05:50:b8:da:97:8f:
70:99:52:d3:a6:b9:3d:7a:8f:ea:d8:29:41:3a:79:7d:cb:a7:
77:ae:be:a8:e8:66:ba:eb:0a:f0:a1:7e:e2:94:38:3a:73:2b:
1d:fb:32:35:a2:31:a2:d2:f8:3f:6b:8d:b6:bb:a7:bf:5f:3d:
54:f2:d8:2d:ee:0f:65:45:1b:26:c1:b0:e2:7c:d6:7b:02:86:
98:0c:76:f4:af:63:8d:3e:6b:b2:7b:34:6d:6a:58:d6:1c:94:
f8:ee:b8:56:0f:0e:ec:0b:b9:69:eb:05:77:7e:83:b1:d8:4b:
40:70:13:ed:a9:c4:74:f4:df:91:e4:37:39:7e:ed:6d:26:9c:
c3:cd:06:48:e1:05:2a:89:8c:63:d6:f0:45:3c:1f:1b:a8:7a:
5f:77:7a:2f:60:af:a4:db:7c:5a:96:02:c4:e2:17:cb:e5:b3:
4d:e4:4c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:57 2023 by rpki-client on console-fra.rpki-client.org