Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CpyW9AvYQJ595Id5ythj7hjUa0U.roa
File: CpyW9AvYQJ595Id5ythj7hjUa0U.roa (raw, json)
Hash identifier: FV5yynEh5689PXxEloILw56we4VWt9j+1kDKQ23krEs=
Subject key identifier: 0A:9C:96:F4:0B:D8:40:9E:7D:E4:87:79:CA:D8:63:EE:18:D4:6B:45
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01859B01B9293AD893059B0F43E36A4E4170
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CpyW9AvYQJ595Id5ythj7hjUa0U.roa
Signing time: Tue 10 Jan 2023 09:27:39 +0000
ROA not before: Tue 10 Jan 2023 09:27:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 194.87.3.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:01:b9:29:3a:d8:93:05:9b:0f:43:e3:6a:4e:41:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 10 09:27:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a9c96f40bd8409e7de48779cad863ee18d46b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:56:2b:ee:8f:39:ac:43:e0:d6:1e:8f:fa:50:
f8:55:1d:a1:f0:c1:9b:52:3c:36:03:2a:a6:ac:8d:
48:d3:86:97:eb:52:d8:e1:5d:04:cd:60:fd:9a:de:
29:7c:c0:af:fe:92:81:03:3b:f6:09:d0:bc:de:4e:
3c:63:c2:00:a1:8d:11:cd:44:c8:90:8a:17:0e:75:
43:55:8c:12:0f:93:1e:03:f5:e5:5f:4c:f7:e6:9b:
77:d0:70:7e:d3:a7:f1:8c:4f:ee:09:1a:fe:46:1c:
9a:8c:2b:4d:05:c5:52:56:03:db:67:85:3a:de:3d:
71:2f:cb:64:2a:ae:92:ec:cc:77:7d:a8:a0:0b:a9:
c7:e9:8f:9f:d4:25:71:86:6d:c3:c8:c5:96:1e:88:
6b:39:20:2d:91:9c:dc:b0:33:c2:2e:af:b0:cf:1f:
09:95:ef:79:3d:9f:d1:e0:cb:6c:4c:1a:d0:97:60:
06:6d:15:c0:52:89:93:fd:48:37:af:de:21:17:97:
f6:d0:54:81:79:ec:46:83:9c:1f:8d:ed:cc:de:17:
5c:82:d7:54:e7:cd:28:4d:dc:9e:c8:30:60:e5:44:
83:86:f8:bd:b0:ba:c0:86:81:5b:08:ba:9d:43:16:
fb:15:03:d0:93:e3:a2:1d:43:df:ad:47:44:f6:50:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:96:F4:0B:D8:40:9E:7D:E4:87:79:CA:D8:63:EE:18:D4:6B:45
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CpyW9AvYQJ595Id5ythj7hjUa0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
193.124.16.0/24
193.124.93.0/24
193.124.202.0/24
194.87.3.0/24
194.87.16.0/24
194.87.22.0/24
194.87.37.0/24
194.87.177.0/24
195.133.194.0/24
212.192.211.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c2:2b:18:23:b9:78:93:41:3e:ce:55:e7:01:98:28:ea:24:
ea:0d:3a:24:63:c2:f8:6c:36:6e:78:38:04:c9:f3:47:96:e8:
bd:fc:a6:50:02:fd:d0:f3:81:2c:ec:7f:99:86:54:50:fa:3b:
d0:d3:45:4a:6a:a0:6f:65:42:e9:a0:00:14:f5:64:95:d0:a8:
0d:b5:62:ec:7f:41:7a:e5:de:ce:94:22:78:07:fa:42:b2:65:
99:0d:d3:ec:33:e4:03:7f:d2:c3:34:84:9a:3c:30:56:8a:9e:
17:51:eb:d5:e5:35:35:c1:62:c3:0f:07:6a:f3:e8:f7:07:42:
85:e8:cb:ac:9a:60:03:80:97:d1:fe:83:cd:9f:e5:af:ca:70:
78:fa:57:29:dd:d6:9e:a1:66:65:d5:cd:f2:a1:fe:bc:cf:7e:
01:5f:7f:29:8e:54:9a:7c:8a:49:7d:a5:76:34:f1:ac:b9:05:
5d:da:54:64:6e:32:2e:3c:e2:b9:ef:5d:94:5e:2a:2c:43:0e:
b9:1b:11:74:94:db:f9:b7:58:a3:c3:b5:77:48:ec:a9:0f:51:
6d:51:40:cd:8f:b8:0a:f1:87:fe:e1:15:10:7f:27:1d:5a:e6:
e5:b4:75:df:42:44:73:56:8d:a0:c2:b2:a4:2f:cd:10:f5:19:
37:c5:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:52 2023 by rpki-client on console-ams.rpki-client.org