Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/F0wVajy5uueH1GEo2UkO_lWUVsI.roa
File: F0wVajy5uueH1GEo2UkO_lWUVsI.roa (raw, json)
Hash identifier: vIiE44eLfTuH8px9IFAG5C3kGxJT9Uy7zuRBsThmNgI=
Subject key identifier: 17:4C:15:6A:3C:B9:BA:E7:87:D4:61:28:D9:49:0E:FE:55:94:56:C2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A6B1F180AA27A735F0917D702A7009801
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/F0wVajy5uueH1GEo2UkO_lWUVsI.roa
Signing time: Wed 06 Sep 2023 15:31:54 +0000
ROA not before: Wed 06 Sep 2023 15:31:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.26.0/23 maxlen: 23
195.58.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6b:1f:18:0a:a2:7a:73:5f:09:17:d7:02:a7:00:98:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 6 15:31:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=174c156a3cb9bae787d46128d9490efe559456c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:3b:14:e5:c8:2f:b6:e4:29:b7:2c:47:4d:
a4:21:d2:77:14:c4:0f:f6:8a:71:82:f4:2b:50:47:
72:4b:61:17:d0:74:7f:ce:db:a5:b6:2b:38:57:21:
66:ad:5e:43:eb:d7:0f:73:b0:de:f5:6e:8a:96:55:
24:4b:03:fe:84:78:44:cc:a8:21:c8:bb:cd:b5:82:
13:b6:05:0d:57:3d:ed:ae:14:d9:49:df:15:9b:8a:
35:2e:38:07:b8:15:b3:3c:d2:cb:ad:95:8d:be:5c:
dd:d5:00:23:05:cb:5b:15:ed:75:25:d4:8c:16:06:
2f:bc:39:6d:d7:f7:7d:ad:71:2d:46:6a:91:c0:62:
78:e8:0a:15:7f:32:a4:e7:08:09:c9:a1:df:0b:84:
bf:9b:af:b2:89:b9:2d:fa:c3:fd:b7:a5:05:a0:ee:
42:8a:e7:ef:f7:55:2e:17:9b:56:38:90:12:f5:f9:
70:f6:ef:60:3f:7e:eb:88:cb:0e:34:cb:be:51:03:
c7:52:ac:89:0f:d9:2a:8a:54:7d:c1:92:1f:44:21:
3f:d5:74:7c:e5:5c:8f:b1:1e:2c:20:34:16:a0:e2:
e6:94:27:ac:65:df:79:ed:8b:aa:3f:23:d0:0b:ca:
99:0a:d8:20:a7:31:15:ff:a2:ce:7f:12:ce:7b:c4:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4C:15:6A:3C:B9:BA:E7:87:D4:61:28:D9:49:0E:FE:55:94:56:C2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/F0wVajy5uueH1GEo2UkO_lWUVsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.181.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.24.0/22
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:ed:be:9c:8d:5c:91:23:e5:c8:a1:f3:62:93:17:2b:b4:dc:
2c:0c:46:a9:05:7f:81:92:c2:48:ef:09:2f:ee:d3:2d:27:ad:
71:4a:d0:5d:0c:8b:da:dc:65:74:73:69:92:21:bc:8a:4b:e5:
d1:a6:d5:e7:97:64:87:63:75:9a:76:e2:ff:20:98:e5:91:40:
b4:d0:fe:0d:68:e8:b5:64:11:4f:a7:9c:25:0a:02:e4:12:32:
01:8c:73:42:90:62:82:83:f6:bb:40:11:4d:4a:88:f4:61:d9:
ff:32:eb:79:8b:25:04:68:b4:03:13:64:5d:1d:f2:f2:95:d4:
80:57:02:0f:a4:54:fd:ea:0a:89:0b:17:96:49:09:f2:81:29:
34:8b:f4:79:27:74:32:c0:66:91:7e:62:83:5a:c9:16:7d:35:
8b:4a:e8:24:0d:9b:ca:bf:82:88:0a:24:a4:02:c3:f4:1e:63:
8b:d3:bf:40:11:cd:b9:52:f6:13:46:8a:34:b4:32:6f:27:af:
22:32:f8:9f:48:8e:69:c3:bd:71:40:d3:95:e4:34:27:4d:aa:
29:95:af:ed:85:49:ad:ca:22:77:3e:0d:8d:15:ee:df:f6:38:
9f:dd:f5:0c:e1:91:1f:ec:19:3a:15:c6:66:76:4d:9d:f0:e1:
e0:ea:bc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 18:27:25 2023 by rpki-client on console-fra.rpki-client.org