Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DflUXxtkIDN9q9GFHMiQ0ZJibl4.roa
File: DflUXxtkIDN9q9GFHMiQ0ZJibl4.roa (raw, json)
Hash identifier: D1aL+Pq+lhDKYpszf7ivmzBj3V6Mpy8n0Ia4Zr8SXLM=
Subject key identifier: 0D:F9:54:5F:1B:64:20:33:7D:AB:D1:85:1C:C8:90:D1:92:62:6E:5E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AACA9E6599478C558E4B2691F3D32BEF7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DflUXxtkIDN9q9GFHMiQ0ZJibl4.roa
Signing time: Tue 19 Sep 2023 08:58:50 +0000
ROA not before: Tue 19 Sep 2023 08:58:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:a9:e6:59:94:78:c5:58:e4:b2:69:1f:3d:32:be:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 19 08:58:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0df9545f1b6420337dabd1851cc890d192626e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:47:96:fa:96:93:7d:64:ad:ef:09:16:f7:
c1:3c:da:0d:cb:df:78:5e:80:ee:d0:58:a1:31:8c:
ee:e9:dd:5e:55:97:ce:5c:09:07:96:ea:6b:56:11:
df:eb:96:50:8c:90:98:3e:6d:ab:85:cc:5b:49:57:
e8:88:d5:13:71:cc:11:61:68:b6:ed:9c:be:b7:de:
aa:d0:60:69:eb:83:b6:2a:fa:7a:f5:90:ab:07:cf:
c4:50:18:87:7a:7d:67:22:68:5a:f2:41:14:83:f9:
f5:f0:50:73:bb:c8:1c:4e:cf:82:1a:d1:cf:a2:76:
f2:6f:95:09:17:cd:28:de:bc:a8:a9:7c:3e:94:73:
03:e7:c8:05:01:37:f1:18:53:d4:dd:15:8f:01:91:
3f:8b:96:80:be:7f:5e:c4:a6:a8:e7:ac:6e:58:e1:
c2:f9:64:c7:72:22:5e:ce:86:7c:17:9b:2c:66:ba:
e9:44:99:07:a4:6f:7f:00:4d:31:3a:9e:e6:5c:60:
6a:ea:5c:6f:00:17:35:73:88:3a:63:aa:b8:6c:15:
5e:c1:c3:ab:08:c6:ba:f0:7d:2e:8e:e3:f6:73:e7:
99:e3:89:eb:55:7b:21:f6:84:19:2a:10:df:e0:5f:
02:18:51:e9:4d:74:fa:70:ac:cf:ac:b5:70:e2:45:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:54:5F:1B:64:20:33:7D:AB:D1:85:1C:C8:90:D1:92:62:6E:5E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DflUXxtkIDN9q9GFHMiQ0ZJibl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.21.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.36.0/24
195.58.53.0-195.58.54.255
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
Signature Algorithm: sha256WithRSAEncryption
66:ea:6d:ff:a5:51:7d:9a:ee:15:c9:b2:a4:b1:0e:3e:25:32:
b4:12:d8:4a:4f:ea:e2:3f:44:d5:3a:4b:06:1f:ee:18:16:af:
c0:ab:4e:e3:6b:cb:31:e1:5c:7b:17:af:89:39:f3:3e:2d:ba:
43:05:cb:9f:3d:16:d5:2b:a6:f1:fa:6b:b0:ac:68:f5:2b:6a:
66:2b:26:28:72:5f:08:23:31:ff:54:07:b3:e3:43:80:dc:e4:
c0:77:f1:49:97:e5:28:22:2a:e1:aa:1f:29:79:42:b6:8d:37:
2f:19:3a:3f:4b:be:96:92:f0:59:b2:44:72:98:e3:e1:bb:d7:
fb:c0:ad:75:a1:45:e0:5b:2e:8f:c4:47:0a:2b:af:89:36:ab:
f2:f7:f7:84:03:09:b4:b7:21:76:f3:2c:c1:fb:68:30:0b:91:
2c:e4:cc:dc:30:0b:3b:74:31:17:a6:fc:60:92:d4:89:d4:da:
b7:79:11:32:9a:c9:58:16:7e:39:fc:c0:bb:66:6f:b0:a8:88:
a4:fb:2b:29:4f:76:f5:e3:ef:46:e7:7f:83:c5:2d:01:d3:f1:
28:96:0b:d3:e8:bb:b5:2f:47:7d:97:4b:68:d0:69:99:6f:f9:
5a:9a:cb:f9:99:2d:1c:21:5c:20:c9:e0:02:bf:84:b2:9f:d9:
36:be:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 08:42:02 2023 by rpki-client on console-fra.rpki-client.org