Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Cwvj-ICV_L_GEaEubyvjJkg8F_A.roa
File: Cwvj-ICV_L_GEaEubyvjJkg8F_A.roa (raw, json)
Hash identifier: OREPZAxmBUraz/Z7O+anewOVs5sHZ3Mq84LqaCtNFwA=
Subject key identifier: 0B:0B:E3:F8:80:95:FC:BF:C6:11:A1:2E:6F:2B:E3:26:48:3C:17:F0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185CA77C2E12E870AF081C5DA243E468FE6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Cwvj-ICV_L_GEaEubyvjJkg8F_A.roa
Signing time: Thu 19 Jan 2023 14:38:44 +0000
ROA not before: Thu 19 Jan 2023 14:38:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 194.87.205.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.139.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:77:c2:e1:2e:87:0a:f0:81:c5:da:24:3e:46:8f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 19 14:38:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b0be3f88095fcbfc611a12e6f2be326483c17f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:55:68:ef:1c:62:5b:14:35:c1:90:8b:c1:be:
d2:17:7f:26:5b:14:d5:81:42:c2:11:c2:2c:5b:24:
4c:f3:7c:dc:36:e8:7c:fd:f9:50:72:db:3d:e8:ad:
c9:df:57:e1:36:b6:8e:3c:67:1d:41:4d:c7:51:4b:
4e:c4:15:91:d1:aa:49:6d:9b:6b:2d:6c:82:dd:de:
33:94:02:c2:44:73:b9:8c:45:d5:67:83:14:cf:bf:
be:5e:77:ca:21:32:a8:fe:ae:d8:00:60:d5:d3:44:
b6:2e:f9:4a:c4:2a:cb:f5:94:c9:76:e8:55:37:c9:
34:e7:f6:c9:39:7e:a0:a3:73:d6:0e:7e:16:87:37:
e8:a8:ef:a5:88:b9:1a:64:81:5e:3f:ed:24:a5:8c:
26:86:4a:b3:0d:c6:a2:40:55:5e:2a:32:13:19:d2:
82:b6:7d:6f:a9:f9:ff:21:26:ab:d3:8c:c0:23:31:
8b:f2:97:b8:f8:75:ca:d4:fd:b5:a5:d4:65:be:fa:
e4:85:c7:cf:bc:8f:aa:f4:7c:05:37:27:50:ca:ec:
e8:db:52:51:37:fb:09:37:3e:de:ae:8e:50:7f:8f:
74:16:43:ea:2f:8a:bc:20:0f:8a:55:f9:87:e5:e4:
f8:33:9c:6d:54:8f:ef:cf:03:ce:1e:05:59:45:1a:
17:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0B:E3:F8:80:95:FC:BF:C6:11:A1:2E:6F:2B:E3:26:48:3C:17:F0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Cwvj-ICV_L_GEaEubyvjJkg8F_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
192.124.183.0/24
193.124.46.0/24
193.124.90.0/24
193.124.200.0/24
194.58.40.0/24
194.87.2.0/24
194.87.10.0/24
194.87.122.0/24
194.87.124.0/23
194.87.139.0/24
194.87.205.0/24
194.87.233.0/24
194.87.252.0/24
195.58.51.0/24
195.133.76.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e5:eb:96:92:79:92:8d:ec:46:61:29:e0:2a:fc:70:14:cd:
0b:37:36:03:ce:46:51:7c:01:1c:17:57:d7:c3:6e:6b:bf:25:
ef:bd:a1:30:3e:f2:ac:17:98:d0:f2:f0:26:72:bc:44:32:0b:
b5:0f:7d:0a:e7:6a:d1:77:39:4d:09:64:ec:95:42:5c:8f:dc:
3e:6e:0e:d2:65:b7:8c:29:24:8d:6e:ca:8c:51:e6:75:8d:1f:
01:71:7f:d5:e2:f6:6f:19:55:cf:63:bc:cb:eb:c0:6b:50:c0:
06:a4:da:ba:bf:22:e5:7c:0b:65:12:e9:3f:91:97:68:a0:9d:
e4:87:e8:35:c0:f2:d2:e5:0c:5d:5b:30:eb:d5:ea:f9:db:6b:
3d:16:65:23:ed:43:61:30:19:c5:c5:de:7d:38:46:54:c6:1e:
aa:2e:d3:ec:05:1b:62:79:80:09:29:4b:62:21:7c:62:9e:50:
95:f7:e7:a4:5d:96:89:1f:bc:bc:ed:8e:30:14:ae:d8:32:12:
82:0e:60:83:c1:c9:70:f1:8c:97:30:dd:1a:a0:bb:ca:55:06:
e5:a0:db:4f:f2:cd:0d:37:82:10:ee:70:d9:69:cb:97:0e:26:
6e:e5:1e:5a:f1:21:a3:1a:a8:27:9c:d5:37:37:12:9e:c8:32:
38:5c:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:52 2023 by rpki-client on console-ams.rpki-client.org