Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DVWzmZmIsDWYkpH3uQSBgp9I5zE.roa
File: DVWzmZmIsDWYkpH3uQSBgp9I5zE.roa (raw, json)
Hash identifier: Y2RdrKPFeu1sGjbut6oJWwtbRvEaT+UnubHr8syW9M4=
Subject key identifier: 0D:55:B3:99:99:88:B0:35:98:92:91:F7:B9:04:81:82:9F:48:E7:31
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018891D4A555CAE8E84BFEF602424B212260
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DVWzmZmIsDWYkpH3uQSBgp9I5zE.roa
Signing time: Tue 06 Jun 2023 17:50:12 +0000
ROA not before: Tue 06 Jun 2023 17:50:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 62.76.226.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.87.188.0/24 maxlen: 24
194.87.86.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:d4:a5:55:ca:e8:e8:4b:fe:f6:02:42:4b:21:22:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 6 17:50:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d55b3999988b035989291f7b90481829f48e731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:ef:e1:57:10:a2:57:41:d8:f5:4a:91:e4:
cb:21:73:8c:3e:7d:bb:bb:94:25:da:e0:33:46:c4:
78:b4:9e:b0:22:70:a5:e0:4f:9f:95:c2:b7:83:8b:
ec:97:80:97:11:8e:51:2e:92:6a:4b:29:af:68:a2:
26:7a:a7:eb:80:f3:fa:77:a6:a4:9f:c6:fb:b7:dc:
1b:d8:3a:c1:03:15:04:5c:7c:11:db:9b:fa:fe:c9:
df:9b:f7:12:15:35:cc:c5:6f:a0:83:be:e0:77:2b:
a1:a6:89:59:8e:a9:94:b9:84:21:32:5b:63:ff:b2:
1d:d2:5e:15:7b:de:60:b9:cf:18:8f:12:bb:8a:37:
da:72:a5:7f:86:d4:87:41:1f:d7:fa:18:fd:e9:35:
bb:6a:c4:4b:43:40:d9:8c:0e:8c:48:f3:f3:84:a0:
97:c4:e5:86:e1:f9:89:9b:7c:8a:e8:0a:34:9d:47:
7f:80:bd:04:b4:5f:c4:92:e8:93:38:85:b0:cb:51:
6a:b6:56:a0:69:96:30:a6:be:75:bf:71:2a:5d:db:
2c:06:d8:15:bf:49:f0:be:dd:ed:32:c9:02:18:0a:
c8:7f:16:be:00:c3:dc:61:cf:83:fc:bd:a9:70:16:
19:c0:67:f5:93:48:ef:10:ec:22:c4:05:ba:dd:4d:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:55:B3:99:99:88:B0:35:98:92:91:F7:B9:04:81:82:9F:48:E7:31
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DVWzmZmIsDWYkpH3uQSBgp9I5zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
194.87.86.0/24
194.87.91.0/24
194.87.188.0/24
195.58.56.0/24
195.133.84.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:12:6d:26:7b:5e:3f:50:c1:80:44:b2:bf:9e:93:03:ec:1f:
3b:9d:e0:00:23:47:17:df:56:15:ec:78:90:16:7e:d8:1d:64:
f6:30:6e:bd:ea:80:85:b7:89:cd:4d:3e:73:f0:2e:64:bf:12:
c5:e4:a3:5c:75:d2:68:79:e7:7a:ad:fb:40:b2:78:6d:d7:77:
a2:ae:42:3b:ae:53:99:2d:04:45:f8:04:7f:ad:8c:da:2b:a8:
c5:c9:eb:f0:c8:86:1a:5a:cc:ab:5c:2d:bf:91:e8:ce:9f:ce:
b6:26:54:c5:36:49:02:0b:a5:d2:ae:38:58:3c:73:a7:94:d6:
d6:01:f3:0a:e0:5b:04:fa:a9:b2:2b:a5:cd:f9:82:8d:f1:e8:
24:ed:70:b9:7a:f1:50:e7:a7:71:a7:f1:ab:af:ff:12:b0:4d:
ba:c1:8f:3d:80:00:2f:03:20:d9:35:6f:b2:b0:0e:59:83:19:
ec:1c:17:4a:4d:51:78:b5:19:86:9f:97:ba:ce:48:c7:56:13:
09:b7:33:5e:4f:36:90:b4:5f:f4:31:94:d6:64:6e:86:88:29:
d9:95:88:f9:cd:3c:b8:69:eb:fc:3a:4f:11:fa:74:d1:0d:10:
d0:b7:9d:ae:bb:a3:ba:68:00:59:8b:e4:c1:77:d5:fb:00:1c:
9e:db:c0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org